Chief Information Security Officer (IT)

at  The Globe and Mail

COMPANY OVERVIEW:

The Globe and Mail is a national icon and one of Canada’s most recognized media brands. We proudly serve as a trusted destination for Canadians seeking the highest caliber of journalism, and we’ve garnered international acclaim for our data visualization, design, and creative storytelling.
We are committed to fostering diversity and inclusivity by reflecting all Canadians in both the stories that we tell and the composition of our workforce. We are proud partners with organizations like Indigenous Works, Pride at Work, the Canadian Centre for Diversity and Inclusion, and we are a signatory of the BlackNorth Initiative. Recognizing the importance of work-life balance, we offer flexible work arrangements and support programs. We also invest in our employees’ growth through training and mentorship opportunities, enabling you to expand your skills and embrace new challenges.
No matter your position at The Globe, you’ll be an integral part of an organization dedicated to making a positive difference in Canada. Join us.

POSITION OVERVIEW:

The Chief Information Security Officer is a critical member of The Globe’s organization. This role owns the organization’s strategic vision for cyber security. We are looking for a leader who can define and translate the enterprise security risk requirements and constraints of the business into control measures and establish performance metrics. This role will manage a small team that will coordinate the implementation and management of security posture and compliance throughout the organization.

KNOWLEDGE AND EXPERIENCE:

• Extensive knowledge and experience in enterprise security architecture, infrastructure, and security operations
• Experience in designing and delivering employee security awareness training and security documentation
• Experience developing Business Continuity and Disaster Recovery Plans
• Strong knowledge and experience in cyber security and risk frameworks, standards, and industry best practices such as NIST CSF, ISO, PCI DSS, SOC2
• Experience in implementing and managing Governance, Risk and Compliance frameworks
• Strong understanding of project governance and methodology
• Strong understanding of Data Privacy laws
• Strong understanding of operational security technologies and services such as firewalls and network security protocols, VPN, WAF and web protection, EDR, MDR, SIEM, digital forensics, email security, mobile security, ransomware protection, and DLP
• Strong understanding of virtualization and cloud technologies such as VMware, Amazon AWS, Microsoft Azure
• Strong knowledge and experience in vulnerability management program
• Familiarity with Windows, Unix/Linux, and Mac operating systems and applications and directory services

FORMAL EDUCATION AND CERTIFICATIONS:

• College diploma or university degree in the field of computer science and 10 years’ work experience or equivalent combination of education and experience.
• Certified in one or more of the following or similar certifications:
• ISACA CISM (Certified Information Security Manager)
• ISACA CRISC (Certified in Risk and Information Systems Control)
• ISC2 CISSP (Certified Information Systems Security Professional)
• GSLC (GIAC Security Leadership)

VACCINATION POLICY:

All offers of employment with The Globe and Mail are conditional upon the candidate being Fully Vaccinated. To be Fully Vaccinated is defined as someone who has received the full series of a vaccine or a combination of vaccines accepted by the Government of Canada (currently Pfizer, Moderna, AstraZeneca, Janssen) and has received the last dose at least 14 days prior to their start date. To prove they are Fully Vaccinated, all new hires will be required to provide evidence by emailing a copy of their vaccine dose administration receipt(s) to Human Resources prior to their start date. Those seeking exemption based on one or more of the protected grounds in the Human Rights Code will need to provide their request for accommodation to Human Resources for approval. If the accommodation request is not approved and the candidate is not Fully Vaccinated, any offer of employment will be revoked.

Please refer the Job description for details