Director, Information Protection & Security

DIRECTOR, INFORMATION PROTECTION & SECURITY

Office of the Chief Information Officer

Permanent position)

We acknowledge that the lands on which Memorial University's campuses are situated are in the traditional territories of diverse Indigenous groups, and we acknowledge with respect the diverse histories and cultures of the Beothuk, Mi'kmaq, Innu and Inuit of this province. To Learn more about the territory acknowledgement please visit : https : / / www.mun.ca / indigenous / resources / territory-acknowledgement /

ABOUT MEMORIAL

Perched on Canada's North Atlantic coast, Memorial University is a destination for discovery. Memorial University is home to more than 18,000 students from 127 countries and 3,600 faculty and staff who learn, teach, research, create and engage in a vibrant and diverse academic community. As the only university in the province of Newfoundland and Labrador, Memorial has five campuses throughout the province and one in England, with a special obligation to provide teaching, learning and research opportunities that are locally relevant and internationally significant. From classics to advanced technology, Memorial offers certificate, diploma, undergraduate, graduate and postgraduate program options. A global network of more than 100,000 accomplished alumni throughout the world strengthens Memorial's capacity and reputation for leadership in research, teaching and public engagement. For more information about this dynamic institution, visit https : / / www.mun.ca / .

ABOUT THE OFFICE OF THE CHIEF INFORMATION OFFICER

The Office of the Chief Information Officer is responsible for the overall strategy and direction of Memorial University's information technology, management, protection, and access and privacy programs. This includes a pan-university mandate and responsibility, leadership and performance management, strategy, planning and policy for IT, IM, protection of privacy, enterprise architecture, and the development and continuous improvement of an information management and protection function at Memorial.

THE OPPORTUNITY

Memorial is seeking a dynamic and experienced Director, Information Protection & Security (IP&S) to join the senior leadership team of the Office of the Chief Information Officer. Reporting to the Chief Information Officer, the Director, IP&S will provide expertise, leadership, and direction in the continued development and implementation of the pan-university Information Management (IM) and Information Protection & Security (IP&S) programs. These programs consist of frameworks, policies, standards, guidelines, and best practices that enable the mandate of Memorial University, and ensure professional and secure services for teaching, learning, research, administration, and public engagement functions.

The IM and IP&S programs include education and awareness, providing advisory services to all campuses, departments, faculties and units, collaborating with all information technology colleagues across the university. The Director, IP&S will also oversee Memorial's IT security operations, including a team of security professionals, and will lead an enterprise cyber security program that ensures information protection and security is consistent university-wide and includes oversight of disaster recovery and incident response planning.

Duties may include, but are not limited to :

• Designing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks.
• Overseeing cybersecurity initiatives to secure the university's technology assets.
• Communicating and leading a vision with respect to cyber-security, information management and protection to all stakeholder levels, coordinating activities and resources towards a common strategic direction.
• Continuously evaluating and managing the cyber and technology risk posture of the university.
• Implementing and managing the cyber governance, risk, and compliance processes.
• Supporting the university's compliance with the Management of Information Act, Access to Information and Protection of Privacy Act, Personal Health Information Act, Payment Card Industry standards, and other applicable Acts, policies, standards, directives, etc.
• Educating and managing technology risks in collaboration with university leaders in the academic, research, and administrative units.
• Expanding the implementation of MUNCLASS, the university's classification and retention plan.
• Developing, justifying, and evaluating cybersecurity investments.
• Promoting and communicating IM and IP&S awareness training.
• Leading cybersecurity operations, disaster recovery planning, and business continuity planning with business resilience and recovery as a priority.
• Continuing development of IM and IP&S policies and standards.
• Managing the IM&P program operational budget and incorporating IM&P requirements into strategic IT plans.
• Ensuring business transformational and operational improvement opportunities are identified and successfully delivered in the midst of ongoing change.
• Providing IM and IP&S / cybersecurity advisory services to all campuses, departments, faculties and units.

CANDIDATE PROFILE

You have a minimum of 10 years at the senior management level in business administration of a complex organization, a graduate degree in Computer Science, Library, and Information Science, Business Administration, or any related discipline. You have significant experience in security, information technology, and information management, preferably in the post-secondary sector. You understand and embrace the complexities and multi-faceted world of a university community engaged in teaching, learning, research, administration, and public engagement.

You have experience leading security programs based on frameworks such as NIST, as well as delivering executive / board presentations and briefings on information management and protection, and cyber risks that are deemed critical. Strong leadership is integral to our team, and you must demonstrate commitment to reconciliation and decolonization, Indigenization, equity, diversity, inclusion, and anti-racism.

You must have a passion for information protection, information management and a commitment to overall service excellence.

SALARY $113,229 - $148,986 per annum (Leadership Group)

Under salary review)

CLOSING DATE March 20, 2025 by 5 : 00 p.m. NST

COMPETITION NUMBER MUN03152

All qualified candidates are encouraged to apply; however, p reference will be given to applicants who are legally entitled to work in Canada. Memorial University is committed to employment equity and diversity and encourages applications from all qualified candidates, including women, people of any sexual orientation, gender identity, or gender expression; Indigenous peoples; visible minorities and racialized people; and people with disabilities.

The personal information requested in your application is collected under the authority of the Memorial University Act (RSNL 1990 c M-7) for the purpose of identifying and recruiting candidates; assessing applicant qualifications; and maintaining records pertaining to the administration of employment with Memorial University of Newfoundland.

If you are a successful candidate, this information will form part of your permanent employment record and will be used for other activities related to the employment process. This information may be disclosed to government departments and agencies as legally required; and to third party service providers, as necessary to administer programs and activities.

If you have any questions about the collection, use and disclosure of the information on this form, please contact MyHR, Department of Human Resources, at [email protected].

Please be advised that we are unable to provide updates on current competitions.

We thank all applicants for their interest, however, only those selected for an interview will be contacted.