1

Cyber Risk Management Jobs in Ontario (NOW HIRING)

Our constantly evolving offerings lead the market in cyber, equipment breakdown, renewable energy, technology services, engineering-based risk management and inspection services. We bring technical ...

... risk including IT & Cyber, Business Continuity, Financial, Privacy, and Compliance * Have a solid understanding of procurement and vendor management principles KPMG Ontario Region Pay Range ...

Work across key security domains including IAM, Zero Trust, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, and cyber ...

Enterprise/Operational Risk, Resilience, Regulatory Compliance, Policy, IT/Cyber Risk ... Governance, Methodology, and PMO * Establish Agile SDLC, program governance, RAID, and executive ...

next page

Showing results 1-20

Cyber Risk Management information

See Ontario salary details

$29.5K

$103.4K

$167K

How much do cyber risk management jobs pay per year?

As of Jun 13, 2026, the average yearly pay for cyber risk management in Ontario is $103,352.00, according to ZipRecruiter salary data. Most workers in this role earn between $74,000.00 and $128,000.00 per year, depending on experience, location, and employer.

What is a Cyber Risk Management job?

A Cyber Risk Management job involves identifying, assessing, and mitigating cybersecurity risks that could impact an organization. Professionals in this field develop risk management frameworks, implement security controls, and ensure compliance with industry regulations. They work closely with IT and business teams to minimize cyber threats, such as data breaches and ransomware attacks. Their goal is to protect sensitive information and maintain business continuity.

What are the key skills and qualifications needed to thrive in the Cyber Risk Management position, and why are they important?

To thrive in Cyber Risk Management, you need a strong understanding of information security principles, risk assessment methodologies, and regulatory compliance, often supported by a degree in cybersecurity, information technology, or a related field. Familiarity with tools such as risk management software, vulnerability assessment platforms, and certifications like CISSP, CISM, or CRISC is highly valued. Excellent analytical thinking, communication, and problem-solving skills help professionals effectively advise stakeholders and coordinate incident response efforts. These skills are crucial for identifying, evaluating, and mitigating cyber risks to safeguard organizational assets and ensure business continuity.

Can you make $500,000 a year in cyber security?

Cyber Risk Management professionals can potentially earn $500,000 or more annually, especially at senior levels or in executive roles such as Chief Information Security Officer (CISO). Achieving this salary typically requires extensive experience, advanced certifications like CISSP or CISM, and leadership responsibilities within large organizations. High salaries are often associated with specialized skills, strategic oversight, and the ability to manage complex security risks.

Is 40 too old for cyber security?

Cyber Risk Management professionals can succeed at any age, as the field values experience, problem-solving skills, and continuous learning. Many individuals transition into cybersecurity later in their careers by obtaining certifications like CISSP or CompTIA Security+ and developing relevant technical skills. Age is generally not a barrier to entering or advancing in cybersecurity roles.

What are some common challenges faced in a Cyber Risk Management role, and how are they typically addressed?

Professionals in Cyber Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, ensuring compliance with complex regulations, and balancing security needs with business objectives. Addressing these issues requires continuous learning, leveraging up-to-date threat intelligence, and collaborating closely with IT, legal, and management teams to develop effective risk mitigation strategies. Many organizations encourage ongoing training and participation in industry events to stay current, while fostering a culture of open communication to quickly identify and address vulnerabilities. Embracing a proactive and adaptable approach ensures that cyber risks are managed effectively while supporting the organization’s goals.

Is cybersecurity still worth it in 2026?

Cyber Risk Management remains a vital role in 2026 as organizations continue to face evolving cyber threats. Professionals in this field need strong technical skills, knowledge of security frameworks, and certifications like CISSP or CISM to effectively protect digital assets and ensure compliance.

Can I make $200,000 a year in cyber security?

Cyber Risk Management professionals can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in high-demand industries or senior positions. Salary levels vary based on location, company size, and individual expertise, but high-level cybersecurity roles often offer compensation in this range.
What are popular job titles related to Cyber Risk Management jobs in Ontario? For Cyber Risk Management jobs in Ontario, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Management jobs in Ontario look for? The top searched job categories for Cyber Risk Management jobs in Ontario are:
What cities in Ontario are hiring for Cyber Risk Management jobs? Cities in Ontario with the most Cyber Risk Management job openings:
Infographic showing various Cyber Risk Management job openings in Ontario as of June 2026, with employment types broken down into 96% Full Time, 2% Part Time, and 2% Contract. Highlights an 67% In-person, 29% Hybrid, and 4% Remote job distribution, with an average salary of $103,352 per year, or $49.7 per hour.
AVP Third Party Risk Management

AVP Third Party Risk Management

Peoples Group

Toronto, ON

Full-time

PTO

Posted 17 days ago


Job description

We are hiring for this position out of our Toronto, Calgary, and Vancouver offices. Successful candidates who apply outside of these areas will be expected to relocate and reside in a location that is within a commutable distance.  

Role Overview

The Assistant Vice President, Third Party Risk Management (TPRM) is responsible for leading the implementation and ongoing execution of the Peoples Group TPRM framework, including ownership of the TPRM policy, supporting toolkits, inventory, and compliance tracking. This role leads and develops a team accountable for running the TPRM program, providing effective challenge to thirdparty risk and criticality assessments, and ensuring regulatory requirements are met across the enterprise.

