VP, Cyber Security & IT Governance

We are currently seeking a VP, Cyber Security & IT Governance to join our team.

The VP, Cyber Security & IT Governance provides leadership and strategic direction for First West’s Cyber Security and IT Governance functions. The VP is responsible for enterprise-wide cyber security enablement, including member-facing cyber security requirements, and the ongoing development, implementation and management of IT Governance processes in alignment to financial services best practices and regulatory requirements.

This position oversees cyber security operations and cyber technology management, and leads the development of enterprise-wide cyber security strategies in alignment to the organization’s strategic plan. The VP also oversees Third Party Risk Management, IT Change Management, internal and external audits, technology contracts and software/services licensing management in IT Governance 1B function.

The VP communicates Cyber Security and IT Governance narratives across all stakeholder contexts including the Board of Directors, FW leadership team (FWLT), Vice Presidents, shared services groups and member-facing roles. This position is a senior member and active participant in the IT Leadership team with shared accountability for strategic planning, technology execution and achievement of results across the IT department. A key element of this role is to integrate cyber security with member-facing products and services as well as member education initiatives.

Here’s what would be included as a part of your typical day

Leadership: Provides strategic and transformational leadership within and external to IT, driving engagement of teams, as well as alignment to the FW strategic objectives; provides strong ‘thought leadership; manages team, including coaching, development, and performance management activities. Establishes and maintains open communication, sets annual goals that are aligned with FW strategic objectives and ensures goals are met or exceeded. Provides resources as needed to IT and business teams in addition to providing effective delivery of cyber security and IT governance services. Oversees hybrid service delivery models incorporating external suppliers and resources into FW’s cyber security functions to provide scalability of this function.

Advising: Participates as a member of the CTO Leadership Team and supports the CTO in executing strategies and over-arching plans within the context of the cyber security and IT governance functions. Advises and collaborates with FWLT and the Board of Directors with respect to business risk from a cyber security, privacy, regulatory compliance, and business/technology impact potential and ensures plans are in place to address any risks.

Planning & Design: Oversees FW’s enterprise security architecture; alongside CTO, formulates longer term cyber security strategy, and annual cybersecurity functional plan. Ensures alignment with the organizational strategy and technology strategy, and interfaces with leaders from risk and internal audit to ensure compliance with federal and provincial regulations. Develops and oversees the cyber security and IT governance department and related operating budget.

Technology Governance & Risk Management: As part of FW’s Enterprise Risk Management First Line of Defense, delivers first line risk management for all aspects of cyber security and IT governance. Proactively engages in operational risk management through identification of risks, opportunities, and inter-dependencies of all areas of accountability; develops and implements the necessary controls and takes action to mitigate exposures, leverage opportunities, ensure regulatory and enterprise compliance, and foster a holistic, integrated approach. This role also has the overall responsibility to help support all three lines of defense, including the 1B function, in the area of cyber security and IT governance. Oversees the implementation and on-going improvements in the 1B technology governance program for the credit union. Ensures alignment with the organizational strategy and technology strategy, and interfaces with leaders from risk and internal audit to ensure compliance with federal and provincial regulations.

Relationship Building: Maintains and manages strong external connections in the area of cyber security and IT governance with key partners, suppliers, and other external organizations. Externally, represents FW in various regulator, Credit Union system and supplier forums on Cyber Security and IT Governance matters.

Required Skills, Experience & Qualifications

• Bachelor’s Degree in IT, Computer Science, or related discipline required; Master’s degree preferred
• Minimum 10 years experience in progressively senior IT leadership roles; experience within the financial services industry required
• Minimum of 5 years leading a Cyber Security and IT Governance function required
• Proven experience in developing, administering, and leading a Cyber Security and IT Governance program for mid to large financial services organizations, operating under regulatory requirements required
• Exposure to Cyber Security practices and procedures relating to data privacy and protection
• Exposure to IT Governance best practices and regulatory requirements in financial services
• Ability to establish cordial professional working relationships, communicate and effectively obtain buy-in from IT and business stakeholders for cyber security and IT governance initiatives
• Broad and proven expertise in the effective application of cyber security management and strategies within the financial services industry
• Proven experience in effective application of IT governance within the financial services industry
• Strong people leadership skills to lead a cyber security team (including security operations)
• Strong organizational, analytical, and problem-solving skills with a keen attention to detail
• Excellent negotiation and customer services skills and ability to communicate with technical and non- technical audiences
• Proficiency in the use of Microsoft Office products
• Working technical knowledge of current systems software, operating systems, networking protocols and standards, cyber security hardware and software solutions
• Strong understanding of cyber security architectures, leading practices, policies, and regulations from the business perspective
• Understanding of IT governance best practices
• Working knowledge of Artificial Intelligence tools
• Displays an understanding of risk and risk ownership by being able to demonstrate adherence to policies and procedures.
• Ensures compliance with all relevant laws, regulations, policies, and standards (. OSFI, FCAC, PCMLTFA, CDIC, applicable privacy laws, employment law, and collaborates with our regulatory compliance teams to address any compliance gaps.

Location:

This role may be filled remotely. We are particularly interested in candidates based in British Columbia or Toronto, where a hybrid work arrangement is available.

Statement on AI Use:

In accordance with Ontario’s Employment Standards Act, we confirm that no artificial intelligence (AI) tools are used to screen, assess, or select applicants for this position. All applications are reviewed by our recruitment team.

Statement of Genuine Vacancy:

This posting represents a true and current vacancy within our organization. We are actively seeking to fill this role and welcome applications from qualified candidates.