Manager, Cybersecurity Governance

Toromont Cat; Canada; Remote; CAD 104,000 - 130,000; Full time

Benefits offered by this job

Flexible schedules

Eastern Canada locations

Job summary

Toromont Cat in Concord, Ontario seeks a Manager, Cybersecurity Governance to lead the design, implementation and ongoing maturity of our cybersecurity governance, risk and compliance program across IT and OT/ICS. You will translate technical risk into business-focused reporting for senior leadership.

You will oversee a team of Governance Analysts, collaborate with JSOC, IAM, Legal, Privacy, Compliance and Internal Audit, and drive policy development, audits and awareness initiatives while

Qualifications

• 12+ years of progressive cybersecurity, risk, or governance experience.
• 6+ years of team leadership.
• Bachelor’s degree in Business Administration, Information Technology, Computer Science, or Engineering (or equivalent).
• Preferred certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer.

Responsibilities

• Lead and mature Toromont’s Cybersecurity GRC framework across IT and OT/ICS.
• Drive enterprise cyber risk identification, assessment, prioritization, and tracking; deliver AI‑enabled dashboards and control‑monitoring metrics.
• Own cybersecurity policy development and maintenance; serve as primary contact for internal/external/regulatory audits, including ICFR cyber controls.
• Lead security awareness training, phishing simulations, and facilitate cyber tabletop and simulation exercises across IT and OT/ICS.
• Produce executive‑level dashboards and presentations on cyber risk posture, control maturity, and audit status; support leadership communications and planning.
• Manage cybersecurity governance initiatives and projects from planning through execution, ensuring effective collaboration across JSOC, IAM, Technology, and business unit teams.
• Lead and mentor Cybersecurity Governance Analysts; partner with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit; monitor evolving regulatory requirements.

Skills

Cybersecurity leadership

GRC

Risk management

Stakeholder communication

Team leadership

Education

Bachelor’s degree in Business Admin/IT/CS/Engineering

Tools

NIST

ISO 27001

COBIT

Job description

Toromont is looking for a Manager, Cybersecurity Governance to join our team in Concord. The Manager, Cybersecurity Governance leads the design, implementation, and ongoing maturity of Toromont’s cybersecurity governance, risk, and compliance program across IT and OT/ICS environments. The role provides cyber risk and regulatory expertise, ensuring frameworks, controls, and audit obligations are met while translating technical risk into clear, business focused reporting for senior leadership.
The Manager oversees a team of Governance Analysts and partners closely with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit across Toromont’s national operations to strengthen enterprise cyber governance and risk management.

Compensation

$103,625 - $129,533

The listed base salary is just one component of our total rewards package, and performance-based or discretionary bonuses may be available.

As a Manager, Cybersecurity Governance, YOU will experience:

• Working within one of the safest organizations in the industry where your safety and well-being are our most important priority
• Working for the best in class equipment dealer and with the premium Caterpillar brand
• Opportunities to continuously Learn, Grow and Develop with our Toromont team through our internal Training teams that are geared for your success
• Competitive total rewards including: wages, benefits, and premiums (as eligible)
• An opportunity for flexible work schedules and opportunities across multiple locations across Eastern Canada

In a typical day, YOU will:

• Lead and mature Toromont’s Cybersecurity GRC framework across IT and OT/ICS, aligned to NIST, ISO 27001, COBIT, and emerging AI/agentic‑risk governance.
• Drive enterprise cyber risk identification, assessment, prioritization, and tracking; deliver AI‑enabled dashboards and control‑monitoring metrics.
• Own cybersecurity policy development and maintenance; serve as primary contact for internal/external/regulatory audits, including ICFR cyber controls.
• Lead security awareness training, phishing simulations, and facilitate cyber tabletop and simulation exercises across IT and OT/ICS.
• Produce executive‑level dashboards and presentations on cyber risk posture, control maturity, and audit status; support leadership communications and planning.
• Manage cybersecurity governance initiatives and projects from planning through execution, ensuring effective collaboration across JSOC, IAM, Technology, and business unit teams.
• Lead and mentor Cybersecurity Governance Analysts; partner with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit; monitor evolving regulatory requirements.

Must-haves for this role:

• 12+ years of progressive cybersecurity, risk, or governance experience, 6+ years of team leadership
• A bachelor’s degree in Business Administration, Information Technology, Computer Science, or Engineering (or equivalent experience)
• Preferred certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer.

About Toromont Cat

With over 4,000 employees and 56 locations from Manitoba to Newfoundland, Toromont Cat has a proven track record, industry knowledge, dealership infrastructure, and service mindset to ensure our Construction, Mining, and Power Generation customers succeed. At Toromont Cat, work is built around people's strengths, our products, technology and an outstanding customer experience and through our strong partnership with Caterpillar ™,Toromont Cat takes care of our employees who take care of our customers! When you join ourteam, you become a member of the Toromont family. Your success is our success!

Artificial Intelligence (AI)

Please note that our hiring processes involve the use of artificial intelligence (AI) tools to assist with screening, assessing, or selecting candidates; all final decisions are reviewed by our Talent Acquisition team to ensure fairness and compliance with applicable laws