Manager, Technology, Risk & Security

Reporting to the Corporate Controller, the Manager, Technology Risk & Security will lead CICs technology-risk, cybersecurity, information-security and AI governance. The Manager will advise on technology to be integrated into CICs systems and work with internal leaders and external service providers to support responsible technology adoption, information protection and organizational resilience.

Key responsibilities include:
Establishes, maintains and continuously improves CICs technology, cybersecurity, information-security and AI governance frameworks in alignment with organizational objectives, risk appetite, legislation, policy and recognized industry standards.
Integrates technology, cyber, AI and third-party risks into CICs enterprise risk management framework, including risk identification, assessment, treatment, monitoring and reporting.
Oversees CICs external technology and cybersecurity service providers, evaluates service performance and control effectiveness, coordinates remediation, and ensures clear accountability for priorities, deliverables and escalation.
Leads information-security governance, including access and control monitoring, vulnerability and incident reporting, policy development, security awareness, vendor assurance and follow-up on audits, assessments and testing.
Maintains cyber-incident readiness and supports CICs business continuity and disaster recovery programs through plans, exercises, lessons learned and corrective actions.
Leads the responsible adoption and oversight of AI and other emerging technologies, including governance principles, risk and privacy assessments, acceptable-use requirements, control design, training, monitoring and advice to management.

The full job posting can be found at