Senior Manager, Cybersecurity & GRC

Axiom Global Technologies; Mississauga; On-site; CAD 150,000 - 210,000; Full time

Job summary

Axiom Global Technologies seeks a Senior Manager, Cybersecurity & GRC to guide strategy, governance, risk, and compliance across the enterprise. You will partner with executives to oversee GRC, SOC/MSSP, incident response, cloud security, third‑party risk, and AI security.

You will lead security governance for AI and emerging technologies, set KPIs, build budgets, and mentor security teams in a fast-paced environment.

Qualifications

• 12+ years of cybersecurity/information security experience.
• 5+ years in a leadership/management role.
• Experience with Cybersecurity Strategy, GRC, Enterprise Risk, and Security Assurance.
• Experience with SOC/MSSP oversight, incident response, cloud security, and compliance.
• Knowledge of NIST, ISO 27001, CIS Controls, and SOC 2.
• Experience presenting cybersecurity strategy and risk to executive leadership.
• Bachelor's degree in Cybersecurity, IT, CS, Engineering, or related field.
• CISSP, CISM, CRISC, CCSP, or GIAC certification is an asset.

Responsibilities

• Develop and execute the enterprise cybersecurity strategy and roadmap.
• Lead GRC, risk assessments, policies, controls, compliance, and audit programs.
• Advise CIO, executives, and senior stakeholders on cybersecurity risks and priorities.
• Oversee SOC/MSSP, incident response, vulnerability management, and cyber resilience.
• Establish security governance for AI, GenAI, cloud, and emerging technologies.
• Lead third-party and supply-chain cybersecurity risk management.
• Develop cybersecurity KPIs/KRIs, budgets, business cases, and investment priorities.
• Lead and mentor cybersecurity teams and drive continuous security improvement.

Skills

Cybersecurity leadership

GRC

Incident response

Cloud security

Risk management

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

NIST framework

ISO 27001

CIS Controls

SOC 2

Job description

We are seeking a strategic Senior Manager, Cybersecurity & GRC to lead cybersecurity strategy, governance, risk, compliance, and continuous improvement initiatives. This role will partner with executive leadership and oversee key areas including GRC, SOC/MSSP, incident response, cyber resilience, cloud security, third-party risk, and AI security.

Key Responsibilities

• Develop and execute the enterprise cybersecurity strategy and roadmap.
• Lead GRC, risk assessments, policies, controls, compliance, and audit programs.
• Advise CIO, executives, and senior stakeholders on cybersecurity risks and priorities.
• Oversee SOC/MSSP, incident response, vulnerability management, and cyber resilience.
• Establish security governance for AI, GenAI, cloud, and emerging technologies.
• Lead third-party and supply-chain cybersecurity risk management.
• Develop cybersecurity KPIs/KRIs, budgets, business cases, and investment priorities.
• Lead and mentor cybersecurity teams and drive continuous security improvement.

Qualifications

• 12+ years of cybersecurity/information security experience.
• 5+ years in a leadership/management role.
• Strong experience in Cybersecurity Strategy, GRC, Enterprise Risk, and Security Assurance.
• Experience with SOC/MSSP oversight, incident response, cloud security, and compliance.
• Strong knowledge of NIST, ISO 27001, CIS Controls, and SOC 2.
• Experience presenting cybersecurity strategy and risk to executive leadership.
• Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field.
• CISSP, CISM, CRISC, CCSP, or GIAC certification is an asset.

If you're a senior cybersecurity leader with strong GRC and strategic experience, we'd like to hear from you.