Publié hier
VP – Cybersecurity Governance, Risk & Compliance
@ Iceberg
Toronto, Ontario
En bref
Iceberg is hiring a full-time VP of Cybersecurity Governance, Risk & Compliance reporting to the CISO, based in the Greater Toronto Area. The role leads an eight-person team to modernise a GRC function, introduce advanced risk methodologies and apply AI and automation, working closely with security engineering and architecture. Financial services or another highly regulated environment experience is essential, and applicants must be Canadian citizens or permanent residents with no visa sponsorship.
Responsabilités :
- Lead and develop a GRC team of about eight people
- Modernise the GRC function and introduce advanced risk methodologies
- Apply AI and automation to risk assessments and control monitoring
- Work closely with security engineering and architecture teams
- Communicate technical risk to the CISO and executive leadership
Résumé des exigences :
- Proven experience transforming a GRC function
- Built and motivated high-performing GRC teams
- Strong technical credibility with engineering and architecture teams
- Experience in financial services or another highly regulated environment
- Knowledge of AI and automation in risk management
- Canadian citizen or permanent resident based in the Greater Toronto Area
Source et dates
Type de source non vérifié · apify-linkedin
- Date publiée par l’employeur
- 2026-11-09
- Première détection par notre source
- 2026-11-10
- Mise à jour du dossier source
- 2026-11-10
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Haute direction |
| Domaine | TI |
| Gestion d’équipe | Oui |
| Heures par semaine | 40 (estimé) |
| Milieu de travail | Bureau |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Iceberg
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 2 |
I'm working with a global financial services organisation looking to appoint a VP of Cybersecurity Governance, Risk & Compliance, reporting directly to the CISO.
I'll be upfront. We're not looking for a traditional GRC leader. If your experience has primarily involved maintaining existing governance frameworks, managing audits and overseeing compliance processes, unfortunately I won't be able to consider you for this opportunity.
The reason is that the CISO wants someone who has genuinely modernised a GRC function, introduced more sophisticated approaches to risk management and can work extremely closely with security engineering and architecture teams.
The CISO wants someone who understands the technology behind the risks being assessed, can engage with engineers on technical controls and security architecture, and translate that understanding into more meaningful risk assessments and decisions.
AI and automation are also central to the vision for the function, particularly how they can improve risk assessments, control monitoring and the wider approach to GRC.
This is also a significant leadership opportunity. You'll inherit a team of around eight people, with the responsibility to develop and motivate the team, raise standards and introduce new ways of working.
This is what the CISO is looking for in a GRC leader:
- A proven leader who has built, developed and motivated high-performing GRC teams.
- Someone who can demonstrate they've modernised or transformed a GRC function, rather than simply maintained one.
- Strong technical credibility, with experience working closely alongside security engineering, architecture and technology teams.
- Experience introducing more advanced risk assessment methodologies that go beyond traditional compliance-led approaches.
- An understanding of how AI and automation can be used to improve risk management and GRC processes.
- Strong experience across security governance, policies, standards, risk management, control assurance and regulatory requirements.
- Experience within financial services or another highly regulated environment is essential.
- Someone who can communicate technical risk effectively to the CISO and wider executive leadership.
Location: Candidates must be based in the Greater Toronto Area.
Work authorisation: Applicants must be Canadian citizens or Canadian permanent residents. Visa sponsorship is not available.
If you've led GRC transformation, developed strong teams and enjoy working closely with engineering to improve how security risk is managed, I'd be interested in speaking with you.
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.