Senior Manager, Cybersecurity

Canadian Cancer Society; Ottawa; Hybrid; CAD 105,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Paid parental leave

Family sick time

Job summary

Canadian Cancer Society seeks a Senior Manager, Cybersecurity to lead CCS’s cybersecurity program, setting governance, risk, and assurance priorities. You will supervise the cybersecurity team, develop security policies, and guide security architecture.

This role partners with Technology Operations and business leaders to strengthen the organization’s security posture. You will drive risk-based decision-making, oversee audits, vulnerability management, and third‑party reviews while embedding

Qualifications

• Diploma or bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• Relevant certifications such as CISSP, CISM, CRISC, GIAC, or equivalent would be considered assets.
• 5+ years – extensive job-related experience in progressively more senior positions.
• Demonstrated experience in cybersecurity governance, risk management, assurance, or compliance activities.
• Proven people leadership experience, including coaching, mentoring, and team development.
• Experience developing, implementing, and maintaining policies, standards, and related governance frameworks.
• Experience overseeing audits, vulnerability management, and third-party risk management processes.
• Strong stakeholder management skills with the ability to effectively coordinate cross-functional initiatives in a complex technology environment.
• Experience reporting cybersecurity risks, priorities, and recommendations to senior leadership using a risk-based approach.
• Bilingualism (French/English) is highly preferred, with French being an asset due to the organization’s nationwide operations and the need for effective communication across various regions.
• Others may apply.
• For roles based in Quebec, French is required. Knowledge of another language may be required depending on job responsibilities and business needs.

Responsibilities

• Lead the cybersecurity team and operating model.
• Lead, coach, and develop the cybersecurity team, including performance management, capability development, and workforce planning.
• Assign and prioritize team work to support effective delivery of operational, governance, and strategic cybersecurity activities.
• Support recruitment, onboarding, and role development for cybersecurity team members.
• Set team objectives and align team activities with departmental priorities and organizational goals.
• Oversee planning and coordination of cybersecurity initiatives and ongoing operational work.
• Maintain and improve the cybersecurity operating model to support clear accountability, effective execution, and cross-functional collaboration.
• Own cybersecurity governance, risk, audit, compliance and assurance processes
• Lead the development, maintenance, and update of cybersecurity policies, standards, and related governance artefacts including AI governance.
• Define and oversee governance processes for risk acceptance, compliance requirements, and third-party risk management, including assessment standards, risk treatment expectations, and remediation tracking.
• Lead security audits and assurance activities, including evidence management and action tracking to completion.
• Provide oversight and leadership for vulnerability management and governance, including remediation tracking and follow-through with accountable stakeholders.
• Establish and maintain a recurring reporting cadence for leadership on risk posture, control effectiveness, key trends, and cybersecurity program progress.
• Strategic oversight and cross-functional security leadership
• Review, approve, and socialize security reference architecture and design patterns.
• Provide security guidance for new and changing technology solutions in alignment with approved security reference architecture and design patterns.
• Monitor and manage shadow IT risk in partnership with Technology Operations and business owners.
• Build and maintain effective working relationships with internal stakeholders to strengthen security practices and support organizational priorities.
• Other
• Foster a high-performance culture that leverages the unique talents and strengths of each member while encouraging their growth and development.
• Champion CCS as a hero in the face of cancer.
• Contribute to our culture of diversity, inclusion, belonging and equity (DIBE) by ensuring that all staff feel represented, valued, and heard across all aspects of their identity.
• Other duties as assigned.

Skills

Cybersecurity leadership

Governance & risk management

Stakeholder management

Team development

Communication

Education

Bachelor's degree in computer science or related field

Job description

Senior Manager, Cybersecurity

Vacancies: This posting is for (1) current vacancy

Location: Toronto, ON | Ottawa, ON | Montreal, QC (Detailed office locationinformation can be found by visiting this link: https://cancer.ca/en/contact-us)

Work Model: Hybrid Work

Salary Band: 7 ($105,000 - $110,000 CAD)

HELP SHAPE THE FUTURE OF CANCER CARE IN CANADA

The Canadian Cancer Society works tirelessly to save lives, improve lives and drive collective action against cancer. Together with patients, volunteers, donors and communities across the country, we raise funds to invest in transformative cancer research, we provide a caring support system for everyone affected by cancer and we advocate to governments to create a healthier future for all. It takes a society to take on cancer – and the Canadian Cancer Society is leading the way

MAKING AN IMPACT

The Senior Manager, Cybersecurity provides leadership and oversight for CCS’s cybersecurity program, ensuring the organization effectively manages cyber risk, security governance, compliance, and assurance activities. The role leads the cybersecurity team, establishes and maintains security policies and standards, oversees risk assessments, audits, vulnerability management, and third-party security reviews, and provides strategic guidance on security architecture and emerging threats. Working closely with Technology Operations and business leaders, the position helps strengthen CCS’s overall security posture, supports informed risk-based decision-making, and ensures cybersecurity practices are embedded across organizational initiatives.

