Job Description

Our client is a global leader in the financial services industry with a well-established Canadian footprint serving millions of customers with a myriad of best-of-class products and services.

A well-known employer of choice, our client’s brand extends to superior customer service and experience both via its extensive brick-and-mortar network and its continually evolving digital capabilities. It is expected that technology will play an ever-more important role in providing the rich omni-channel experience expected by customers.

Our client now seeks a Chief Information Security Officer (CISO) to serve a critical role in its Canadian operations.

Scope of Position

Broadly, the objective of the role of the CISO is to cultivate an environment that attracts, deploys and retains the human and other resources required to establish and maintain the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected.

Reporting to the local CIO and the global CISO, the successful candidate will ensure that the company’s Canadian IT security framework, governance, policies and processes are consistent with the overall corporate goals and objectives.

Functional Tasks

1. Collaborate with key stakeholders to determine acceptable levels of risk for the Canadian organization in compliance with regulatory requirements.
2. Direct the development of an information security framework, consistent with the global security framework, along with the underlying standards, processes and procedures.
3. Provide guidance and leadership with developing, maintaining and updating the information security strategy.
4. Develop, implement and effectively communicate a security awareness program for information security throughout the organization.
5. Actively ensure appropriate administrative, physical and technical safeguards are in place to protect the information assets from internal and external threats.
6. Introduce and implement appropriate processes and procedures to test all information security safeguards on a regular basis.
7. Undertake periodic reviews and audits, as required, engaging both internal business partners throughout the organization as well as external resources.
8. Ensure that disaster recovery and emergency operating procedures are in place and tested on a regular basis.
9. Provide leadership and oversight for the design and implementation of all security incident and vulnerability management processes.
10. Provide oversight and guidance in:
    • performing on-going security monitoring of information systems including assessing information security risk through qualitative risk analysis on a regular basis;
    • conducting functional and gap analyses to determine the extent to which key business areas and infrastructure comply with statutory and regulatory requirements; and
    • evaluating and recommending new information security technologies and counter-measures against threats to information or privacy, and developing security reports and dashboards.
11. Develop and sustain alliances with appropriate industry associations to benchmark best practices.
12. Establish guidelines to understand and mitigate potential risks involved in the loss of intangibles (reputation).

Competency Profile

The following competencies listed below define the role of CISO Canada:

Integrity:

1. Demonstrates commitment to the organization and its customers.
2. Takes personal responsibility for words and actions.
3. Maintains consistency between words and actions.
4. Acts in compliance with department, company, and industry standards.

Performance:

1. Holds self and others accountable.
2. Demonstrates drive to excel.
3. Exhibits mature self-confidence.
4. Exhibits customer service orientation.
5. Demonstrates flexibility and change.
6. Demonstrates analytical thinking.
7. Demonstrates conceptual thinking.

Teamwork:

1. Exhibits teamwork and collaboration.
2. Understands and influences others.

Preferred Experience / Education

The following indicates specific industry, academic and functional experience/qualifications that are important to the successful achievement of the identified responsibilities and performance deliverables:

1. The successful candidate will bring a minimum of 10 years of information security experience with at least 3-5 years of experience related to IT security architecture.
2. A positive and participative leadership style with an ability to earn the trust and support of all levels of senior management across the organization.
3. A strategically oriented individual with superior communication and interpersonal skills and a willingness to roll-up his/her sleeves to achieve agreed upon outcomes.
4. The successful candidate will have a minimum 4 year undergraduate degree with an industry recognized IT security designation (CISSP, CISA or CISM).
5. Prior experience working in the financial services industry would be ideal.
6. Experience with policy compliance tools and control processes.

Highly competitive base salary, variable compensation along with other compensation.

Job Tags

Similar Jobs