Manager, Cybersecurity Governance

Toromont Cat • Concord, ON

4d • CA$103,625 - CA$129,533 • Hybrid

About The Position

The Manager, Cybersecurity Governance leads the design, implementation, and ongoing maturity of Toromont’s cybersecurity governance, risk, and compliance program across IT and OT/ICS environments. The role provides cyber risk and regulatory expertise, ensuring frameworks, controls, and audit obligations are met while translating technical risk into clear, business focused reporting for senior leadership. The Manager oversees a team of Governance Analysts and partners closely with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit across Toromont’s national operations to strengthen enterprise cyber governance and risk management.

Requirements

• 12+ years of progressive cybersecurity, risk, or governance experience, 6+ years of team leadership
• A bachelor’s degree in Business Administration, Information Technology, Computer Science, or Engineering (or equivalent experience)

Nice To Haves

• Preferred certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer.

Responsibilities

• Lead and mature Toromont’s Cybersecurity GRC framework across IT and OT/ICS, aligned to NIST, ISO 27001, COBIT, and emerging AI/agentic‑risk governance.
• Drive enterprise cyber risk identification, assessment, prioritization, and tracking; deliver AI‑enabled dashboards and control‑monitoring metrics.
• Own cybersecurity policy development and maintenance; serve as primary contact for internal/external/regulatory audits, including ICFR cyber controls.
• Lead security awareness training, phishing simulations, and facilitate cyber tabletop and simulation exercises across IT and OT/ICS.
• Produce executive‑level dashboards and presentations on cyber risk posture, control maturity, and audit status; support leadership communications and planning.
• Manage cybersecurity governance initiatives and projects from planning through execution, ensuring effective collaboration across JSOC, IAM, Technology, and business unit teams.
• Lead and mentor Cybersecurity Governance Analysts; partner with JSOC, IAM, Legal, Privacy, Compliance, and Internal Audit; monitor evolving regulatory requirements.

Benefits

• Competitive total rewards including: wages, benefits, and premiums (as eligible)
• Opportunities to continuously Learn, Grow and Develop with our Toromont team through our internal Training teams that are geared for your success
• An opportunity for flexible work schedules and opportunities across multiple locations across Eastern Canada

What This Job Offers

• Job Type: Full-time
• Career Level: Manager