Director, Cybersecurity Operations

Key Activities

Under the direction of the Chief Information Officer, the Director of Cybersecurity acts as the departmental representative, and plays a crucial role in managing IT security solutions and services. The Director of Cybersecurity collaborates with clients, senior management, and other federal and external departments/agencies, to recommend IT security solutions and services; influence the implementation of departmental policies and priorities, courses of action, new products and services;

and lead the negotiation of service levels, contracts, and agreements.

Key Responsibilities include, but are not limited to:

• Serves as the senior officer responsible for Information Technology Security controls at the National Arts Centre;

• Implements and operates a comprehensive cybersecurity program focusing on monitor-detect-and-response operations including security logging and monitoring, advanced threat detection, containment, incident response, and security operations centre (SOC) functions;

• Manages Cybersecurity incident response including investigation, impact analysis, resolution, remediation and communications;

• Manages the Cybersecurity program using a primarily externally managed operating model via financial and contract management, determining the goals, objectives and priorities, prepares operational and business plans, and leads the development of work processes and standards;

• Leads the application of the NAC’s IT security controls to ensure compliance with security policies and industry standards;

• Develops corporate strategies and initiatives to ensure that the IT Cybersecurity solutions and services effectively support NAC requirements;

• Represents the department with internal or external collaborators in order to negotiate service levels, determine IT security solutions needs, provide advice and solutions to IT security problems, identify and address the need for IT security solutions renewal, and reach consensus on overall departmental/agency objectives and priorities for the IT security solutions and services;

• Chairs departmental IT committees, attends symposiums and seminars, maintains membership in professional associations, and consults with IT officials of other government departments or agencies, provincial governments and the private sector;

• Manages and provides overall direction of the IM/IT department; and serves as an effective member of IT senior management;

• Provides management of staff (currently one direct report) and an indirect oversight role over contract employees.

Skill Requirements

• Post-secondary education in an IT related field (e.g. Computer engineering, Computer Science, Information Technology, Business Technology Management – Digital Security or related field) or equivalent work experience;

• 10 years of experience in IT domain with some management experience;

• Minimum of 5 years of practical experience in Information Technology Security, privacy, Cybersecurity, or related roles;

• Information security professional certification desired (CISSP, CISM, CISA etc.);

• Knowledge of common information security management frameworks such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity frameworks such as ITSG-33;

• Deep understanding of IT security and the ability to manage departmental activities and resolve related problems. This encompasses application security, computer science, IT infrastructure, cloud services, and various IT management and security practices;

• Strong knowledge of Canadian and international IT security standards, trends and developments in IT systems and technologies, and information system methodologies;

• A proven ability to communicate with technical and non-technical staff across multiple
disciplines;

• Experience in providing advice to senior officials in the area of IT security solutions, to develop appropriate IT security systems, and to negotiate service levels;

• Experience in leading IT security initiatives and recommending joint initiatives with other organizations in the context of an evolving IT landscape;

• Knowledge of contract management methods, techniques and practices, and…