This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Oversee the management and effectiveness of cybersecurity controls, including validation, evidence management, and ongoing monitoring. Maintain and enhance the enterprise cyber controls framework and related governance processes. Produce and present cybersecurity metrics, risk indicators, and reporting for senior leadership. Ensure control data is accurate, complete, and ready for audit within GRC systems. Collaborate with various teams to align standards, policies, and procedures with security and regulatory requirements. Support governance reviews, third-party assurance, incident tracking, and control effectiveness assessments. Oversee remediation actions and compliance activities, working closely with stakeholders across the organization.
Job Responsibility:
Oversee the management and effectiveness of cybersecurity controls, including validation, evidence management, and ongoing monitoring
Maintain and enhance the enterprise cyber controls framework and related governance processes
Produce and present cybersecurity metrics, risk indicators, and reporting for senior leadership
Ensure control data is accurate, complete, and ready for audit within GRC systems
Collaborate with various teams to align standards, policies, and procedures with security and regulatory requirements
Support governance reviews, third-party assurance, incident tracking, and control effectiveness assessments
Oversee remediation actions and compliance activities, working closely with stakeholders across the organization
Requirements:
Extensive experience in cybersecurity governance, IT risk, or technology controls environments
Strong knowledge of cyber control frameworks, governance reporting, and risk oversight
Background in regulated industries such as banking, financial services, or insurance
Proficiency with enterprise GRC platforms (e.g., MetricStream or similar tools)
Familiarity with audit, assurance, or regulatory review processes
Clear communication skills for both technical and non-technical audiences
Professional fluency in both English and French
Strong analytical, organizational, and problem-solving abilities
Collaborative and comfortable working in high-accountability environments
Nice to have:
Industry certifications such as CISSP, ISO 27001 Lead Implementer/Auditor, or equivalent
Understanding of operational resilience and regulatory compliance