Senior GRC Executive Advisor – Space & Defense

Bilinguallink; Sainte-Marthe-sur-le-Lac; Remote; CAD 180,000 - 260,000; Full time

Job summary

Malleum is seeking an Executive Advisor, Governance, Risk and Compliance to lead our most strategic GRC engagements and scale our advisory practice across space, aerospace, and defense. You’ll serve CISOs, CIOs, CROs, and boards, translating regulatory complexity into mission-aligned programs.

This is a remote position with travel to client sites—typically Ontario-based—as required. We seek a senior practitioner who has stood up enterprise-grade cyber resilience programs and can mentor the next

Qualifications

• 15+ years of progressive cybersecurity and GRC experience in consulting, industry, or government.
• Stand up and scale Cyber Resilience Programs for large enterprises.
• Expertise with CMMC levels 1–3 and CPCSC requirements mapping to NIST standards.

Responsibilities

• Lead executive-level GRC engagements for space, aerospace, defense, government, and critical infrastructure.
• Stand up and mature cyber resilience programs integrating governance, risk, business continuity, and third-party risk.
• Advise C-suite and boards on cyber risk posture, regulatory exposure, and strategic investments.
• Drive client journeys to CMMC readiness, including scoping, gap assessments, SSP/POA&Ms, and assessor coordination.
• Shape GRC service offerings and mentor senior managers and consultants.

Skills

GRC leadership

CMMC knowledge

NIST CSF

Regulatory compliance

Executive advisory

Security governance

Certifications

Education

Bachelor’s degree

Job description

Malleum is seeking an Executive Advisor, Governance, Risk and Compliance to lead our most strategic GRC engagements and scale our advisory practice across space, aerospace, and defense. You’ll serve CISOs, CIOs, CROs, and boards, translating regulatory complexity into mission-aligned programs.

This is a remote position with travel to client sites—typically Ontario-based—as required. We seek a senior practitioner who has stood up enterprise-grade cyber resilience programs and can mentor the next