consultant - governance and oversight.

Our client, is seeking a high-caliber Consultant - Governance and Oversight to join the newly formed centralized governance function within the Office of the Chief Information Security Officer (CISO).

In this senior consulting role, you will drive strategic visibility, risk management, and operational alignment across all cybersecurity and data privacy domains. Your mandate is truly enterprise-wide—spanning metrics optimization, control validation, and executive reporting. You will lead cross-functional governance routines, independently review and challenge key performance indicators, and embed AI-driven automation into standard tracking workflows. This role serves as a key advisory point, translating complex risk signals and systemic trends into clear, actionable intelligence for corporate tech and risk committees.

Duration: 6-Month Contract

Advantages
CISO-Level Visibility: Operate directly within an executive security governance layer, shaping how a major financial institution manages global risk vectors.

Pioneer AI-Driven Governance: Take the technical lead in modernizing traditional risk tracking by introducing AI automation and streamlined workflow templates.

Broad Cybersecurity Scope: Gain a comprehensive, aggregate view of enterprise protection structures by auditing diverse security pillars simultaneously.

Collaborative Forum Ownership: Establish your corporate footprint by leading risk committees and driving high-level discussions with senior executives.

Responsibilities
Governance Standardization: Drive consistency across international security branches, ensuring rigid adherence to enterprise IT Risk and Cyber Security control frameworks.

AI-Enabled Process Optimization: Analyze current metrics-gathering pipelines and implement advanced, AI-driven automation to streamline workflow execution.

Issue & Workflow Management: Document, manage, and automate security issue remediation logs and risk-exception tracking patterns utilizing enterprise platforms (Jira).

Systemic Risk & Trend Analysis: Aggregate data across multiple technical domains to identify systemic risks, emerging threat vectors, concentration risks, and operational anomalies.

Executive Metrics Reporting: Design, produce, and present clear, concise dashboards and actionable compliance reporting tailored for Senior Management, Risk Committees, and Technology Boards.

Review & Challenge Frameworks: Independently review, challenge, track, and report on Key Performance Indicators (KPIs) and Service Level Agreements (SLAs/IGAs) governing security service delivery.

Cross-Functional Collaboration: Facilitate formal governance forums and cross-functional task forces, fostering tight integration between engineering teams, internal auditors, and business stakeholders.

Qualifications
Experience: 5 to 8+ years of progressive professional experience managing IT and Cybersecurity risk, controls, or compliance tracking.

Corporate Environment Pedigree: Proven track record working within a Large Financial Institution (FI) or an enterprise-scale Technology Corporation. Dedicated experience in a specialized cybersecurity governance or IT audit role is highly preferred.

Technical Tool Stack: Advanced, master-level proficiency in Microsoft Excel (data aggregation, modeling, macros) and Jira (advanced issue mapping, workflow customization, and ticket automation).

Automation & AI Acuity: Demonstrated familiarity with, or a strong interest in, leveraging AI tools and automation utilities to optimize text analysis, documentation mapping, or metrics generation.

Analytical Problem-Solving: Advanced data-driven capability to untangle complex, ambiguous information security datasets and track remediations transparently.

Soft Skills & Presence: Elite verbal, written, and presentation communication skills. Proven capability to manage push-and-pull discussions with technical engineers while maintaining executive polish before steering committees.

Nice-to-Have Skills & Assets
Industry-recognized risk or security governance certifications (e.g., CISM, CRISC, CISA, or CISSP).

Prior hands-on operational experience within the client's internal IT or technology ecosystem to dramatically shorten onboarding and ramp-up cycles.

Direct working knowledge of regulatory compliance expectations impacting global banking infrastructures.

Summary
If you are a tech-savvy Risk and Governance Consultant who pairs an absolute command of cybersecurity controls with a passion for driving automated Jira workflows and AI-driven reporting pipelines, this Office of the CISO mandate is built for your expertise. Bring your analytical mindset, financial institution discipline, and data-driven reporting skills to a market-leading team today!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to View email address on randstad.com to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies. show more