Director, Information Security - Winnipeg, Canada - Pollard Banknote Ltd

Pollard Banknote Ltd

Verified Company

Winnipeg, Canada

2 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

We're looking for a proactive Director, Information Security to join our Information Security team within our Winnipeg Office.

As a Director, Information Security you will ensure Pollard's information systems' security aligns with relevant industry standards and remains compliant with information security requirements imposed by industry certification requirements, client contracts, and applicable law.

In addition, you will oversee the Information Security team and serve as the Chairperson of the Information Security Governance Committee.

What We Offer

Competitive compensation
Profit sharing program every role plays a part in our success
Company pension
Health & Extended Benefits
Opportunities for professional development
Tuition reimbursement
Employee & Family Assistance Program
On-Site Cafeteria & Outdoor Patio
On Site Gym
A variety of committee driven employee engagement activities
Free Parking
We are one of Manitoba's Top Employers for 2023

What You'll Do

Lead strategic development of information security roadmaps and companywide strategy for continuous security posture improvement.
Work closely with peers and business leads to build and implement controls in alignment with riskposture, architectural standards, company strategy, and industry best practices & trend.
Lead Pollard's ISO 27001 program and the development of associated process and procedures required to demonstrate compliance.
Lead a compliance program that includes Payment Card Industry (PCI) or SOC audit requirements.
Provide leadership, direction, governance and support to Pollard owned subsidiary companies to ensure compliance with Information Security standards.
Lead the information security team, providing mentorship and direction on securityrelated initiatives.
Partner with IT Operations, Applications, DevOps, and Product Teams to build, augment, and maintain an effective control environment in response to routine vulnerability and risk assessments.
Support technology implementations in partnership with the Project Management Office and various IT departments
Define & document security policies, procedures, standards and guidelines.
Operationalize and automate security related technologies and features in close coordination with IT operations.
Foster a collaborative culture supporting innovation, integrity, transparency, and business alignment, balancing risk tradeoffs with options and best practices.
Address security remediation action plans and working with peers and leadership to prioritize activities.
Manage information Security issues and breaches and reporting on identification, impact, investigations, resolutions and remediation plans.
Support sales and marketing through RFP responses, security collateral creation, and educating the business development team on Pollard Banknote's security frameworks.
Stay current on security trends, vendors, and tools, strategically incorporating relevant findings into the Pollard security program.
Lead security awareness for employees, contractors, vendors, and customers ensuring Pollard's strong commitment to information security.
Conduct information security audits, vulnerability, and risk assessments on internal processes, technology solutions, vendors, and new business units, including accountability for the Information Security Risk Register
Work with internal & external auditors, customers, and outside consultants when necessary on required security assessments and audits, coordinating and tracking all information technology and security related audits including scope, timelines, outcomes, and remediation activities

Who You Are

An individual who excels in providing strategic direction for information security initiatives.
Someone who exhibits a strategic mindset, anticipating and mitigating potential security challenges proactively.
An excellent communicator, fostering collaboration with crossfunctional teams, peers, and business leads.
Able to build strong working relationships that facilitate smooth implementation of security controls aligned with organizational goals.
Someone who upholds the highest standards of ethical conduct, ensuring compliance with industry requirements and legal obligations.

What You'll Bring

10+ years of experience in information security
3+ years of experience managing a security team.
Postsecondary education in computer science (or equivalent),
Demonstrated technical leadership in a crossfunctional security role.
Proven track record in developing, implementing and integrating security tools, technologies and processes both onprem and in cloudbased architectures.
Experience building and designing enterprise security strategies and establishing enterprise security processes and technology standards.
Experience projectmanaging security control implementations
Expertise with security technology controls (firewalls, orchestration platforms, antimal