Director, Cyber Security

Cambrian Credit Union•Winnipeg, MB

About The Position

Cambrian is currently seeking a Director, Cyber Security to join our growing IT Operations & Security team! The Director, Cyber Security provides leadership for Cambrian’s cyber security program and governance function under the direction of the Vice President, IT Operations & Security. This role is responsible for the day to day leadership, oversight, and continuous improvement of the organization’s cyber security capabilities, ensuring alignment with business objectives, regulatory requirements, and the evolving threat landscape. The role leads the cyber security governance team and is accountable for the ongoing maturity of the Information Security Management System, security policies and standards, control oversight, risk management, and related reporting. The role also provides leadership across security architecture, security operations, and security technologies, and works closely with IT, project teams, and business leaders to embed security into systems, processes, and technology delivery in a practical and effective manner. This role will also work closely with the Enterprise Compliance Manager to ensure alignment between IT specific compliance items and the broader organizational compliance and governance framework.

Requirements

A Bachelor’s degree in Computer Science, Information Security, or a related field, or an equivalent combination of education and experience
A Minimum 10 years of progressive experience in cyber security, including 3 years in leadership or senior architecture roles
Strong technical understanding of enterprise infrastructure, identity, network security, endpoint security, database platforms, Microsoft 365, and Azure environments
Proven experience leading an enterprise cyber security program and security operations function
Strong knowledge of IT and security frameworks and standards such as ISO 27001, NIST CSF, and ITIL
Experience with security architecture, cloud security, identity and access management, SIEM, EDR, and vulnerability management
Strong leadership, communication, and stakeholder management skills
Ability to operate effectively in a complex environment with multiple priorities

Nice To Haves

Experience in regulated environments is preferred
Professional certifications such as CISSP, CISM, or equivalent are strongly preferred

Responsibilities

Lead the enterprise cyber security program, strategy, and risk management framework aligned with organizational priorities and risk tolerance
Lead the cyber security governance function, including the Information Security Management System, policies, standards, control oversight, risk tracking, and reporting aligned to applicable frameworks and regulatory requirements
Provide leadership for security architecture, operations, and technologies across infrastructure, applications, and cloud environments
Ensure effective cyber security monitoring, vulnerability management, incident response, and recovery capabilities
Lead threat modelling, risk assessments, treatment planning, and security exception management to address emerging and ongoing risks
Oversee cyber security compliance, audits, assessments, and third party security requirements
Establish performance measures and provide regular reporting on cyber security posture, risks, governance matters, and initiatives to executive leadership and committees as required
Partner with IT, business, and project teams to embed security into systems, processes, and technology delivery
Manage cyber security vendors and recommend solutions that strengthen the organization’s security posture
Lead, develop, and mentor the cyber security team while promoting enterprise awareness and cyber security best practices