Cybersecurity Governance, Risk & Compliance Lead

Vacances Air Canada / Air Canada Vacations; Montreal (administrative region); On-site; CAD 120,000 - 180,000; Full time

Job summary

Air Canada Vacations seeks a Partner, Cybersecurity Governance, Risk and Compliance to lead governance across strategic programs (Juniper, CRM, CDP) and design a structured framework aligned with NIST or ISO controls. You will modernize cybersecurity policies, classify assets, and ensure security is integrated into all projects from inception, with accountability across the enterprise and AI governance responsibilities.

This is a 24-month onsite role based in Montreal (YUL).

Qualifications

• Experience building cybersecurity governance across large programs.
• Ability to define control catalogs and governance models.
• Strong knowledge of industry standards (NIST/ISO 27001).
• Experience with data classification and asset management.

Responsibilities

• Establish security governance structures for strategic programs.
• Design and implement an enterprise cybersecurity framework.
• Modernize cybersecurity policies and ensure cloud/SaaS alignment.
• Define asset inventory and data classification models.
• Lead risk management and compliance processes.
• Define AI governance, approvals, and monitoring mechanisms.

Skills

Cybersecurity governance

Risk assessment

Policy development

AI governance

Stakeholder management

Tools

NIST Cybersecurity Framework

ISO 27001

Job description

Air Canada Vacations seeks a Partner, Cybersecurity Governance, Risk and Compliance to lead governance across strategic programs (Juniper, CRM, CDP) and design a structured framework aligned with NIST or ISO controls. You will modernize cybersecurity policies, classify assets, and ensure security is integrated into all projects from inception, with accountability across the enterprise and AI governance responsibilities.

This is a 24-month onsite role based in Montreal (YUL).