Director- Cybersecurity and Compliance

Our Edmonton headquarted client is currently searching for a Director, Cybersecurity and Compliance who will be responsible for ensuring the safety and security of our client’s valuable information assets through the implementation and management of an enterprise information security program. Duties include identifying, evaluating, and reporting on legal and regulatory, IT, and cybersecurity risks to information assets while supporting and advancing business objectives.

The position requires a leader with knowledge of business management and cybersecurity technologies and experience working with executive management to determine acceptable levels of risk for the organization.

• Establish and maintain an information security program and governance, to protect information assets and technology, applications, systems, infrastructure, and processes
• Identify, evaluate, and report on legal and regulatory, IT, and cybersecurity risks to information assets
• Work with executive management to determine acceptable levels of risk for the organization
• Proactively implement practices that meet agreed-on policies and standards for information security
• Communicate the impact of cybersecurity on business to the board of directors and other senior stakeholders
• Ensure compliance with legal, regulatory, and contractual obligations
• Serve as the process owner of second-line assurance activities
• Design and implement a security controls matrix for the organization’s technology stack, and create process documentation, standards, and policies for efficient security audit management.
• Manage the effectiveness of audit responses and implement improvements.
• Provide written recommendations and develop metrics to report on security audit performance.
• Develop and manage Information Security budgets and monitor for variances
• Create and mange security and risk awareness training programs for all employees, contractors, and partners.
• Ensure appropriate levels of security testing, benchmarking and table-top exercises are executed.
• Manage security incidents and events to protect corporate IT assets.

• 3-5 years of experience in communications or digital marketing
• Experience working with a range of content management systems and collaboration sites, including Sitecore or similar
• Experience operating in a consultative role supporting a range of stakeholders
• Experience managing multiple tasks/ projects and competing priorities
• Experience operating with minimal direction
• Sitecore, SharePoint, or CMS certification an asset
• Diploma or degree in a communications-related discipline