Director, IT Cyber Security & Resilience

Responsibilities

:

• Lead the organization's cyber security strategy, roadmap, governance framework and resilience initiatives across the enterprise
• Partner with executive leaders, operating companies and business stakeholders to align cyber security priorities with business objectives and risk tolerance
• Provide leadership and oversight for cyber security operations, risk reduction activities, vulnerability management, control effectiveness and continuous improvement programs
• Establish meaningful cyber security metrics, dashboards and reporting to communicate risks, performance, and improvement priorities to leadership
• Embed secure-by-design principles into enterprise architecture, infrastructure, applications, projects, and operational processes
• Review and provide security oversight for major technology initiatives, implementations and business transformation activities
• Lead organizational preparedness for cyber incidents through effective governance, response planning, recovery capabilities and resilience testing
• Partner with Enterprise Risk to strengthen incident response, disaster recovery, business continuity and enterprise resilience programs
• Develop and maintain cyber security policies, standards, controls and governance practices that support compliance and risk management objectives
• Lead third-party cyber risk management activities, including supplier assessments, security reviews, contractual requirements and ongoing monitoring of critical technology partners
• Build and maintain relationships with external cyber security advisors, vendors and industry partners to support emerging threat awareness and best practices
• Lead, develop and strengthen cyber security capabilities, awareness and culture across the organization while fostering accountability and informed decision-making

Technical/Business Requirements:

• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering or a related discipline
• 10+ years of progressive experience in cyber security, information security or technology risk management
• Minimum 5 years of leadership experience in cyber security, technology or risk management functions
• Experience leading enterprise cyber security programs within complex, multi-site or multi-business-unit organizations
• Strong understanding of cyber governance, risk management, security operations, vulnerability management, incident response, resilience and compliance requirements
• Experience developing cyber security strategies, roadmaps and investment priorities aligned with business objectives
• Demonstrated experience working with executive leaders, business stakeholders and external service providers
• Experience managing third-party cyber risk, supplier security programs, and technology vendor relationships
• Exposure to industrial, manufacturing, or operational technology (OT) environments is considered an asset
• Professional certifications such as CISSP, CISM, CCSP, GICSP, or equivalent are considered assets

Leadership Requirements:

• Strategic leadership and enterprise thinking
• Executive presence and influence
• Risk assessment and decision-making
• Relationship building and stakeholder management
• Business partnership and advisory capability
• Change leadership and continuous improvement mindset
• Strong communication and executive reporting skills

As a member of the OSCO Construction Group, we offer a comprehensive compensation package including health and dental coverage, life insurance, RRSP and tax-free savings account options. Additionally, we offer educational bursaries to children of employees, health & wellness programming, celebratory events and employee sport team sponsorships.