Cybersecurity Risk Leader: AI & Cloud Governance

Kinaxis; Ottawa, Toronto; Hybrid; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Flexible vacation

Flexible work options

Well-being programs

Mentorship programs

Hackathons

Job summary

Kinaxis is seeking a Cybersecurity Risk Manager to lead enterprise risk identification, assessment, and remediation, influencing cross-functional teams across engineering, product, legal, and compliance. The role emphasizes governance, reporting, and continuous improvement of risk management practices.

The candidate should bring 5–7 years in cybersecurity risk, strong knowledge of NIST/ISO/SOC frameworks, and experience operationalizing risk programs into scalable processes.

Qualifications

• University degree or equivalent practical experience in Information Security, Computer Science, or related field.
• 5–7 years of progressive experience in cybersecurity risk, IT risk, audit, or compliance.
• Strong knowledge of risk and control frameworks (NIST CSF, NIST SP 800 53, ISO 27001, SOC 2)
• Demonstrated ability to operationalize risk frameworks into scalable processes, metrics, and reporting.

Responsibilities

• Lead end-to-end execution of cybersecurity risk identification, assessment, prioritization, and treatment planning across enterprise systems and services.
• Ensure consistent application of risk frameworks and methodologies aligned to enterprise governance and regulatory expectations.
• Oversee control evaluation, residual risk analysis, and risk acceptance recommendations with clear rationale.
• Maintain a complete, accurate cybersecurity risk register with ownership, status, and evidence.
• Deliver management-ready risk reporting and insights for informed decision-making, prioritization, and escalation.
• Align cybersecurity risk practices to FedRAMP, SOC, ISO 27001 and related frameworks.

Skills

NIST CSF knowledge

Risk assessment

GRC tooling

Cross-functional influence

Education

University degree in Information Security

Tools

GRC platforms

Job description

Kinaxis is seeking a Cybersecurity Risk Manager to lead enterprise risk identification, assessment, and remediation, influencing cross-functional teams across engineering, product, legal, and compliance. The role emphasizes governance, reporting, and continuous improvement of risk management practices.

The candidate should bring 5–7 years in cybersecurity risk, strong knowledge of NIST/ISO/SOC frameworks, and experience operationalizing risk programs into scalable processes.