Senior Cyber Risk & GRC Leader

Tundra Technical Solutions; Toronto; On-site; CAD 120,000 - 180,000; Full time

Job summary

Tundra Technical Solutions is seeking a senior Risk Management professional to lead the Client-wide cybersecurity program and governance framework in Toronto. The role focuses on identifying, assessing, and mitigating enterprise risks across divisions, agencies, and partnerships.

You will oversee risk remediation, develop GRC policies, and advise senior leadership on risk decisions to strengthen the organization's security posture and regulatory alignment.

Qualifications

• 10+ years of experience in Risk Management, focused on Cyber Risk Management.
• Extensive knowledge of risk concepts: vulnerability, threat, likelihood, impact, mitigation, remediation.
• Extensive expertise in Information Security or Governance, Risk & Compliance (GRC).
• Experience with third party assessments, especially with SMEs.
• Experience reviewing SOC 2 Type II reports and ISO 27001 certifications.
• Experience PCI assessments or PCI audits preparation.
• Experience developing and implementing cybersecurity policies and standards.
• Experience risk assessments based on NIST Cybersecurity Framework.

Responsibilities

• Oversee risk remediation plans and ensure timely implementation with stakeholders.
• Lead the GRC program by developing policies, frameworks, and controls to manage enterprise risks.
• Provide guidance on regulatory compliance, internal controls, and risk mitigation strategies.
• Monitor emerging risks, industry trends, and regulatory changes.
• Prepare risk reports, dashboards, and presentations for executive leadership.
• Develop and deliver training to promote risk awareness across the organization.
• Collaborate with senior leaders to integrate risk management into strategic planning.
• Communicate with stakeholders regarding business and technical decisions impacting solutions.

Skills

Communication skills

Strategic thinking

Risk management

Cybersecurity knowledge

Stakeholder management

Content creation

Education

Bachelor's degree in Business/Technology

Job description

Tundra Technical Solutions is seeking a senior Risk Management professional to lead the Client-wide cybersecurity program and governance framework in Toronto. The role focuses on identifying, assessing, and mitigating enterprise risks across divisions, agencies, and partnerships.

You will oversee risk remediation, develop GRC policies, and advise senior leadership on risk decisions to strengthen the organization's security posture and regulatory alignment.