Cybersecurity Advisor – GRC (Hybrid, Toronto)

About the role

CGI is seeking a Cybersecurity Advisor specialized in Governance, Risk and Compliance (GRC) to join its Toronto team. This hybrid position involves working on client sites downtown while collaborating with cross‑functional groups to protect information systems and ensure regulatory compliance.

Key responsibilities

• Conduct comprehensive security assessments, identify vulnerabilities and evaluate threats.
• Develop and maintain Security Assessment Reports (SARs) and Authorization Packages.
• Perform risk assessments and recommend mitigation strategies.
• Collaborate with stakeholders to implement, monitor, and improve security controls.
• Support incident response activities, investigations, and corrective actions.
• Stay current on industry trends, emerging threats, and best practices.

Required profile

• Federal‑level security clearance or ability to obtain a reliability clearance.
• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Minimum 10 years of experience in security assessment and authorization (SA&A) roles.
• Professional certifications such as CISSP, CISM or CISA are highly desirable.
• Excellent communication skills for conveying technical information to non‑technical audiences.

Required skills

• NIST cybersecurity framework
• ISO 27001 standard
• Security assessment methodology
• Vulnerability assessment techniques
• Risk assessment and mitigation
• Networking protocols
• Systems architecture
• Security technologies

What we offer

• Competitive salary range of $90,000–$145,000 CAD.
• Hybrid work model with access to downtown client sites.
• Opportunities for professional growth and certification support.
• Inclusive culture that values ownership, teamwork and belonging.