Cybersecurity Grc Manager

3 weeks ago


Ottawa, Canada Chartered Professional Accountants of Canada Full time

**About Chartered Professional Accountants of Canada**

Chartered Professional Accountants of Canada (CPA Canada) works collaboratively with the provincial, territorial and Bermudian CPA bodies, as it represents the Canadian accounting profession, both nationally and internationally. This collaboration allows the Canadian profession to champion best practices that benefit business and society, as well as prepare its members for an ever-evolving operating environment featuring unprecedented change. Representing more than 220,000 members, CPA Canada is one of the largest national accounting bodies worldwide**.**

**About the opportunity**
- CPA Canada supports a flexible hybrid working environment. This role can be aligned to any of our four offices; Toronto, Montreal, Ottawa or Burnaby. A fully remote option may be considered.

**What you'll do**

In this role, you will:

- Ensure continuous improvement and adoption of the risk management and governance framework.
- Manage the Cybersecurity Risk Methodology and Risk Registry.
- Lead the risk assessments framework and reporting in harmony with the Enterprise Risk Assessment methodology.
- Manage and ensure the vitality of the governance framework: policies, standards, procedures, etc.
- Manage the communication around cyber risk, security governance and security compliance with internal and external stakeholders.
- Communicate with stakeholders on risk management efforts, issues, concerns, and successes through risk reporting dashboards, KPI-KRI for Senior Executives, Board of Directors, etc.
- Define a compliance program performing regular assessments of all technology solutions and vendors (existing/new), ensuring compliance to the defined security policies, standards & procedures.
- Participate at the initial phase of projects to identify & communicate security issues to facilitate standard compliance and proper risk management.
- Provide regular reporting for senior management and related stakeholder groups, ensuring continuous oversight of the enterprise security risk profile.
- Monitoring industry standards, laws and regulations and make appropriate changes to the governance framework.
- Stay informed on emerging technologies, key business drivers, evolving threats and opportunities from both the business and within the information security discipline.
- Lead cybersecurity governance-related initiatives, e.g., awareness, data, and system classification.
- Ensure continuous improvement and adoption of the Information Security Governance Framework.
- Manage the Cybersecurity Risk Methodology and Risk Registry.
- Ensure the vitality of the Information Security Governance Framework.
- Manage the communication around cyber risk, security governance and security compliance with internal and external stakeholders.
- Communicate with stakeholders on risk management efforts, issues, concerns, and successes through risk reporting dashboards for Senior Executives, Board of Directors, etc.
- Define a compliance program ensuring compliance with the Information Security Governance Framework.
- Manage the Cyber Third-Party Management assessments in alignment with the overarching Third Party Risk Management Framework.
- Participate at the initial phase of projects to identify & communicate security issues to facilitate standard compliance and proper risk management.
- Certify that controls and security gates are effective and that issues identified in projects are resolved to ensure compliance or tracked for proper risk management.
- Maintain vitality and provide updates to the CISO report pertaining to Benchmark, Governance, Awareness, Phishing, and policy management dashboard.
- Provide regular reporting for senior management and related stakeholder groups, ensuring continuous of enterprise security risk profile oversight.
- Monitor industry standards, laws and regulations and make appropriate changes to the governance framework in collaboration with internal and external stakeholders.
- Stay informed on emerging technologies, key business drivers, evolving threats and opportunities from the business and within the information security discipline.
- Oversee cybersecurity governance-related initiatives, e.g., awareness, data classification and labelling.

**What we're looking for**
- University degree in Computer Science, Information Technology, Software Engineering, Business Administration or relevant educational and professional experience
- Demonstrated commitment to the field of Information Security through current accreditation from SANS, ISC2 or ISACA (e.g., GSEC, CISSP, CISA, CRISC). Project management designation is an asset but not required
- Deep knowledge of cloud computing security and IaaS, PaaS or SaaS environments
- Working experience in defining governance framework and conducting risk assessments
- Understand the business requirements and respond accordingly from an information security standpoint
- Ability to work independently and as part of a team,



  • Ottawa, Canada High Tech Genesis Inc. Full time

    High Tech Genesis is seeking a highly skilled Cyber Security GRC (Governance, Risk, and Compliance) Specialist to join our team. The ideal candidate will have expertise in developing and implementing GRC tools, as well as a strong understanding of cybersecurity compliance processes and risk management frameworks. The aim of this initiative is to bolster...