What You’ll Be Doing

• Lead the cybersecurity team and operating model
• Lead, coach, and develop the cybersecurity team, including performancemanagement, capability development, and workforce planning.
• Assign and prioritize team work to support effective delivery of operational,governance, and strategic cybersecurity activities.
• Support recruitment, onboarding, and role development for cybersecurity teammembers.
• Set team objectives and align team activities with departmental prioritiesand organizational goals.
• Oversee planning and coordination of cybersecurity initiatives and ongoingoperational work.
• Maintain and improve the cybersecurity operating model to support clearaccountability, effective execution, and cross-functional collaboration.
• Own cybersecurity governance, risk, audit, compliance and assurance processes
• Lead the development, maintenance, and update of cybersecurity policies,standards, and related governance artefacts including AI governance.
• Define and oversee governance processes for risk acceptance, compliancerequirements, and third-party risk management, including assessmentstandards, risk treatment expectations, and remediation tracking.
• Lead security audits and assurance activities, including evidence managementand action tracking to completion.
• Provide oversight and leadership for vulnerability management and governance,including remediation tracking and follow-through with accountablestakeholders.
• Establish and maintain a recurring reporting cadence for leadership on riskposture, control effectiveness, key trends, and cybersecurity programprogress.
• Strategic oversight and cross-functional security leadership
• Review, approve, and socialize security reference architecture and designpatterns.
• Provide security guidance for new and changing technology solutions inalignment with approved security reference architecture and design patterns.
• Monitor and manage shadow IT risk in partnership with Technology Operationsand business owners.
• Build and maintain effective working relationships with internal stakeholdersto strengthen security practices and support organizational priorities.
• Other
• Foster a high-performance culture that leverages the unique talents andstrengths of each member while encouraging their growth and development.
• Champion CCS as a hero in the face of cancer.
• Contribute to our culture of diversity, inclusion, belonging and equity(DIBE) by ensuring that all staff feel represented, valued, and heard acrossall aspects of their identity, including gender, age, religion, ethnicity,nationality, race, and sexuality.
• Other duties as assigned.

Qualifications

• Diploma or bachelor’s degree in computer science, information technology,cybersecurity, or related field.
• Relevant certifications such as CISSP, CISM, CRISC, GIAC, or equivalent wouldbe considered assets.
• 5+ years – extensive job-related experience in progressively more seniorpositions.
• Demonstrated experience in cybersecurity governance, risk management,assurance, or compliance activities.
• Proven people leadership experience, including coaching, mentoring, and teamdevelopment.
• Experience developing, implementing, and maintaining policies, standards, andrelated governance frameworks.
• Experience overseeing audits, vulnerability management, and third-party riskmanagement processes.
• Strong stakeholder management skills with the ability to effectivelycoordinate cross-functional initiatives in a complex technology environment.
• Experience reporting cybersecurity risks, priorities, and recommendations tosenior leadership using a risk-based approach.
• Bilingualism (French/English) is highly preferred, with French being an assetdue to the organization’s nationwide operations and the need for effectivecommunication across various regions.
• Others may apply.
• For roles based in Quebec, French is required. Knowledge of another languagemay be required depending on job responsibilities and business needs.

What You Can Expect From Us

CCS provides impactful opportunities to transform the lives of Canadians affected by cancer. We are devoted to creating an inclusive workplace that celebrates diverse experiences and skills, encouraging all qualified candidates to join us. Our inspiring culture is rooted in our core values and commitment to meaningful change:

COURAGEOUS UNITED CARING RIGOROUS

We offer a competitive salary, excellent benefits, including paid parentalleave, family sick time, and health insurance—and a fulfilling work environmentwhere your efforts make a meaningful impact daily.

COME AS YOU ARE

At CCS, we celebrate individuality and the strength of diversity. We are committed to fostering an inclusive and equitable workplace that empowers everyone. We encourage applications from all qualified candidates, including those from equity-deserving groups such as BIPOC, 2SLGBTQI+ communities, individuals with disabilities, veterans and others who contribute to the richness of our organization.

Other Information

CCS is dedicated to employment equity and encourages applications from all qualified candidates . In accordance with the local provincial Accessibility Act, accommodation will be provided as requested throughout the recruitment process . We want to make the interview process a great experience for you!

Please note that in keeping with the mandate of CCS to model and promote healthy lifestyles , employees are not permitted to smoke in or about CCS premises or while carrying out CCS business.

Privacy Disclosure

We collect your personal information through forms, by phone or in person to evaluate your candidacy for the role(s) you have applied for, to contact you regarding your candidacy, and to generate anonymized recruitment-related reports. If selected for a position at CCS the information provided will be used for the purposes of pre-employment checks and added to your employee file. We may share your personal information with third parties, including recruitment consultants, within or outside your province or territory or outside Canada to carry out the purposes identified above, or as required by law. We may contact you by mail, email, phone or text. You can exercise your right to access your information or have it corrected, unsubscribe from communications or withdraw your consent by selecting these options within the ADP system, or by contacting [e-mail] . For more information about our privacy practices, visit cancer.ca/privacy.

AI Disclosure

We are committed to transparency and, the responsible use of technology in our hiring process. Artificial intelligence (AI) tools may be used to assist with certain administrative or screening tasks; however, all hiring decisions are made by people. We review and approve AI-assisted outputs to ensure fairness, accuracy, and alignment with our values. For more information about our privacy practices, visit cancer.ca/privacy .