Manager, Cybersecurity

Canadian Mental Health Association•Toronto, ON

4d•Hybrid

About The Position

The Canadian Mental Health Association (CMHA), Ontario Division is seeking a Manager, Cybersecurity to establish a data and security governance program for the CMHA Ontario Network. This role will encompass risk management, business continuity, and providing project management guidance to team members. The objective is to support CMHA Ontario and its branches in creating a consistent cyber program across the network, leveraging industry best practices for cybersecurity, incident management, and business continuity.

Requirements

Knowledge and experience working with information technology infrastructure, system management, privacy, and cybersecurity (minimum 3 years).
Program management certification (PMP) and demonstrated experience managing programs or projects.
Implementation experience across a complex network of organizations.
Demonstrated success in people management, including leading, building and motivating a strong team.
Strong, independent work ethic and comfort working with teams and a diverse range of stakeholders.
Superior verbal and written communication skills and strong interpersonal skills.
Computer proficiency, including Excel, Word, PowerPoint, and SharePoint.
G license required.

Nice To Haves

Experience in the health care sector, IT privacy, and security is preferred.
Experience working with non-governmental organizations and government agencies, and knowledge of the healthcare environment in Ontario is an asset.

Responsibilities

Engage with branch staff and leadership on cyber security activities including training and tabletop exercises.
Collect and collate policies and processes around data and security governance, risk management and business continuity.
Engage with the provincial cybersecurity centre and local delivery groups (LDGs) to identify resources and supports for branches, develop a cyber security governance model for the CMHA branch network and establish communication channels on cyber risk.
Facilitate the implementation and maintenance of the program across the CMHA branch network.
Assist CMHA branches in completing the NIST assessments through the Ontario Health platform.
Develop and maintain a library of cyber security policies and Standard Operating Procedures (SOPs) for the CMHA branch network.
Guide CMHA branches in the implementation and maintenance of critical safeguards to ensure cybersecurity.
Coordinate cyber security incident response training and exercises.
Develop templates and tools to support incident management and business continuity.
Maintain documentation on work planning, status updates, decisions, actions and risks.
Participate in and coordinate engagement with Ontario Health, LDGs and other stakeholders to align CMHA Ontario’s cyber supports with industry leading practices in cyber security.
Lead RFP processes and coordinate identification and engagement of vendors to deliver cyber security training and testing (e.g., tabletop exercises).
Oversee completion of deliverables and risk management/mitigation activities.
Prepare materials for reporting to leadership, the CMHA Ontario branch network and other stakeholders.
Manage budget and expense tracking. Ensure the program meets funding and reporting requirements.
Attend team meetings; identify opportunities for collaboration and partnerships.
Assist with the creation of communication materials related to cybersecurity.
Contribute to the development of funding requests for capital and base funding related to cyber security.
Coordinate with CMHA Ontario branches to ensure implementation and maintenance of a cyber program locally and completion of necessary assessments.
Contribute to the development, planning and progression of cyber maturity roadmaps for the CMHA Ontario network.
Supervise and mentor project management staff within the department to implement best practices and effectively use PM tools.
Provide coaching and performance management in relevant areas, supporting team members’ success and continuous development.
Promote a culture of collaboration and continuous improvement and development within the team.
Actively participate in the recruitment, selection, and talent management of employees, helping to manage vacancies and new positions.