C

CBC/Radio-Canada

Canada's national public broadcaster

Senior Director, Information Security and End-User Technology - Information Security and End-User Technology, T & I

CybersecurityPosted on Nov 13
Full-timeNo salary listed

About the Job

Requirements

  • A bachelor's or master's degree in computer science, cybersecurity, computer engineering, business administration with an IT concentration, or a related field.
  • At least one recognized executive-level professional certification: CISSP, CISM, CCISO, CISA, or CRISC.
  • Seven to 10 years of experience managing professional teams or equivalent.
  • Deep expertise in technology architecture, cloud security, network infrastructure, cryptography, and identity and access management.
  • Ability to provide collaborative leadership to see complex, transformational initiatives through to completion.
  • Demonstrated skills in planning, organizing, and engaging teams.
  • Proven ability and track record in leading cross-functional teams.
  • Ability to work with cross-functional, agile teams or on projects with multi-team dependencies.
  • Ability to distil complex issues into clear, concise presentations and reports.
  • Expertise in technologies typically used by journalists in a newsroom.
  • Knowledge of business practices, including drafting plans and specifications, contracts, negotiation, finance, and IT management software.
  • Knowledge of software development and the technology infrastructure required for product delivery.
  • Knowledge of workflows for content acquisition, management, and distribution, with a focus on storytelling.
  • Innovative approach to technical and operational challenges, with sound judgment to protect the organization from legal liability and financial loss.
  • Ability to engage and influence stakeholders and partners at every level of the organization.
  • Ability to listen to and communicate with people who have different points of view or competing business objectives.
  • Experience implementing product governance models.
  • Ability to travel occasionally between Montreal and Toronto.
  • Bilingualism in English and French, spoken and written.

Responsibilities

  • Develop, champion, and execute an enterprise-wide cybersecurity strategy aligned with the Corporation’s business mission, risk profile, and digital transformation.
  • Advise the Board of Directors, Audit Committee, Senior Executive Team, and T&I Management Executive Team on risk status, security posture and maturity, and required investments.
  • Foster a Security by Design culture and establish security architecture governance frameworks that maintain operational and production workflows while managing risk.
  • Anticipate technology trends and lead secure integration of artificial intelligence, generative AI, and automation into business processes and security defences.
  • Define and adapt the security strategy across corporate IT infrastructure, cloud systems, end-user environments, and critical production, broadcast, and network infrastructure.
  • Ensure resilience of content acquisition, processing, and distribution workflows against threats targeting the media sector and critical infrastructure.
  • Oversee the governance function responsible for developing, maintaining, and enforcing policies, standards, security architecture principles, exception management, and industry frameworks such as NIST, ISO 27001, and AI frameworks.
  • Lead the third-party and partner risk management program for vendors and technology contracts in collaboration with Legal Services and Procurement.
  • Co-develop an enterprise-wide governance, compliance, and ethical framework for AI and generative AI, assessing risks throughout their life cycle.
  • Ensure compliance with applicable laws and regulations, including Quebec’s Law 25, GDPR, and sector-specific requirements.
  • Drive a cybersecurity culture and awareness program focused on lasting behaviour change.
  • Oversee performance and modernization of the Security Operations Centre, advanced detection tools including SIEM, EDR/XDR, automation, and continuous threat monitoring.
  • Direct major security incident response operations and lead technology crisis management from detection through full business recovery.
  • Oversee regular penetration testing, vulnerability assessments, and cyberattack simulation exercises across IT, broadcast, and distribution environments.
  • Guide the strategic vision for Identity and Access Management and privileged access management to provide secure, simple access for staff and contractors.
  • Collaborate with End-User Technology teams to align security with an efficient and intuitive employee experience.
  • Plan and optimize the cybersecurity department’s budget and partner with internal procurement teams to negotiate major technology contracts.
  • Coach and develop a team of directors and senior managers, fostering excellence, innovation, and cross-functional collaboration.

About the Company

CBC/Radio-Canada

Canada's national public broadcaster

CBC/Radio-Canada is Canada's national public broadcaster, producing news and cultural programming for audiences across the country in English and French. Its television, radio and digital services cover local communities and national events, while CBC North broadcasts in Indigenous languages. Viewers can stream Canadian shows and news through CBC Gem and ICI TOU.TV, alongside the corporation's broadcast channels. A federal Crown corporation, it combines parliamentary funding with advertising, subscriber fees and other commercial income to support its public service mandate. Established in 1936, CBC/Radio-Canada is headquartered in Ottawa, Ontario, with its main English and French networks based in Toronto and Montreal.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Ottawa, Canada
Founded
1936

Recently Posted Jobs

Explore more opportunities at CBC/Radio-Canada

See more jobs