About the job
Capco is seeking a Senior Leader for its Cyber Risk Management practice in Toronto. This position focuses on expanding and enhancing cybersecurity and technology risk services for clients in the financial services sector. The Senior Leader will guide strategic client engagements, lead delivery teams, and advise senior executives (CISO, CRO, CIO) on navigating the challenges of cyber and technology risk management in a changing regulatory and threat environment. This is a senior consulting and leadership role, blending strategy, risk, and hands-on execution to deliver measurable results for clients.
What You Will Do
- Client Advisory & Engagement
- Serve as a trusted advisor to senior client stakeholders, including CISOs, CROs, and CIOs, on cybersecurity strategy, governance, risk management, and regulatory compliance.
- Lead complex consulting projects from initial planning through delivery and outcome realization.
- Share strategic insights on industry trends, new threats, and cybersecurity best practices.
- Practice Leadership
- Grow Capco’s Cyber Risk Management offerings, with a focus on:
- Cyber and Technology Risk Management
- Third Party Cyber Risk Management
- Cyber Strategy, Governance, and Delivery
- Delivery Excellence
- Oversee multidisciplinary teams delivering cyber programs in areas such as identity and access management, vulnerability management, application and data security, and third-party risk.
- Ensure projects meet client goals, budgets, timelines, and quality standards.
- Business Development
- Contribute to thought leadership, service development, and marketing materials that strengthen Capco’s reputation in cyber risk management.
- Mentor and develop consulting talent in cyber and risk fields.
- Support business development by preparing proposals, solution designs, and executive presentations.
What We’re Looking For
- 8-10+ years of progressive experience in cybersecurity, technology risk, or cyber consulting, ideally within financial services.
- Proven track record leading cyber risk management programs and initiatives.

