Information Technology - Director, Governance, Risk & Compliance

THE TEAM

The mission of the Cybersecurity Department is to deliver high-quality cybersecurity services and solutions that minimize risk across Aritzia's systems and data.

Aritzia is growing and the Governance, Risk & Compliance team in our Cybersecurity Department is growing with it. As the Director, Solution Delivery, Governance, Risk & Compliance (GRC), you will lead the delivery and continuous improvement of Aritzia's GRC capabilities, including cybersecurity policies and standards, third‑party risk management, and compliance and control frameworks. You will own the product strategy and roadmap for GRC services, drive automation of control testing and evidence, and partner across Technology, Internal Audit, Legal, and other business teams to meet regulatory and policy requirements.

You will ensure the GRC program is pragmatic, measurable, and aligned with enterprise risk appetite, enabling teams to move fast while staying compliant. With people at the heart of everything you do, you will support your high‑potential people to grow rewarding careers at Aritzia - while enjoying one yourself.

As the Director, Solution Delivery, Governance, Risk & Compliance, you will lead the team to:

• Establish, operate, and continuously improve Aritzia's enterprise GRC program
• Oversee cybersecurity policy and standards management, ensuring alignment to frameworks such as NIST/ISO
• Maintain a unified control framework and ensure disciplined ownership, testing cadence, issue management, and continuous monitoring
• Manage enterprise risk through ownership of methodology, assessments, KRIs, remediation planning, and cross functional coordination
• Develop, maintain, and continuously mature the enterprise Incident Response program
• Ensure continuous audit compliance through close partnership with Internal Audit and external assessors
• Work with the appropriate Business Support partners to seamlessly lead the day‑to‑day function of the department in support of corporate objectives, while enabling progressive career development and an incredible employee experience

The Director, Solution Delivery, Governance, Risk & Compliance, has proven and best‑in‑class skills, education, experience and/or applicable certifications:

• Deep knowledge of GRC frameworks (NIST CSF, ISO 27001/27701), ITGCs/SOX, PCI DSS, and privacy (PIPEDA/GDPR)
• Hands‑on experience with GRC platforms (e.g., Service Now IRM, Archer/RSA, One Trust), ITSM, identity, cloud, and integrations for automated evidence/continuous control monitoring
• Scripting/automation
• Certifications such as CISSP, CISM, CISA, CRISC, ISO 27001
• Lead Implementer/Auditor, ITIL, and privacy certifications
• A commitment to learn, apply, champion and enrich Aritzia's Values and Business and People Leadership principles
• The skills to collaborate strategically with cross‑functional partners in the pursuit of shared business outcomes
• The ability to set clear objectives and design a strategy that inspires the team
• A dedication to quality and investing in results and new business opportunities that add value

The typical hiring range for this position is $150,000–$250,000 per year. The final agreed‑upon salary may vary based on factors such as job‑related knowledge, skills and experience.

We are always looking for top talent. If your qualifications differ from those listed above, the scope of work and final agreed‑upon salary may be adjusted to reflect your individual qualifications.

Aritzia's Everyday Luxury compensation package goes beyond the base salary with endless growth and recognition opportunities through our pay‑for‑performance philosophy. With comprehensive benefits, aspirational work spaces and elevated employee perks and experiences – we provide it all.

• Product Discount – Maybe you've heard of our famous product discount? Or our exclusive private shopping events? You have now.
• A-OK Commissary & Café – Everyday Luxury dining, exclusive to Aritzia. Our in‑house bistro and café is a private oasis where employees can enjoy curated, subsidized Everyday Luxury dining.
• The SET – Our in‑office fitness studio and gym with state‑of‑the‑art equipment,…