---

---

Location

Ottawa, ON | Canada

---

Job description

Description

Position at Canadian Medical Protective Association

■LEAD, CYBERSECURITY OPERATIONS& ARCHITECT  

 

CONTRIBUTING TO THE CMPA  

The Information Security Office, together with Business Capability Enablement (BCE) and Infrastructure & Operations (I&O), form the CMPA IT team.  

 

The Information Security Office plays a pivotal role in safeguarding CMPA’s digital assets, infrastructure, and sensitive information from an array of potential threats. Its primary objective is to design, implement and maintain robust security measures to mitigate risks posed by cyberattacks, data breaches, malware, and other malicious activities. The Information Security Office is responsible for ensuring the protection of the confidentiality, integrity, and availability of the CMPA’s information and technology assets and so plays an essential role in protecting and safeguarding the CMPA’s reputation and ensuring that it continues to provide high-quality services to its members. The Information Security Office works closely with other departments across the Association to ensure that security is integrated into all aspects of the CMPA’s operations.  

 

The Information Security Office is made up of the Information Security Management and Cybersecurity Operations teams.  

 

POSITION OVERVIEW  

Reporting to and working closely with the Chief Information Security Officer (CISO), the Lead, Cybersecurity Operations &Architect plays a key role in ensuring the security of the organization’s information and technology assets through their responsibility for monitoring and analyzing security events, identifying potential security threats, and responding to security incidents. The Cybersecurity Operations team manages security technologies such as identity providers, endpoints, firewalls, intrusion detection systems, and antivirus software. The Lead, Cybersecurity Operations & Architect collaborates with the Lead, Information Security Managementand the IT team to ensure the delivery of the security program.  

 

The Lead is responsible for the effective and efficient management of the team’s operations to ensure that the short and long-term security operations strategies and objectives are successfully implemented. The Lead provides day-to-day direction and support in a number of areas pertaining to security operations while ensuring security standards are met. The incumbent is responsible for developing security procedures and ensures resource capacity to meet service and support needs.  

 

The Lead manages the highly technical cybersecurity analysts and works closely withI&O and BCE leadership. The incumbent is responsible for leading the design and implementation of security solutions that protect the organization’s computer systems and networks. They manage projects with cross-functional teams and ensure that security policies, procedures, and standards are adhered to. Additionally, the Lead providesregular updates to the CMPA IT team leadership on projects or initiatives, budget forecasts, team challenges, and opportunities.  

 

The Lead is a caring leader who motivates their team by creating an environment where employees feel empowered to contribute and feel engaged by their contributions. The incumbent possesses excellent communication skills and is committed to supporting the development of each person on the team, so everyone is enabled to deliver their best work.  

 

POSITION ACTIVITIES  

Architecture  

• Define and maintain the CMPA’s cybersecurity architecture that supports security policies and standards
• Research, evaluate, and communicate emerging threats, trends, and technology advancements
• Identify opportunities for improving the CMPA’s security posture and develop proposed solutions
• Develop security requirements using control frameworks, risk assessments,threat modelling, testing, analysis of existing systems, and inputs from additional subject matter experts
• Participate in working groups and project teams to providesecurity architecture solutions and advice
• Create deployment and implementation plans for cybersecurity solutions that are tailored to the CMPA’s environment and support structure

Security Policies, Procedures and Standards  

• Work closely with the CISO to ensure that security policies are in place and adhered to
• Oversee the development and maintenance of security procedures and practices
• Collaborate with the Security, Infrastructure & Operations, and BCE teams to ensure that security is integrated into all aspects of their operations

Incident Response  

• Develop and maintain incident management plans, processes and procedures
• Lead cross-functional technical teams in incident response and remediation

Vulnerability Management  

• Develop and maintain vulnerability management plans, processes and procedures including scanning, patching, and other remediation strategies.
• Identify potential security vulnerabilities and design solutions to prevent or mitigate those vulnerabilities
• Coordinate vulnerability management work with the Lead, Information Security Management

Security Event Monitoring  

• Responsible for the monitoring and analysis of security events and responding to security incidents
• Manage the relationship with a third party Managed Defence Response vendor who provides 7/24 security monitoring

Security Operations  

• Responsible for the day-to-day and project-basedactivities of the security operations team as they manage security technologies such as identity providers, endpoints, firewalls, intrusion detection systems, and antivirus software
• Maintain regular communication with the SOC provider to review the security posture, incident reports, threat intelligence, and service level agreements
• Evaluate the performance and quality of the SOC provider and provide feedback and recommendations for improvement
• Escalate and resolve any issues or conflicts that may arise between the organization and the SOC provider

