Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
About the role
- Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Responsibilities
- Conduct a comprehensive assessment of the Foundation’s technology and cybersecurity environment.
- Develop a target operating model and prioritized technology and cybersecurity roadmap.
- Establish technology governance, documentation, decision-making and accountability practices.
- Advise the COO and executive leadership on technology risks, investments and emerging requirements.
- Maintain accountability for availability, reliability, performance and security of the technology environment.
- Oversee on-premises servers, network infrastructure, cloud services, Microsoft 365, SharePoint, end-user devices and specialized applications.
- Ensure monitoring, maintenance, configuration, patching, backup, vulnerability remediation and lifecycle management.
- Provide hands-on technical support, investigation and remediation for complex or sensitive issues.
- Establish and oversee a comprehensive cybersecurity program, including identity and access management, security monitoring, vulnerability management, endpoint protection, email security, network security and data protection.
- Lead preparation for and response to cybersecurity and significant technology incidents.
- Own technology components of business continuity and disaster recovery programs.
- Manage the managed service provider and other IT and cybersecurity vendors.
- Provide leadership, direction and technical oversight to the IT Manager.
- Oversee administration, integration, security and lifecycle management of core technology platforms.
- Develop policies, procedures, standards, documentation and executive reporting.
- Support cyber insurance applications, audits and risk assessments.
- Develop and manage the annual IT and cybersecurity budget and evaluate technology investments.
Requirements
- 10+ years of progressive experience in information technology, infrastructure, cybersecurity or related areas.
- Significant experience in a senior leadership or technology management role.
- Experience leading or overseeing infrastructure, networks, cloud services, Microsoft 365, end-user technology and business applications.
- Strong practical knowledge of identity and access management, vulnerability management, endpoint and network security, security monitoring, data protection and third-party risk.
- Experience developing or overseeing cybersecurity programs, policies, incident response plans, business continuity and disaster recovery capabilities.
- Ability to assess complex technology environments, identify risks and capability gaps, and translate findings into priorities, roadmaps and investment recommendations.
- Experience managing managed service providers, technology vendors and specialized external partners.
- Strong technical judgment and hands-on technical expertise for assessing complex issues and directing incident response.
- Experience managing technology budgets, contracts, licensing, lifecycle planning and investment decisions.
- Strong leadership, communication and stakeholder-management skills.
- Postsecondary education in information technology, computer science, cybersecurity, engineering or a related discipline, or an equivalent combination of education and relevant professional experience.
- Relevant certifications such as CISSP, CISM, CRISC, CCSP or Microsoft/Azure certifications are considered an asset.
- Experience overseeing physical security systems or vendors is considered an asset.
Benefits
- Commitment to equity, diversity and inclusion
- Inclusive and barrier-free recruitment and selection processes
- Accommodation during the application or recruitment process
- Full-time, permanent employment
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.
Senior security advisor simulating and mitigating cyberthreats for Desjardins, North America's largest cooperative financial group. Leading offensive security methodologies, tools and strategic initiatives.