Cybersecurity Director
- Edmonton, AB
- Permanent
- Temps-plein
- Develop and execute a robust cybersecurity program aligned with AutoCanada's business objectives and risk appetite.
- Lead and mentor a small but mighty team of cybersecurity professionals fostering their growth and ensuring operational excellence.
- Oversee vendor management for our outsourced Security Operations Center (SOC), ensuring effective threat detection, incident response, and continuous improvement.
- Establish and enforce cybersecurity policies, standards, and procedures across the organization.
- Manage and mature our cybersecurity technologies and controls, with a focus on:
- Network Security: Protecting our internal and external networks from unauthorized access and attacks.
- Data Loss Prevention (DLP): Implementing strategies to prevent sensitive data from leaving our control.
- Cloud Security: Securing our cloud environments and applications (SaaS, PaaS, IaaS).
- IoT Security: Addressing the unique security challenges posed by connected devices within our dealerships.
- Ensure compliance with relevant industry regulations and public company requirements.
- Lead incident response efforts, including detection, analysis, containment, eradication, and recovery.
- Conduct regular risk assessments and vulnerability management to identify and mitigate potential security weaknesses.
- Drive security awareness training programs for all employees.
- Stay abreast of the latest cybersecurity threats, trends, and technologies to continuously enhance our defenses.
- Work closely with the Director of IT and other technology departments to develop and implement security solutions.
- Work on audits and audit remediation. Ensure robust cybersecurity measures are integrated into all aspects of company acquisitions, from due diligence to post-acquisition integration.
- Rationalize and fully utilize available technology.
- Implement a data loss protection solution and a way to secure corporate data on devices.
- Update and rollout relevant security policies and oversee training initiatives.
- 7+ years of progressive experience in cybersecurity, with at least 3-5 years in leadership.
- Proven experience developing and implementing comprehensive cybersecurity strategies.
- Deep understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and risk management methodologies.
- Strong knowledge of network security, application security, cloud security, and data protection.
- Experience with incident response planning and execution.
- Familiarity with various security technologies and tools.
- Excellent leadership, communication, and interpersonal skills.
- Ability to translate complex technical information into understandable terms for non-technical stakeholders.
- Strong analytical and problem-solving abilities.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Experience in the automotive retail industry or a similar multi-location business.
- Experience with security in a hybrid IT environment (on-premise and cloud).
- Experience with specific compliance frameworks relevant to Canadian businesses.
- Recommended Certifications: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control).
- Competitive Compensation and Benefits Package
- Employee Vehicle Purchase & Service Plans
- Employee and Family Assistance Programs
- Company-wide appreciation events and contests throughout the calendar year
- Professional development and the opportunity to grow your career