Cybersecurity Risk and Controls Manager

Procom • Full-time • Remote (Canada) • 1w ago

Cybersecurity Risk and Compliance Manager:
On behalf of our client, Procom is searching for a Cybersecurity Risk and Compliance Manager for a full-time permanent role. This position is a remote position with work from anywhere in Canada.

Cybersecurity Risk and Compliance Manager - Job Description:
The Cybersecurity Risk and Compliance Manager will oversee and enforce cybersecurity policies, regulations, and best practices. The role involves identifying and addressing security risks proactively to protect Canadian insurers against fraud.

Cybersecurity Risk and Compliance Manager - Responsibilities:

Develop and implement a comprehensive cybersecurity risk management framework
Identify, assess, and prioritize cybersecurity risks based on potential impact and likelihood
Conduct risk assessments, gap analyses, and threat modeling exercises
Develop risk mitigation strategies and recommend controls to minimize identified risks
Monitor and report on the effectiveness of risk mitigation efforts to senior management
Act as a liaison between our client and external clients and auditors
Facilitate audits and risk reviews, and help with the collection of evidence/required audit information
Respond to audit findings and track the remediation process until closure
Validate the risk and compliance level of various vendors and third-party service providers
Ensure compliance with relevant industry standards, frameworks, and regulatory requirements

Cybersecurity Risk and Compliance Manager - Mandatory Skills:

University Degree or College Diploma in Computer Science, Cybersecurity, or a related field
5+ years of experience in cybersecurity risk management, compliance, or a similar role
In-depth understanding of cybersecurity principles, frameworks, and best practices
Strong knowledge of risk assessment methodologies and frameworks
Excellent written and verbal communication skills
Ability to effectively collaborate with cross-functional teams and senior management
Relevant certifications such as CISSP, CRISC, or CISM

Cybersecurity Risk and Compliance Manager – Nice-to-Have Skills:

Familiarity with relevant regulatory requirements such as PIPEDA, OSFI
Experience in conducting risk assessments, gap analyses, and threat modeling exercises
Ability to translate risk findings into actionable recommendations and controls
Familiarity with compliance requirements related to data protection, privacy, and information security
Strong presentation skills to communicate complex concepts to non-technical stakeholders

Cybersecurity Risk and Compliance Manager – Assignment Length:
This is a permanent position.

Cybersecurity Risk and Compliance Manager - Start Date:
ASAP.

Cybersecurity Risk and Compliance Manager - Assignment Location:
Remote work from anywhere in Canada.