Manager, Security Governance and Compliance

Intact

. Lead and manage cybersecurity professionals responsible for technical risk advisory, security practices, governance, control effectiveness, and security issue management .

Posted 10/23/2026full-timeMontréal • CanadaSeniorLead💰 CA$128,300 - CA$156,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk management, and compliance, with a strong focus on transforming security practices and leading technical teams. Proficient in evaluating security controls, advising on remediation strategies, and aligning with regulatory requirements.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementTeam LeadershipNIST CSFCISSP

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity PrinciplesSecurity ArchitectureVulnerability ManagementCloud SecurityThreat AssessmentSecurity Control EffectivenessRed Team ExercisesTechnical Assurance ActivitiesRemediation StrategiesSecurity Incident Management

Soft Skills

Communication SkillsCollaborationInfluencingFacilitationRelationship Management

Certifications & Qualifications

CISSPCISMCRISCCISACCSPSABSAGIAC

Industry Keywords

GRCISO/IEC 27001CIS ControlsOSFI B-13OSC 52-109SOXCybersecurity Risk AdvisorySecurity GovernanceTechnical Risk ManagementCompliance Requirements

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead and manage cybersecurity professionals responsible for technical risk advisory, security practices, governance, control effectiveness, and security issue management
Transform the traditional GRC function into a technically oriented security risk advisory practice
Uplift security standards, policies, and guidelines
Define and implement the team’s future operating model, roles, responsibilities, processes, engagement model, and interactions with security and technology teams
Evaluate and challenge cybersecurity remediation based on threat profiling, red-team exercises, audits, incidents, and assurance activities
Validate proposed solutions and timelines, and strengthen remediation tracking, reporting, escalation, and closure confirmation
Develop and maintain practical cybersecurity governance processes for risk-based decision-making
Advise and constructively challenge the security function on financial compliance requirements
Drive continuous improvement of security controls and practices by identifying systemic weaknesses and recurring issues
Coordinate maturity assessments, independent assurance activities, and security reviews
Maintain alignment with regulatory requirements, internal policies, risk-management expectations, and industry practices
Respond to regulatory and third-party information requests and audits
Prepare and present metrics, insights, and reports to senior management
Lead team capability evolution through hiring, training, development, and employee reassignment
Introduce innovative approaches, tools, and technologies to improve technical risk advisory and security-practice activities
Ensure the team has the expertise, resources, processes, and stakeholder relationships required to support the Technology and Cyber mission

Requirements

What you’ll need

Bachelor’s degree in computer science, information technology, cybersecurity, or equivalent education and experience
Minimum 10 years of experience in information technology or cybersecurity
At least 3 years managing technical or cybersecurity teams
Strong knowledge of cybersecurity principles, security architecture, vulnerability management, application and infrastructure security, cloud security, threat and risk assessment, and security-control effectiveness
Experience evaluating cybersecurity findings and advising on remediation strategies, accountable owners, compensating controls, risk acceptance, and remediation timelines
Experience with red team exercises, vulnerability assessments, audits, security incidents, or other technical assurance activities
Experience validating whether proposed technical solutions address security risks
Experience leading organizational, operational, or capability transformations within cybersecurity, Technology, or risk-management functions
Experience building or evolving a cybersecurity risk advisory, security governance, security assurance, or technical risk-management practice
Experience developing team operating models, defining roles and responsibilities, hiring talent, and building technical capabilities through training and employee development
Knowledge of NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, or equivalent frameworks
Working knowledge of OSFI B-13, OSC 52-109, and SOX
Strong ability to communicate complex technical risks and security concepts clearly
Strong collaboration, influencing, facilitation, and relationship-management skills
Strong ethical principles and understanding of business, technology, and information-security ethics
CISSP, CISM, CRISC, CISA, CCSP, SABSA, GIAC, or other relevant cybersecurity certifications considered an asset
For candidates located in Quebec, bilingualism is required
Must be eligible to work in Canada; no Canadian work experience required

Benefits

Comp & perks

Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits to support physical and mental wellbeing, including telemedicine and Wellness account
Share plan and other savings: up to 12% of salary or even more
Annual bonus plan with a target of 15% of base salary and potential payout of up to double the target
Employee Share Purchase Plan (ESPP), with Intact matching 50% of net shares
Defined benefit pension plan with opportunity to receive guaranteed income for life
Workplace adjustments and accommodations for people with disabilities