People Leadership  

• Leads and coaches their team, (i.e. career development, coaching to advance skills, motivating employees to do their best work, promoting collaboration, creating an environment that values open communication, trust, experimentation, etc.)
• Provides leadership and guidance, regular feedback, coaching and mentoring, including the annual performance appraisal
• Creates a culture of accountability and empowerment and encourages innovation, continuous learning, and development
• Ensures employees have the skills and competencies they need now and in the future by helping team members allocate time for learning and leadership opportunities
• Promotes a work environment that fosters teamwork, collaboration, respect and inclusion within the department and throughout the Association
• Creates an employee experience in which team members feel included, accepted for who they are, and supported in doing their best work
• Support team members in learning and applying cybersecurity best practices and industry standards

 

EDUCATION AND EXPERIENCE  

• A minimum 4-year university degree in Cybersecurity, Information Technology, Computer Science, or an equivalent field of study
• A minimumof 10 years ofexperience in cybersecurity and relevant business experience
• Minimum of 5 years of experience leading and managing a team of security professionals
• Cybersecurity certifications are desirable (i.e., CISSP, CISM, CRISC, ITIL, SABSA, SANS)
• Proven experience working in an agile environment and building agile teams
• Demonstrated experience with project management software, strong MS Excel experience, and strong experience with online collaboration tools

• Experience in security architecture principles and best practices
• Knowledge and experience withinformation security frameworks (e.g.,NIST, ISO, COBIT)
• Knowledge of cloud technologies
• Experience with incident response planning and management
• Experience in DevSecOps and Kanban ways of working

 

SKILLS AND ABILITIES

 

Leadership: with a growth mindset, takes a corporate, long-term view in defining and communicating goals and outcomes to the team that provide direction, purpose, and inspiration. Sees the "big picture" of how all functions work together to produce value to members and stakeholders. Exceptional collaborator, communicator, and facilitator. Fosters a positive culture of trust and respect where team members feel valued and supported.  

 

Project coordination: coordinates projects; communicates changes and progress;manages project team activities;knowledge of project management and agile methodologies and tools.  

 

Teamwork: balances team and individual responsibilities creating the right context for self-organizing teams; exhibits objectivity and openness to others' views; gives and welcomes feedback. Includes staff in planning, decision-making, facilitating and process improvement. Builds and maintains lasting relationships with other teams/ departments, key business partners, and external parties.  

 

Adaptability: adapts to changes in the work environment; manages competing demands; changes approach or method to best fit the situation; able to deal with frequent change, delays, or unexpected events; keeps commitments. Flexible and open to new ideas and approaches, embraces change as an opportunity for growth. Proven ability to encourage, support, and enable change.  

 

Initiative: looks for and takes advantage of opportunities; presents ideas and information in a manner that generates interest.  

 

Judgment: takes responsibility for decisions and actions, includes appropriate people in decision-making process; makes informed and timely decisions. Makes difficult decisions, when necessary, holds themselves accountable for outcomes and learns from their mistakes.  

 

Analytical: synthesizes complex or diverse information; uses intuition and experience to complement data.  

 

Problem-solving: uses critical thinking and analytical skills to find solutions to challenges.  Appropriately seeks input from others but takes ultimate responsibility.  

 

Verbal communication: tone and approach are adjusted to fit the needs of the audience and circumstances, listens, and gets clarification; speaks clearly and persuasively; responds well to questions; demonstrates group presentation skills; participates effectively in meetings.  

 

Written communication: writes clearly and informatively; edits work for spelling and grammar; varies writing style to meet needs; presents numerical data effectively.  

 

Conflict resolution: skilled in managing and resolving conflicts in a constructive manner while maintaining psychological safety.  

 

POSTING DETAILS  

• Job type: Regular full-time opportunity
• Salary range: $112,600 to $150,700 annually – this role is classified as level 10
• Skills Assessment: Selected candidates may be required to complete a skills assessment
• Location: Hybrid – Primary Remote - you can work from a home-based office the majority of the time, with regular on-site presence at the CMPA office (up to 1-2 days per week). If you prefer to work in an office setting as your primary workspace, you can choose to work out of the CMPA’s office.  
• Application deadline: Tuesday, March 19 at 4:00PM EST

 

The CMPA is an equal opportunity employer and is committed to being responsive to those living with disabilities and strives to prevent and remove barriers to accessibility. The CMPA will provide support and accommodation in its recruitment processes to applicants living with disabilities. If you are invited to participate in an interview and/or skills assessment and have accommodation needs, please let us know.  

 

Equity, diversity, and inclusion (EDI) is a key priority, and we actively strive to build a culture of inclusion where employees can be their authentic selves and are valued for their diverse experiences and perspectives.  

 

We welcome and encourage candidates from diverse backgrounds and a variety of lived experiences to apply.  

 

 

 

---

Job tags

---

---

Salary

$112.6k - $150.7k per year