IT Compliance & Governance Specialist

Hudbay Minerals • Toronto, ON, CA • 2d ago

Role Title:	IT Compliance & Governance Specialist
Reports to:	Manager, IT Security, Compliance & Enterprise Architecture
Manager Once Removed	Chief Information Officer
Direct Reports:	N/A
Job Type:	Full-time Permanent
Location	Toronto, Corporate Office

About Hudbay:

Hudbay (TSX, NYSE: HBM) is a copper-focused critical minerals company with three long-life operations and a world-class pipeline of copper growth projects in tier-one mining jurisdictions of Canada, Peru and the United States.

Hudbay’s operating portfolio includes the Constancia mine in Cusco (Peru), the Snow Lake operations in Manitoba (Canada) and the Copper Mountain mine in British Columbia (Canada). Copper is the primary metal produced by the Company, which is complemented by meaningful gold production and by-product zinc, silver and molybdenum. Hudbay’s growth pipeline includes the Copper World project in Arizona (United States), the Mason project in Nevada (United States), the Llaguen project in La Libertad (Peru) and several expansion and exploration opportunities near its existing operations.

Copper is Hudbay’s primary metal, representing approximately 60% of our revenues. Copper is essential for achieving global energy transition and AI technology needs – it is one of the most heavily utilized metals in renewable energy systems and is a key component for power networks, circuit boards and cooling systems in data processing centres. Our leading organic growth pipeline provides significant long-term copper optionality to add to our production profile to meet the robust copper demand.

With over 90 years of continuous operation, Hudbay stays strong by building on traditions and knowledge, remaining current through ongoing learning, adapting to new influences and embracing new opportunities. We know that committing to safety, embracing diversity, sharing skills, rewarding performance and encouraging a healthy work-life balance can help our people and our company make giant strides.

Our Company Mission:

Our mission is to create sustainable value and strong returns by leveraging our core strengths in community relations, focused exploration, mine development and efficient operations.

Our Company Purpose:

We care about our people, our communities and our planet. Hudbay provides the metals the world needs. We work sustainably, transform lives and create better futures for communities.

We transform lives: We invest in our employees, their families and local communities through long-term employment, local procurement and economic development to improve their quality of life and ensure the communities benefit from our presence.

We operate responsibly: From exploration to closure, we operate safely and responsibly, we welcome innovation and we strive to minimize our environmental footprint while following leading operating practices in all facets of mining.

We provide critical metals: We produce copper and other metals needed for everyday products and essential for applications to support the energy transition toward a more sustainable future.

Purpose of Role:

The IT Compliance and Governance Specialist is responsible for developing, implementing, and maintaining Hudbay’s IT governance, risk, and compliance (GRC) program. This role ensures that security policies and practices align with business objectives, industry standards, and regulatory requirements

Role Accountabilities:

Governance & Policy: Establish / maintain a formal IT governance framework.
- Draft, review, maintain and support creation of IT policies, standards, and procedures.
- Report on security metrics and program maturity to management.

Risk Management: Ensure IT risks are identified, assessed, and managed.
- Conduct periodic IT risk assessments of systems, processes, and third parties.
- Maintain the IT risk register and track remediation plans.

Compliance & Auditing: Ensure Hudbay meets its security compliance obligations.
- Act as the primary point of contact for internal and external IT audits.
- Monitor and report on compliance with security policies and standards.
- Coordinate remediation efforts for audit and compliance findings.

Security Awareness: Foster a security-conscious culture among all employees.
- Develop and manage the company-wide security awareness training program, including phishing simulations.
- Create and deliver targeted security communications and training materials.

Experience and Qualifications:

A bachelor's degree or diploma in Information Technology, Business, or a related field. Equivalent experience will be considered.
IT security/governance certifications such as CISA, CRISC, CISM, or CISSP are preferred.
Experience:
3-5 years of experience in an IT audit, risk management, or governance role.
Experience developing and implementing IT policies and standards.

Knowledge & Skills:

Strong knowledge of IT governance frameworks (e.g., COBIT, ISO 27001, NIST Cybersecurity Framework).
Experience with risk assessment methodologies.
Familiarity with data privacy regulations (e.g., PIPEDA).
General understanding of network security, system security, and cloud technologies.
Proficiency with Microsoft Office applications, particularly for documentation and reporting
2+ years of related experience
Post-secondary degree/diploma in Computer Science, Telecommunications, Wireless Communication or a relate discipline
A+ Certification and Microsoft Certified Professional (MCP) designation preferred
Experience in a related role requiring timeliness, customer service, organization, prioritization, troubleshooting, and working independently to successfully install, configure, maintain, and support Windows desktop operating systems and software
Experience with ServiceNow ticketing system preferred but not required

Personal Attributes:

Excellent written and verbal communication skills, with a strong ability to prepare reports and policy documentation.
Strong interpersonal skills for collaborating with diverse teams, including legal, finance, and operations.
Ability to work independently and manage multiple priorities.
Valid Driver’s License is required
Highly organized with a strong project-oriented work ethic.
Demonstrated diplomacy, confidentiality, and self-confidence.

Travel:

Up to 25% travel

Compensation:

Expected Compensation: Base salary $92.000 - $115,000 CAD per year.
Vacancy Status: This posting is for an existing vacancy.
AI Disclosure: Artificial Intelligence is not used to screen, assess, or select applicants; however, Hudbaymay use automation for administrative processes.

Why Hudbay?

At Hudbay our values of Dignity & Respect, Caring, Openness and Trustworthiness are embedded into our culture by the way we work and how we interact with one another.
We pride ourselves in providing our employees with a competitive total rewards that include:
- Annual performance bonuses
- Health benefits for you and your family, with a health spending account
- Company paid insurances for Life, Spousal and Dependent Life, AD&D, Critical Illness, and Short & Long Term Disability cover
- A Defined Contribution pension that includes company contribution and additional matching of your voluntary contributions
- An Employee Share Purchase Plan with contribution matching
We support our employees in their individualized wellness journeys by providing a yearly Wellness Subsidy of up to CAD $1,000
Hudbay gives back to the community with its employee charity matching program for eligible charitable donations made by employees
Regular performance appraisals to acknowledge our employees for their contributions, strengths and work well done
The opportunity to work out of our Platinum Class A and Platinum BOMA BEST® Certified office building in Toronto’s South Core Business District, conveniently located beside the newly renovated Toronto Union Station

Hudbay is committed to providing an inclusive and accessible candidate experience. If you require accommodation during the recruitment and selection process, please let us know.

We thank all applicants for their interest. Due to the volume of applications received, we will only contact candidates selected to advance in the recruitment process.