Senior Manager - CISO Governance and Oversight (Global Security

What is the Opportunity?

The Sr. Manager, CISO Governance will play a critical role with supporting ongoing Cyber and Risk governance maturity and transformation initiatives across the Office of the CISO and Cyber operations. This role will be responsible for strengthening governance routines, enhancing risk and control visibility, and driving consistency in Cyber and Risk management practices across Cyber Security domains. The ideal candidate will bring a strong blend of strategic thinking and execution capability, with experience in building scalable governance models that enable and aggregate views, promote actionable reporting, and align with evolving business expectations.

• Design, implement, and continuously enhance governance activities for CISO and Cyber operations.
• Ensure alignment with enterprise Cyber risk management and governance requirements.
• Drive consistency governance routines, adherence to risk and control framework requirements, and issue management practices across the organizations.
• Establish governance mechanisms to deliver a comprehensive, aggregate across applicable Cyber domains with clear reporting and oversight.
• Identify systemic risks, emerging trends, and concentration risks to inform leadership decision-making.
• Develop and deliver clear, concise, and actionable reporting tailored for senior management, risk and technology committees, etc.
• Review, challenge, track and report key performance for Cyber operations and service delivery requirements (i.e. IGAs).
• Facilitate governance forums and drive executive-level discussions.
• Monitor emerging threats and trends within the technology landscape, including but not limited to, cybersecurity, operational and third-party risks.

• Minimum of 7 years in Technology Risk Management, Audit, Cybersecurity, or Governance roles with a strong focus on risk mitigation and remediation.
• Proven experience delivering enterprise-level reporting and aggregate risk insights.
• Strong analytical, communication, and stakeholder management skills.
• Strong understanding of risk management frameworks and standards across the US or Canada (e.g., regulatory compliance, enterprise risk, internal controls, SOX, ITGC); expertise with UK and APAC regulators, considered beneficial.
• Exceptional relationship-building skills, with the ability to collaborate across diverse functions and levels of the organization.
• Strong analytical and problem-solving skills, with the ability to create scalable, repeatable processes that simplify risk management in IT operations.
• Industry framework knowledge, i.e., NIST, COBIT, FedRAMP, FFIEC.

• Industry related certifications, i.e., CRISC, CISA, CISM, CISSP, etc.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• Opportunities to do challenging work.

Data Gathering Analysis, Effectiveness Measurement, Ethical Business, Internal Controls, Key Performance Indicators (KPI), Key Performance Indicators (KPI) Improvement, Key Risk Indicators, Long Term Planning, Process Management, Results-Oriented, Risk Management, Security Risk, Strategic Thinking

16 YORK ST:

TORONTO

Toronto

Canada

37.5

Full time

TECHNOLOGY AND OPERATIONS

Regular

Salaried