Manager Governance, Risk & Compliance

About the role

Aliant Resources is seeking a senior‑level Manager to lead Governance, Risk & Compliance (GRC) for the City of Toronto’s cyber program. You will work closely with the Director of Cyber Awareness and the CISO to design, integrate and implement cyber solutions that protect the municipality.

Key responsibilities

• Lead and continuously improve the enterprise‑wide Cybersecurity GRC program, ensuring effective identification, assessment, treatment and closure of cyber risks.
• Document and operationalize cyber risk appetite, tolerance thresholds and governance frameworks.
• Embed governance structures and accountability models across divisions, agencies and corporations.
• Implement and mature a NIST‑aligned control framework, monitoring and reporting on control effectiveness.
• Develop, review and manage the lifecycle of cybersecurity policies, standards and procedures.
• Oversee audit‑finding tracking, remediation plans and compliance gap closure with executive reporting.
• Conduct continuous control monitoring, periodic risk assessments and effectiveness testing.
• Develop and enforce information security controls to protect confidentiality, integrity and availability.

Required profile

• Senior‑level experience providing strategic and tactical guidance on cyber risk and compliance.
• Proven ability to lead enterprise‑wide GRC initiatives in a complex, public‑sector environment.
• Strong understanding of risk appetite, governance frameworks and accountability models.
• Experience working with CISO offices and senior cyber leadership.

Required skills

• NIST‑aligned control framework implementation
• Cybersecurity governance and risk management
• Audit management and remediation tracking
• Compliance reporting and policy lifecycle management

What we offer

• Competitive salary of $179,000 CAD per year
• Permanent full‑time position (35 hours/week, Monday‑Friday)
• Opportunity to shape city‑wide cyber initiatives for Toronto