Director, Cybersecurity & GRC

Job Description

Overview

CYBRPLEX is partnering with a healthcare organization to hire a Director, Cybersecurity & GRC. This is a senior leadership role where you’ll own the cybersecurity risk register, drive governance and compliance alignment, and ensure executive-level visibility into cyber risks.

Job Opportunity

Director, Cybersecurity & GRC

Location

Windsor, ON (Hybrid, 4-days onsite)

Type: Full-Time, Permanent

CYBRPLEX is Canada’s trusted cybersecurity recruitment partner, led by cybersecurity experts. We specialize in helping organizations hire pre-vetted cyber professionals with speed and precision. From startups to enterprises, we support hiring across the cybersecurity spectrum — from Security Analysts to CISOs. With deep industry knowledge and a cyber-only focus, we deliver fewer, stronger profiles with faster turnaround and great results.

Key Responsibilities

• Develop and manage the GRC program in alignment with NIST CSF and healthcare regulations (HIPAA, PHIPA).
• Conduct regular risk assessments, track mitigation, and report on compliance.
• Lead security awareness and accountability efforts across technical and clinical teams.
• Deliver risk dashboards and metrics to the executive team and board.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, or related field.
• Minimum 10 years of progressive experience in cybersecurity or GRC, with at least 5 years in a leadership capacity.
• Demonstrated success leading ISO / IEC 27001 certification initiatives.
• Strong understanding of Microsoft enterprise technologies (Intune, O365, SharePoint, AD) and CIS security benchmarks.
• A strong understanding of privacy and security regulations (e.g., HIPAA, PHIPA).

We thank all applicants for their interest; however, only those selected for further consideration will be contacted.