Work with senior leadership to define the vision and multi-year roadmap for cybersecurity, ensuring the organization can appropriately manage cyber risk.
Establish and sustain an enterprise cybersecurity program aligned to industry frameworks (e.g., NIST/ISO), with clear policies, standards, and control ownership.
Serve as a trusted advisor to senior leadership; develop executive/Board-ready reporting on risk posture, KPIs/KRIs, incidents, and roadmap progress.
Ensure core programs—including vulnerability/threat management, insider risk, third-party cyber risk, and data protection—are prioritized, resourced, and executed.
Embed secure-by-design practices into technology and business change; review/approve security architectures and patterns.
Oversee incident preparedness and response (plans, tabletop exercises, after-action reviews) and coordinate with continuity/DR.
Manage external partners and vendors (e.g., MSSP, IR retainer, penetration testing) and ensure service performance and value.Mentor a high-performing team of cybersecurity professionals
Build a culture of accountability, innovation, and continuous learning; set clear outcomes and coach for growth. Champion a strong security culture through awareness and pragmatic business partnership across IT, ERM, Lega, Audit, procurement, and operations.Stay current on evolving threats and security trends; translate insights into actionable improvements.
Evaluate, select, and deploy next-generation controls (e.g., PAM, EDR/XDR, SIEM/SOAR, cloud security), leveraging automation and analytics to streamline operations.
Partner with IT and business units so digital transformation initiatives adopt secure-by-design principles from inception.

• Bachelor’s Degree in a relevant field or equivalent experience.
• Relevant certifications such as CISSP or CISM (preferred); additional credentials (e.g., CCSP, CISA, CRISC) are an asset.
• 10+ years of progressive cybersecurity experience with a track record of program leadership and delivery in financial services/asset management domain (an asset).
• Proven people leadership and cross-functional influence; strong project/program management.
• Deep knowledge cybersecurity technologies, incident response, third-party risk, vulnerability management, and cloud security.
• Excellent communication, executive presentation, and problem-solving skills; strong business acumen.
• Demonstrate a strong commitment to organization’s core values of excellence, transparency, humility, integrity and collaboration, and inspire the same in others

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.

#LI-DNI