Senior Manager, Cyber Governance & Risk

LCBO (Liquor Control Board of Ontario); Toronto; On-site; CAD 96,000 - 179,000; Full time

Benefits offered by this job

Health / Dental Benefits

Employee & Family Assistance Program

Defined Benefit Pension

Discounts on products and services via

Job summary

LCBO (Liquor Control Board of Ontario) is seeking a Senior Manager, Governance & Risk Management to oversee the information security program, governance, and risk activities from onsite in Toronto. You will lead a team, drive policies, and manage third-party security services while reporting to the Director, Cybersecurity and the Core executive team.

The role requires strong cybersecurity experience, leadership skills, and knowledge of frameworks like NIST RMF/CSF, COBIT, and ISO 27001.

Qualifications

• 5+ years in cybersecurity or IT risk management.
• Experience conducting security reviews and risk assessments.
• Knowledge of NIST RMF/CSF, COBIT, ISO 27001, CIS.
• Cloud environments such as Azure, AWS, and Google.
• Experience with PCI-DSS compliance.
• Professional certifications CRISC/CISA/CISM/CISSP.

Responsibilities

• Develop an IT Risk and Security Management Framework.
• Lead the Governance & Risk Management team daily activities.
• Oversee Third-Party Risk Management program across LCBO.
• Lead enterprise security training and awareness programs.
• Report risk posture to Executive Core team and Board-level
• Manage security governance documents and third-party assessments.

Skills

Cybersecurity governance

Risk management

Threat risk assessments

Team leadership

Vendor management

Policy development

Executive communication

Education

CRISC certification

CISA certification

CISM certification

CISSP certification

Bachelor's degree in IT or related field

Tools

GRC platforms

Job description

LCBO (Liquor Control Board of Ontario) is seeking a Senior Manager, Governance & Risk Management to oversee the information security program, governance, and risk activities from onsite in Toronto. You will lead a team, drive policies, and manage third-party security services while reporting to the Director, Cybersecurity and the Core executive team.

The role requires strong cybersecurity experience, leadership skills, and knowledge of frameworks like NIST RMF/CSF, COBIT, and ISO 27001.