Director, Cyber Security Program Management
2180 Yonge, Canada
Canadian Tire Corporation
What you'll do
As the Director of Canadian Tire's Cyber Security Program Management you will execute the capability strategy for the all critical and integrated layered defenses. You will ensure that all requirements and use cases are met by a comprehensive technology roadmap across multiple cyber security domains.
Cyber security service strategy
Translate strategic cyber objectives (as defined by the CISO) into capability-specific outcomes and associated requirements
Identify capability requirements and outcomes in line with target residual risk posture for all cyber security domains
Maintain and communicate cyber security capability roadmaps aligned to strategy
Cyber security program delivery
Capture and drive all cyber security solution requirements working together with the CISO senior leadership teams aligned to established strategy
Coordinate and collaborate all cyber security enhancements to people, process and tools across the enterprise
Manage overall cyber capability program including key delivery initiatives, inbound requests and evolving threats to they are captured, prioritized, and addressed adequately within existing or new capabilities
Cyber security capability standards & requirements lifecycle
Translate the overarching policies established by the GRC team into capability requirements for delivery teams
Liaise with business and technology leaders to communicate cyber standards and requirements value
Act as the single point of contact for all cyber-related capability requests, directing stakeholders to the right SMEs
Agile CoE
Adopt required cyber security design frameworks and guidelines for Agile teams to integrate requirements and capabilities to achieve the strategy
Ensure security testing and assurance activities (e.g., penetration testing, code reviews, compliance checks) are integrated into every sprint and release milestone
What you bring
10+ years experience in a large technology environment with progressive roles, preferably with exposure to retail or banking sectors, with 5+ years focused on Cyber Security
Extensive experience with Azure cloud solutions
Experience in driving and influencing strategic execution towards key outcomes for multi-year risk and maturity-based outcomes
Strong background in the implementation and operation of a wide range of security technologies spanning on premise and cloud environments
Advanced Cyber Security qualifications are desired (CISSP, CISM, CISA, CRISC, CCSP, CCSK)
Experience working with NIST CSF, PCI-DSS, MITRE ATT&CK Framework and others
Experience influencing and participating in SAFe agile delivery practices
About Us
Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, 1,700 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there's a place for you here.
Our Commitment to Diversity, Inclusion and Belonging
We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.
Accommodations
We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Azure Banking CCSK CCSP CISA CISM CISO CISSP Cloud Compliance CRISC E-commerce MITRE ATT&CK NIST Pentesting Strategy
Perks/benefits: Career development Health care Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.