Security, Data Governance & AI Enablement Lead

Location: Hybrid – Maple or Innisfil, Ontario, Canada

Reports to: VP, Business Systems & IT

Salary Range: $125,000–$155,000 CAD (commensurate with experience)

We are seeking a Security, Data Governance & AI Enablement Lead to strengthen information security, access governance, and data foundations across the organization, while enabling the responsible use of AI technologies. This role is designed for a senior, hands‑on professional who can operate autonomously, partner effectively with managed service providers (MSPs), and balance security controls with business practicality in a growing, regulated manufacturing environment.

This is a lead individual contributor role, with significant influence over standards, priorities, and execution.

• Design, document, and implement role based access models across business applications and SaaS platforms
• Lead organization wide access reviews and clean up initiatives, enforcing least privilege principles
• Own ongoing access governance, including periodic reviews and exception handling
• Improve Joiner–Mover–Leaver processes to ensure access is complete, timely, and auditable

• Establish practical data classification and sensitivity standards aligned to business needs
• Design and roll out governance controls for SharePoint Online, Teams, and One Drive
• Reduce data sprawl and improve information findability and trust
• Partner with business teams to clarify where and how information should be stored and shared
• Provide guidance and training to improve day to day data handling practices

• Act as the internal owner for information security governance
• Coordinate and govern security services delivered by the MSP and other vendors
• Support customer cybersecurity questionnaires and assessments
• Drive steady, pragmatic security maturity aligned with NIST CSF / ISO 27001 principles, without heavy audit overhead

• Prepare data foundations required to safely support Copilot and other AI tools
• Identify and prioritize practical AI use cases that deliver business value
• Ensure AI adoption aligns with established security and data governance standards
• Focus on enablement and readiness rather than model development or data science.

• Act as an internal technical resource to support business users and answer day-to-day technology questions
• Provide occasional hands‑on support for select end‑user issues (e.g., hardware, peripherals, connectivity), without being the primary help desk function
• Assist with hardware setup, deployment, and lifecycle activities in coordination with IT leadership and MSP partners
• Identify opportunities to improve business processes through technology and implement practical solutions using existing platforms
• Design and develop lightweight solutions such as reports, workflows, and applications (e.g., Power Apps, SharePoint, Fusion Manage configurations)
• Contribute to continuous improvement of internal tools, reporting, and system usage

• 5–10+ years experience in IT security, identity/access governance, or data governance
• Strong working knowledge of Microsoft 365 (Entra , SharePoint Online, Teams)
• Demonstrated experience designing access models across multiple systems
• Experience working with managed service providers and external security vendors
• Practical understanding of cybersecurity frameworks (NIST CSF, ISO 27001 concepts)
• Ability to influence without authority and navigate resistance to change

• Experience in manufacturing, engineering, or regulated industries
• Familiarity with Microsoft Purview, sensitivity labels, or DLP concepts
• Exposure to AI readiness initiatives and AI deployments
• Experience simplifying complex permission or data environments
• Experience with Power Apps, Power Automate, and SharePoint solution development

• Clear, documented access roles with minimal exceptions
• Clean, governed SharePoint environments that users trust and can find information in
• Improved outcomes on customer cybersecurity reviews
• Data foundations ready to support AI safely and effectively
• Strong internal credibility as a trusted technical leader

• Increasing customer cybersecurity expectations
• Organizational growth and site expansion
• Responsible adoption of AI technologies
• Reducing operational risk without slowing the business