Manager, Cyber Security Risk

What you’ll do

Reporting to the AVP, Cyber Governance, Risk and Controls, the Manager, Cyber Security Risk will be responsible for leading and managing Cybersecurity Risk & Third-Party Risk services across the enterprise. This role will provide consistency across the cyber risk function and work with the business to design and deliver outcomes as securely as possible. They are a major point of interface with business leaders for cyber security and they will play a significant role in delivering key cyber risk messages to stakeholders.

• Manage Cybersecurity Risk & Third-Party Risk services across the enterprise

• Maintain and implement Cybersecurity Risk Frameworks

• Lead teams performing the Cybersecurity Risk Management functions for Canadian Tire

• Lead the risk assessment processes to perform third-party vendor assessments, project risk assessments, digital crown jewel assessments, and enterprise risk assessments of systems, applications, and business processes

• Manage the Enterprise Risk Assessment processes to ensure risk transparency, risk treatment, issues management, and business acceptance and risk-based decision making

• Manage the Third-party Risk Assessment process to ensure risk transparency and business acceptance, contractual obligations, and enable risk-based decision making

• Develop and implement third-party risk management processes for ongoing vendor monitoring, reporting and remediation of third-party risks

• Lead transformation squads specializing in maturing the cybersecurity risk practices for the organization

• Direct the evolution of the Service Now GRC platform for risk and third-party risk

• Report on cybersecurity risk to Enterprise Risk Management as well as Executive Management

• Partner with key internal stakeholders to design and implement effective controls to mitigate risk

What you bring

The Manager, Cyber Security Risk will be an Agile and innovative individual, who is able to manage in an environment of change and ambiguity to help us take bold and strategic moves in this rapidly evolving retail environment. This individual will be a collaborative team players with superior influencing skills, who build relationships easily across various stakeholder groups to move initiatives forward.

• University degree or College diploma in technology or business-related discipline

• 7+ years of related business experience within Cyber Security roles

• Strong IT Security or IT Audit background

• Direct experience with the NIST Cybersecurity Framework (CSF), ISO 27005 and IRAM

• Experience in and strong knowledge of risk governance and compliance, security, and operations

• Excellent relationship management, consulting, and problem-solving skills

• Experience with assessing, designing, and implementing security programs or specific capabilities, including governance, security monitoring, and vulnerability management

• Excellent communication skills with the ability to translate technical requirements for non-technical business partners and influence/persuade a different point of view

• Ability to clearly and confidently communicate written and verbal recommendations, articulating risks and trade-offs

• Experience partnering with and leading external vendors

• Exceptional time management and self-management skills

• Ability to travel as required to other office locations such as Toronto, Welland, and Calgary

• CISSP, CISA or CRISC designation is considered an asset

Hybrid

We value flexibility. We have adopted a hybrid work model whereby employees use a combination of working in office and virtually in service of outcomes. Each leader is empowered to decide what work is best achieved in person based on the unique needs of their team.

About Us

Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, 1,700 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging 

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.

Accommodations  

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.