At a Glance
- Tasks: Lead cybersecurity governance and risk management for innovative projects at Air Canada Vacations.
- Company: Join a leading travel company focused on modernizing cybersecurity practices.
- Benefits: Competitive pay, health benefits, and opportunities for professional growth.
- Other info: Dynamic role with a focus on cutting-edge technology and career advancement.
- Why this job: Make a real impact in shaping cybersecurity policies and frameworks.
- Qualifications: Experience in cybersecurity governance and risk management is essential.
The predicted salary is between 135000 - 165000 $ per year.
The Partner, Cybersecurity Governance, Risk & Compliance will be responsible for establishing and enforcing cybersecurity governance across strategic transformation initiatives (Juniper, CRM, CDP), while designing and implementing a structured cybersecurity framework for Air Canada Vacations aligned with industry standards (NIST or ISO 27002). This role will modernize cybersecurity policies, define and classify critical information assets, and ensure that cybersecurity is integrated into all projects and business processes from inception.
WHAT YOU'LL BE DOING
- Cybersecurity Governance for Strategic Programs
- Establish security governance structures for Juniper (Reservation System), CRM, CDP
- Implement security checkpoints and stage gates
- Conduct risk and compliance reviews within project lifecycle
- Ensure alignment with privacy requirements (PIA, data retention, etc.)
- Align with architecture and change management processes
- Enforce “secure by design” governance across all initiatives
- Cybersecurity Framework Development
- Design and implement an enterprise cybersecurity framework for ACV based on NIST Cybersecurity Framework or ISO 27001 / 27002 controls
- Define control domains and control catalog
- Establish security standards and procedures
- Create a governance and accountability model
- Policy & Directive Modernization
- Review, rationalize, and modernize cybersecurity policies, directives and procedures
- Align policies with Air Canada corporate standards where applicable
- Reflect modern architectures (cloud, SaaS, APIs)
- Establish clear policy lifecycle and governance model
- Enterprise Asset Management & Data Classification
- Define and implement enterprise asset inventory (applications, systems, data)
- Create a data classification model (e.g., confidential, regulated, internal)
- Identify critical systems and business assets
- Identify sensitive and regulated data sets
- Ensure classification drives access controls, retention policies, and security controls
- Risk Management & Compliance
- Establish cybersecurity risk management framework including risk identification and assessment
- Implement risk tracking and remediation
- Formalize exception and risk acceptance processes
- AI Governance & Responsible Use
- Define and implement AI governance framework including AI usage policies and directives
- Establish risk and compliance controls for AI systems
- Create data usage and model governance standards
- Establish approval process for AI use cases
- Implement monitoring and audit mechanisms for AI solutions
- Ensure alignment with Air Canada enterprise policies (where applicable)
Partner, Cybersecurity Governance, Risk and Compliance in Montréal employer: Vacances Air Canada / Air Canada Vacations
Air Canada Vacations is an exceptional employer that prioritizes employee growth and development within a dynamic work culture. Located in YUL, this role offers the opportunity to engage in meaningful cybersecurity initiatives while collaborating with a team dedicated to innovation and excellence. With a focus on modernizing policies and frameworks, employees are empowered to make impactful contributions in a supportive environment that values security and compliance.
Contact Details:
Vacances Air Canada / Air Canada Vacations Recruitment Team
