Senior Advisor, Governance, Risk and Compliance – Cybersecurity

Alithya

. Develop, maintain and enhance information security policies, standards, procedures and guidelines .

Posted 10/26/2026full-timeCanadaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and enhancing information security policies and frameworks while aligning cybersecurity practices with regulatory and industry standards. Proficient in conducting risk assessments, managing compliance programs, and communicating technical issues effectively to diverse stakeholders.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementGRC Framework ImplementationNIST CSF 2.0 ProficiencyStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security PoliciesRisk AssessmentsCompliance ProgramsGap AnalysesPerformance IndicatorsVulnerability ManagementApplication SecurityPenetration TestingCloud Security ConceptsDisaster Recovery

Soft Skills

Influential LeadershipAnalytical SkillsExecutive CommunicationCollaborative ApproachStakeholder Management

Tools & Technologies

NIST CSF 2.0ISO/IEC 27001COBITCIS ControlsSOC 1SOC 2PCI DSSAzureAWSGoogle Cloud

Certifications & Qualifications

CISSPCISMCRISCCGEITCCSKCCSPISO 27001 Lead ImplementerISO 27001 Lead Auditor

Industry Keywords

Financial ServicesInsurancePublic SectorHealthcareQuebec’s Law 25PIPEDAGDPR

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Develop, maintain and enhance information security policies, standards, procedures and guidelines
Align cybersecurity practices with business objectives and regulatory, contractual and industry-standard requirements
Conduct and coordinate technology and cybersecurity risk assessments, then recommend appropriate treatment plans
Maintain the risk register and support risk and control owners in their decision-making
Assess risks related to third parties, vendors and partners
Support teams during internal and external audits and follow up on findings and remediation plans
Conduct gap analyses and contribute to the evolution of control frameworks
Develop performance and risk indicators, produce executive dashboards and present results to governance bodies
Contribute to business continuity, disaster recovery and cyber crisis management exercises
Advise business and technology teams and participate in cybersecurity awareness initiatives

Requirements

What you’ll need

Bachelor’s degree in computer science, cybersecurity, risk management, information technology or a related field
8 to 10 years of experience in cybersecurity, governance, risk management or compliance
Significant experience implementing GRC frameworks, conducting audits and maturity assessments, and managing compliance programs
Experience in a highly regulated environment, particularly financial services, insurance, the public sector or healthcare
Proficiency in NIST CSF 2.0, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, COBIT, CIS Controls, SOC 1, SOC 2 and PCI DSS
Knowledge of Quebec’s Law 25, PIPEDA and GDPR
Understanding of IAM, MFA, access control, privileged access management and cloud security concepts
Ability to interpret vulnerability management, application security and penetration testing results from a business risk and compliance perspective
Influential leadership, excellent stakeholder management and the ability to communicate technical issues clearly to non-technical audiences
Strategic mindset, collaborative approach, and strong analytical, synthesis and executive communication skills
French: Advanced
A master’s degree; certifications such as CISSP, CISM, CRISC, CGEIT, CCSK, CCSP or ISO 27001 Lead Implementer/Lead Auditor; experience with third-party risk and dashboards; knowledge of Azure, AWS or Google Cloud; and participation in cyber exercises or digital transformation or security initiatives are additional assets

Benefits

Comp & perks

Work-life balance
Flexible work options
Unlimited Vacation Plan
24/7 virtual healthcare
Extensive wellness portal supporting physical, mental, emotional and financial well-being
Access to thousands of online courses and certifications through education partnerships
Exclusive leadership programs
Tuition reimbursement program for external training
Employee Share Purchase Plan with matched contributions