Manager Governance, Risk & Compliance

About the role

Aliant Resources, in partnership with the City of Toronto, is seeking a senior‑level Manager to lead Governance, Risk & Compliance (GRC) for the municipal cyber security division. You will provide strategic and tactical guidance to the Director of Cyber Awareness and the Chief Information Security Officer, shaping a city‑wide cyber program that protects critical services.

Key responsibilities

• Lead and continuously improve the enterprise‑wide GRC program, ensuring effective identification, assessment, treatment and closure of cyber risks.
• Document and operationalize cyber risk appetite and tolerance thresholds, aligning risk decisions with approved governance frameworks.
• Embed governance structures and accountability models across divisions, agencies and corporations.
• Implement and mature a NIST‑aligned control framework, monitoring and reporting control effectiveness.
• Develop, review and manage the lifecycle of cybersecurity policies, standards and procedures.
• Oversee audit‑finding remediation, treatment plans and compliance gap closure with executive reporting.
• Conduct continuous control monitoring and periodic risk assessments, integrating GRC dashboards.
• Design and enforce information security controls to protect confidentiality, integrity and availability.

Required profile

• Senior‑level experience in cyber security governance, risk management and compliance.
• Proven ability to lead city‑wide or large‑scale GRC initiatives.
• Strong knowledge of NIST frameworks, regulatory and legal requirements.
• Excellent stakeholder management skills across multiple government agencies.

Required skills

• NIST Cybersecurity Framework
• Governance, Risk & Compliance (GRC) platforms
• Risk assessment and treatment methodologies
• Cybersecurity policy development
• Audit management and remediation tracking

What we offer

• Competitive salary of $179,000 CAD per year
• Permanent full‑time position (35 hours/week)
• Opportunity to shape cyber security strategy for a major municipal client
• Inclusive workplace committed to diversity, equity, inclusion and accessibility