Cybersecurity Director

Agropur•Longueuil, QC

2d•CA$138,900 - CA$173,600•Hybrid

About The Position

The Cybersecurity Director is a leadership position responsible for developing and implementing comprehensive cybersecurity and information security strategies and programs across the organization. The incumbent is accountable for safeguarding the confidentiality, integrity, and availability of the organization’s information assets, systems, data, and networks. Key responsibilities include managing day-to-day cybersecurity operations, leading a team of security professionals, overseeing the design and implementation of security controls, collaborating with various stakeholders, providing guidance to leadership and employees on security-related matters, and ensuring compliance with applicable laws, regulations, and industry best practices.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field required. An equivalent combination of education and/or experience may be considered.
Minimum of ten (10) years of experience in the Information Technology industry required.
Minimum of five (5) years of experience leading an Information Security team required.
Bilingualism in French and English, both spoken and written, is required.
Strong leadership skills, with the ability to develop and communicate program objectives, inspire and motivate staff, and maintain alignment with the organization’s strategy.
Excellent verbal and written communication skills, including the ability to articulate and “sell” program goals and objectives to business stakeholders as well as technical leaders.
Proven experience and strong influencing and negotiation skills in an environment where resources are highly competitive.
Excellent analytical, strategic planning, and execution capabilities.
Ability to develop and implement programs while balancing financial constraints and available resources.
Experience with at least one project/program management methodology (e.g., PMBOK).
Demonstrated experience managing large-scale, complex Information Security projects and programs.

Nice To Haves

Experience in industrial/manufacturing environments is considered an asset.

Responsibilities

Develop and implement an information security and cybersecurity strategy: Develop a comprehensive information security and cybersecurity strategy and architecture aligned with the organization's goals and objectives. Define and implement policies, procedures, controls, and guidelines to protect the organization’s information assets.
Lead the Information Security and Cybersecurity Team: Manage a team of information security and cybersecurity professionals by providing leadership, coaching, support, and fostering a culture of security awareness. Ensure the team has the necessary resources to effectively carry out its responsibilities and achieve its objectives.
Risk Management: Identify and assess potential security risks and vulnerabilities across the organization’s information systems, data, and networks. Develop and implement risk mitigation strategies and controls to minimize security incidents and breaches. Coordinate response efforts and recommend corrective actions. Provide risk-related guidance for IT projects, including the assessment and recommendation of technical controls.
Security Operations: Oversee day-to-day security operations, including monitoring and incident response activities. Collaborate with internal teams and external vendors to detect, analyze, and respond promptly to security incidents. Develop and implement incident response plans.
Compliance and Governance: Ensure compliance with applicable information security laws, regulations, and industry standards. Stay up to date on emerging threats and security technologies to continually adapt and strengthen the organization’s security posture.
Security Awareness and Training: Promote a culture of security awareness among employees. Develop, maintain, and deliver training programs to educate employees on information security best practices, guidelines, policies, and procedures. Assess emerging cybersecurity threats and IT trends and develop effective security controls.
Third-Party Security Management: Assess the security posture of third-party service providers. Develop and manage vendor relationships to ensure their security controls meet organizational requirements. Likewise, ensure the organization’s internal security standards align with industry best practices and customer expectations, including those of Agropur’s clients.
Incident Response and Digital Forensics: Lead investigations into security incidents, perform forensic analyses, and oversee incident response activities. Coordinate with legal counsel, law enforcement agencies, and other relevant stakeholders as required.
Security Audits and Assessments: Coordinate and participate in internal and external security audits and assessments. Work closely with auditors to ensure compliance with audit requirements and address any identified security gaps or deficiencies.
Security Governance and Reporting: Define and report on information security metrics. Prepare and present regular reports to senior leadership and stakeholders regarding the organization’s security posture, incidents, and ongoing initiatives. Provide recommendations for continuous improvement based on industry trends and emerging threats.
People Management Responsibilities.