Cybersecurity Governance Leader | GRC & Risk Oversight

Toromont Cat; Canada; Remote; CAD 104,000 - 130,000; Full time

Benefits offered by this job

Flexible schedules

Eastern Canada locations

Job summary

Toromont Cat in Concord, Ontario seeks a Manager, Cybersecurity Governance to lead the design, implementation and ongoing maturity of our cybersecurity governance, risk and compliance program across IT and OT/ICS. You will translate technical risk into business-focused reporting for senior leadership.

You will oversee a team of Governance Analysts, collaborate with JSOC, IAM, Legal, Privacy, Compliance and Internal Audit, and drive policy development, audits and awareness initiatives while

Qualifications

• 12+ years of progressive cybersecurity, risk, or governance experience.
• 6+ years of team leadership.
• Bachelor’s degree in Business Administration, Information Technology, Computer Science, or Engineering (or equivalent).
• Preferred certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer.

Responsibilities

• Lead and mature Toromont’s Cybersecurity GRC framework across IT and OT/ICS.
• Drive enterprise cyber risk identification, assessment, prioritization, and tracking; deliver AI‑enabled dashboards and control‑monitoring metrics.
• Own cybersecurity policy development and maintenance; serve as primary contact for internal/external/regulatory audits, including ICFR cyber controls.
• Lead security awareness training, phishing simulations, and facilitate cyber tabletop and simulation exercises across IT and OT/ICS.
• Produce executive‑level dashboards and presentations on cyber risk posture, control maturity, and audit status; support leadership communications and planning.
• Manage cybersecurity governance initiatives and projects from planning through execution, ensuring effective collaboration across JSOC, IAM, Technology, and business unit teams.
• Lead and mentor Cybersecurity Governance Analysts; partner with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit; monitor evolving regulatory requirements.

Skills

Cybersecurity leadership

GRC

Risk management

Stakeholder communication

Team leadership

Education

Bachelor’s degree in Business Admin/IT/CS/Engineering

Tools

NIST

ISO 27001

COBIT

Job description

Toromont Cat in Concord, Ontario seeks a Manager, Cybersecurity Governance to lead the design, implementation and ongoing maturity of our cybersecurity governance, risk and compliance program across IT and OT/ICS. You will translate technical risk into business-focused reporting for senior leadership.

You will oversee a team of Governance Analysts, collaborate with JSOC, IAM, Legal, Privacy, Compliance and Internal Audit, and drive policy development, audits and awareness initiatives while