  • Ottawa, Canada High Tech Genesis Inc. Full time

    High Tech Genesis is seeking a highly skilled Cyber Security GRC (Governance, Risk, and Compliance) Specialist to join our team. The ideal candidate will have expertise in developing and implementing GRC tools, as well as a strong understanding of cybersecurity compliance processes and risk management frameworks. The aim of this initiative is to bolster...


  • Ottawa, Canada High Tech Genesis Inc. Full time

    High Tech Genesis is seeking a highly skilled Cyber Security GRC (Governance, Risk, and Compliance) Specialist to join our team. The ideal candidate will have expertise in developing and implementing GRC tools, as well as a strong understanding of cybersecurity compliance processes and risk management frameworks. The aim of this initiative is to bolster...


  • Ottawa, Canada High Tech Genesis Inc. Full time

    High Tech Genesis is seeking a highly skilled Cyber Security GRC (Governance, Risk, and Compliance) Specialist to join our team. The ideal candidate will have expertise in developing and implementing GRC tools, as well as a strong understanding of cybersecurity compliance processes and risk management frameworks. The aim of this initiative is to bolster...


  • Ottawa, Canada CANARIE Inc. Full time

    The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The...


  • Ottawa, Canada CANARIE Inc. Full time

    The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The...


  • Ottawa, Canada CANARIE Inc. Full time

    The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The...


  • Ottawa, Canada CANARIE Inc. Full time

    The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The...


  • Ottawa, ON, Canada CANARIE Inc. Full time

    The Cybersecurity Service Analyst will be accountable for supporting institutions, in both English and French, through the National Cybersecurity Assessment (NCA) lifecycle, including management of the assessment platform, ensuring that the NCA reporting process is resilient and efficient, and that NCA reports provide value to participants. The...


  • Ottawa, Canada CANARIE Full time

    About UsCANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada CANARIE Full time

    About Us CANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada CANARIE Full time

    About UsCANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada CANARIE Full time

    About Us CANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage. Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada CANARIE Full time

    About UsCANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada CANARIE Full time

    About UsCANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators to...


  • Ottawa, Canada Canarie Full time

    About UsCANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage.Together with our 13 provincial and territorial partners, we form Canadas National Research and Education Network (NREN). This ultra-high-speed network connects Canadas researchers, educators, and innovators to each...


  • Ottawa, Canada Hydro Ottawa Full time

    One of life’s great opportunities is the opportunity to coach, mentor and lead a team. To pass your knowledge and wisdom on to others. To support and enable them to do their very best work and to encourage them in difficult times. And in doing so, to leave a legacy. This could be the position you have been waiting for; Manager, Cybersecurity, leading the...


  • Ottawa, ON, Canada CANARIE Full time

    About Us CANARIE connects Canada to the world. Our programs equip researchers, students, and startups in Canada to excel on the global stage. Together with our 13 provincial and territorial partners, we form Canada’s National Research and Education Network (NREN). This ultra-high-speed network connects Canada’s researchers, educators, and innovators...


  • Ottawa, Canada CANARIE Inc. Full time

    The Manager, NREN Cybersecurity Services will be primarily focused on the National Cybersecurity Assessment (NCA) service and accountable for the management of the team and the development and delivery of the service. The responsibilities of this role may expand to include management of other services within the National Research and Education Network...


  • Ottawa, Canada CANARIE Inc. Full time

    The Manager, NREN Cybersecurity Services will be primarily focused on the National Cybersecurity Assessment (NCA) service and accountable for the management of the team and the development and delivery of the service. The responsibilities of this role may expand to include management of other services within the National Research and Education Network...