(PRO) - Entreprise Architect - Cyber POST NUMBER: 308753
Principal Cybersecurity & GRC Advisor
About Highspring
Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to clients across North America. We work with leading organizations to help them address complex technology challenges, strengthen their capabilities, and deliver meaningful business impact.
At Highspring, we believe in empowering our people, fostering technical leadership, and creating opportunities for our consultants to contribute where their expertise matters most.
The Opportunity
Highspring is looking for a Principal Cybersecurity & GRC Advisor to support a large-scale organization operating in a complex, highly regulated technology environment.
In this role, you will serve as a trusted cybersecurity expert and strategic advisor to technology, business, and leadership teams. You will help align business objectives, security requirements, regulatory obligations, and risk priorities to guide technology decisions and protect critical organizational assets.
This is an individual contributor role that requires leadership through influence rather than direct people management. You will collaborate across a highly matrixed environment, advising managers, architects, technology teams, and project leaders to ensure decisions are secure, practical, and aligned with business priorities.
What You’ll Do
- Act as a lead cybersecurity expert across strategic technology domains.
- Bridge business requirements, cybersecurity needs, regulatory obligations, and organizational risk priorities.
- Provide pragmatic recommendations that balance security requirements with operational realities.
- Evaluate and approve cybersecurity risk assessments, technology architectures, and risk mitigation strategies.
- Contribute to the evolution of cybersecurity standards, policies, and governance frameworks.
- Participate in architecture, governance, and risk management committees.
- Advise business and technology teams on information security and cybersecurity best practices.
- Support technology transformation, modernization, and innovation initiatives.
- Monitor emerging cyber threats, evolving regulations, and relevant industry trends.
- Build alignment among stakeholders across complex initiatives without relying on direct authority.
What You Bring to the Table
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
- 15 years of experience in information security or cybersecurity.
- Proven experience working in large-scale, complex technology environments.
- Strong understanding of cybersecurity risk management, security governance, and enterprise architecture.
- Hands-on experience conducting cybersecurity risk assessments and managing technology risk.
- Ability to communicate effectively with both highly technical teams and business leaders.
- Strong judgment and the ability to provide clear recommendations in complex or ambiguous situations.
- Excellent communication, negotiation, and stakeholder engagement skills.
- Ability to build trusted relationships and influence decisions across a matrixed organization.
Core Skills Required
- Cybersecurity governance, risk, and compliance (GRC)
- Cybersecurity risk assessment and risk management
- Information security governance
- Enterprise architecture and technology risk
- Security policies, standards, and governance frameworks
- Stakeholder management and executive-level advisory
- Technology transformation and modernization
- Regulatory and security requirements
- Cross-functional leadership and influencing without direct authority
Preferred qualifications and experience:
- CISSP, CISM, CISA, or equivalent cybersecurity certification.
- Experience in regulated industries such as aerospace, defense, critical infrastructure, or manufacturing.
- Knowledge of Operational Technology (OT) and integrated IT/OT environments.
- Familiarity with NIST, ISO 27001, CMMC, or comparable cybersecurity frameworks.
Why Join Highspring
- Work with a dynamic and growing team of experienced consultants and technology professionals.
- Contribute your expertise to complex, high-impact technology initiatives.
- Collaborate with business and technical stakeholders on strategic cybersecurity challenges.
- Access continuous learning, certification, and training opportunities.
- Be part of a collaborative culture that values technical expertise, sound judgment, and meaningful business impact.
Conseiller(ère) principal(e), Cybersécurité et GRC/ Senior
À propos de Highspring
Highspring est une firme de services-conseils et de services professionnels de nouvelle génération. Nous proposons des solutions modernes, agiles et tournées vers l’avenir à des clients partout en Amérique du Nord. Nous accompagnons des organisations de premier plan dans la réalisation de leurs initiatives technologiques complexes, le renforcement de leurs capacités et la création d’un impact d’affaires concret.
Chez Highspring, nous croyons à l’autonomie de nos professionnels, au leadership technique et à la possibilité pour nos consultants de contribuer à des mandats où leur expertise fait réellement la différence.
L’opportunité
Highspring recherche un(e) Conseiller(ère) principal(e), Cybersécurité et GRC afin d’accompagner une organisation d’envergure évoluant dans un environnement technologique complexe et hautement réglementé.
Dans ce rôle, vous agirez à titre d’expert(e) de confiance en cybersécurité et de conseiller(ère) stratégique auprès des équipes technologiques, des équipes d’affaires et des gestionnaires. Vous contribuerez à aligner les objectifs d’affaires, les exigences de sécurité, les obligations réglementaires et les priorités en matière de risques afin d’orienter les décisions technologiques et de protéger les actifs critiques de l’organisation.
