Consultant, Technology Controls & Cyber Security

We are seeking an experienced Technology Controls & Cyber Security leader to join our Technology & Engineering practice in Toronto. In this role, you will partner with senior stakeholders to strengthen security governance, technology risk management, and cyber resilience across complex technology environments. You will provide strategic leadership on security controls, regulatory compliance, and risk mitigation while supporting transformational initiatives within large-scale financial services organizations.

• →Lead the design, implementation, and continuous enhancement of enterprise technology controls, cyber security strategies, and governance frameworks.
• →Partner with business and technology leaders to assess cyber risk, define effective security controls, and support secure delivery across applications, infrastructure, and strategic initiatives.
• →Oversee security governance activities, including regulatory compliance, audit support, risk reporting, control effectiveness, and remediation planning.
• →Provide expert guidance on cyber security, identity and access management, threat management, and technology risk while influencing enterprise-wide security practices.
• →Monitor emerging cyber threats, regulatory developments, and industry trends to strengthen the organization's overall security posture.

• Extensive experience leading technology controls, cyber security, information security, or technology risk initiatives within financial services or other highly regulated environments.
• Strong knowledge of cyber security governance, risk assessments, identity and access management, security architecture, and regulatory compliance.
• Proven ability to engage senior business and technology stakeholders, providing trusted advice on complex security and risk matters.
• Experience supporting audits, regulatory reviews, control testing, remediation programmes, and enterprise governance forums.
• Excellent communication, stakeholder management, and analytical skills with the ability to translate technical concepts into business outcomes.

• Professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent.
• Experience working within large banking or financial institutions.
• Knowledge of cloud security, zero trust architecture, encryption, or enterprise identity platforms.
• Experience delivering large-scale technology transformation or regulatory programmes.
• Familiarity with international security standards and industry frameworks.

We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know—we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration—a mindset that shapes how we work with clients and each other every day.

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.