Director, Information & Cyber Security, Risk & Control, and Privacy
This role is for a seasoned professional with 10+ years of experience who is self-driven, collaborative, strategic, analytical, somewhat technical, enjoys a fast-paced environment, a strong communicator, and believes strongly in the importance of IT security and data privacy. The role from an office attendance perspective is hybrid. Industry certifications and designations are an asset (ex. CISA, CISM, CISSP, CCSP, CDPSE, CFE).
Mandatory Skills:
Close to or more than 10 years of industry experience working with financial institution in a same or similar role
Expert in Information Security, with at least one of these certifications (CISM, CISA, CISSP, CCSP), CISM preferred
Experience with CSAE 3416 SOC 1 and SOC 2 audit controls assessment process
Expert knowledge of Governance, Risk and Control (GRC) practices.
Expert knowledge of PIPEDA, GDPR and other privacy regulations that apply to financial services.
Excellent interpersonal, oral and written communication skills
Sound understanding of network and cybersecurity defense mechanisms.
Superior analytical skills; ability to frame key analysis required to address critical business issues.
Ability to establish conducive working relationships with stakeholders across the organization.
Team-oriented, collaborative and flexible
Ability to address and deliver against multiple and competing deadlines.