Il s’agit d’un rôle de contributeur individuel qui exige un solide leadership d’influence, sans responsabilité directe de gestion de personnel. Vous collaborerez au sein d’un environnement hautement matriciel avec des gestionnaires, des architectes, des équipes technologiques et des responsables de projets afin de favoriser des décisions sécuritaires, pragmatiques et alignées sur les besoins d’affaires.
Ce que vous ferez
- Agir à titre d’expert(e) principal(e) en cybersécurité pour des domaines technologiques stratégiques.
- Faire le pont entre les besoins d’affaires, les exigences de cybersécurité, les obligations réglementaires et les priorités organisationnelles en matière de risques.
- Formuler des recommandations pragmatiques conciliant les exigences de sécurité et les réalités opérationnelles.
- Évaluer et approuver les analyses de risques en cybersécurité, les architectures technologiques et les stratégies d’atténuation des risques.
- Contribuer à l’évolution des normes, politiques et cadres de gouvernance en cybersécurité.
- Participer aux comités d’architecture, de gouvernance et de gestion des risques.
- Conseiller les équipes d’affaires et technologiques sur les bonnes pratiques en matière de sécurité de l’information et de cybersécurité.
- Soutenir les initiatives de transformation, de modernisation et d’innovation technologiques.
- Suivre l’évolution des cybermenaces, des exigences réglementaires et des tendances pertinentes de l’industrie.
- Créer un alignement entre les parties prenantes dans le cadre d’initiatives complexes, sans autorité hiérarchique directe.
Ce que vous apportez
- Baccalauréat en technologies de l’information, cybersécurité, informatique ou dans un domaine connexe.
- Plus de 15 ans d’expérience en sécurité de l’information ou en cybersécurité.
- Expérience démontrée au sein d’environnements technologiques complexes et de grande envergure.
- Excellente compréhension de la gestion des risques en cybersécurité, de la gouvernance de la sécurité et de l’architecture d’entreprise.
- Expérience pratique en évaluation et en gestion des risques de cybersécurité.
- Capacité à communiquer efficacement tant avec des équipes hautement techniques qu’avec des leaders d’affaires.
- Excellent jugement et capacité à formuler des recommandations claires dans des situations complexes ou ambiguës.
- Excellentes aptitudes en communication, en négociation et en gestion des parties prenantes.
- Capacité à établir des relations de confiance et à influencer les décisions dans une organisation matricielle.
Compétences essentielles requises
- Gouvernance, risque et conformité en cybersécurité (GRC)
- Évaluation et gestion des risques de cybersécurité
- Gouvernance de la sécurité de l’information
- Architecture d’entreprise et risques technologiques
- Politiques, normes et cadres de gouvernance en sécurité
- Gestion des parties prenantes et rôle-conseil auprès de la direction
- Transformation et modernisation technologiques
- Exigences réglementaires et de sécurité
- Leadership transversal et capacité d’influence sans autorité directe
Qualifications et expérience privilégiées :
- Certification CISSP, CISM, CISA ou certification équivalente.
- Expérience dans des secteurs réglementés tels que l’aérospatiale, la défense, les infrastructures critiques ou le secteur manufacturier.
- Connaissance des technologies opérationnelles (OT) et des environnements intégrés TI/OT.
- Connaissance de cadres de cybersécurité tels que NIST, ISO 27001, CMMC ou des référentiels comparables.
Pourquoi vous joindre à Highspring
- Évoluer au sein d’une équipe dynamique et en croissance composée de consultants et de professionnels technologiques expérimentés.
- Mettre votre expertise à contribution dans le cadre d’initiatives technologiques complexes et à fort impact.
- Collaborer avec des parties prenantes d’affaires et technologiques sur des enjeux stratégiques de cybersécurité.
- Profiter d’occasions de formation continue, de certifications et de développement professionnel.
- Faire partie d’une culture collaborative qui valorise l’expertise technique, le jugement professionnel et l’impact concret sur les affaires.
EEO Notice
Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law.
Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@vaco.com.
Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.
Representation Notice
By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.
For residents of Ontario, Canada: Based on Highspring’s discussions with its Client, Highspring’s understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly).
Privacy Notice
Vaco by Highspring and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco by Highspring”) respects your privacy and are committed to providing transparent notice of our policies.
- California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.
- Virginia residents may access our state specific policies here.
- Residents of all other states may access our policies here.
- Canadian residents may access our policies in English here and in French here.
- Residents of countries governed by GDPR may access our policies here.
Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring’s use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client’s use of AI products in hiring.
Pay Transparency Notice
Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:
- the individual’s skill sets, experience and training;
- licensure and certification requirements;
- office location and other geographic considerations;
- other business and organizational needs.
With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.