The AVP prepares regular reporting for senior management and Board committees, partners closely with Technology on the development and maintenance of the TPRM system, and works collaboratively with Legal, Procurement, Information Security, and Relationship Owners to manage thirdparty onboarding, contracting, cyber risk, and ongoing monitoring. Success in this role requires strong stakeholder and conflict management skills to balance business objectives, client expectations, and regulatory obligations, as well as the ability to build productive relationships across multiple departments and drive enterprisewide training and compliance with TPRM requirements.

About the day-to-day

  • Lead the implementation of the Peoples Group TPRM framework.
  • Responsible for maintaining the TPRM Policy and Framework as well as the documentation supporting TPRM toolkits (Criticality and Risk Triage, Risk Assessment Template, Due Diligence Questionnaire, Contracting Requirements, Monitoring Plans, Contingency and Exit Planning, Exception Management).
  • Manage a team of analysts and senior managers accountable for running the TPRM Framework. Lead the team in providing constructive challenge to the results of third-party risk and criticality assessments completed by the Relationship Owners.
  • Own and manage the TPRM inventory and compliance tracker.
  • Prepare regular reporting for the Operational Risk Management Committee, Corporate Risk Committee and Board Risk Committee.
  • Work directly with the Technology team on the development and launch of the TPRM system to facilitate completion of the required toolkits and inventory of required Third-Party documentation. This includes accountability for User Acceptance Testing prior to launch and for regular patches and updates from the software provider.
  • Successfully manage friction arising between business objectives, client expectations and regulatory requirements. Account Managers and their clients are important stakeholders in the success of TPRM. The successful candidate will be relied on to diffuse tensions when working with clients and counterparties to meet regulatory requirements for TPRM.
  • Develop and coordinate enterprise-wide training on TPRM requirements.
  • Work directly with Relationship Owners to clarify requirements for the onboarding and management of Third-Parties.
  • Work closely with the Legal and Procurement departments to maintain control processes and compliance requirements when onboarding new Third-Parties and executing contracts.
  • Coordinate with the Information Security Team to assess cyber-security control effectiveness at critical third parties.
  • Working across all departments within PTC, partnering with relationship owners to maintain compliance and update third-party criticality and risk assessment. Collaboratively escalating gaps with requirements and facilitating approval of waivers where appropriate.
  • Establishing productive relationships and working successfully with stakeholders across multiple departments is essential for success in this role.

About the qualifications

  • 10+ years experience working in risk management or operations at a Canadian Financial Institution, with at least 5 years of experience in a management role.
  • Successfully delivered enterprise-wide risk projects requiring significant change management and training across departments.
  • Familiarity with Software Development Life Cycle in the context of enterprise applications and experience developing requirements for risk management solutions and coordinating User Acceptance Testing.
  • Required experience in developing Third Party Risk Management TPRM Frameworks at Small and Medium Sized Banks (SMSBs) in Canada. Alternatively, applicants with intricate knowledge and experience in running an established TPRM framework at an SMSB or DSIB will also be considered.
  • Direct experience in managing OSFI expectation and regulatory findings related to TPRM and Guideline B-10 is a significant asset.
  • Strong communication skills, with experience presenting at senior management committee meetings and interacting directly with C-level executives at SMSBs.
  • Proven conflict management capabilities when working across multiple departments and stakeholders to achieve positive risk and compliance outcomes.

About us

Peoples Group is a trusted financial services company for the innovators at the forefront of Canada’s economic future. With offices in Vancouver, Calgary, and Toronto, we are driving change by working alongside challenger banks, fintechs, brokers, and merchants to foster a dynamic and competitive financial ecosystem.

Our culture is built on four core behaviours: Grit to Grow, Connect to Collaborate, Putting Clients First, and Owning the Outcome. We believe people do not simply choose a company to work for—they choose a company that makes a positive impact in the lives of Canadians. Above all, we value people, build meaningful relationships, focus on individual strengths, and approach our work with passion.

About the work environment

Peoples Group offers a flexible and hybrid work environment. In this role you will work a combination of in-office and remotely from home. Typically, you'll be working regular business hours, Monday to Friday between 8:00am and 4:30pm with flexibility around start/end times.

We offer:

  •  A hybrid work environment, enabling you to balance your personal and professional life seamlessly.
  • Competitive salaries, profit sharing, RRSP matching and benefits from day one.
  • Generous paid time off to help achieve a healthy work-life balance.
  • A strengths-based approach, ensuring we work together more effectively.
  • A commitment to your well-being in five key areas: Financial, Physical, Social, Career, and Community.

Peoples Group is pleased to offer employees a competitive annual salary plus a discretionary profit share opportunity. Salary for this position will vary between $130,000 and $145,000 per year depending on the knowledge, skills, abilities and experience that the chosen candidate possesses.

NOTE:  This job posting is for an existing vacancy. Peoples Group is an Equal Employment Opportunity employer. Please accept our utmost appreciation for your interest; however, only those applicants under consideration will be contacted.

 We value and celebrate individuality while fostering an inclusive workplace for everyone. If there's any way we can support or accommodate you during the selection process, please don't hesitate to let us know.