Cybersecurity Program Manager

Export Development Canada (EDC) is a financial Crown corporation dedicated to helping Canadian businesses make an impact at home and abroad. EDC offers financial products and knowledge to help Canadian businesses confidently enter new markets, reduce financial risk, and grow their business.

When you join our team, you’ll be helping Canadian businesses learn the endless possibilities that open to them through export and help bring their vision, passion, and innovation to the world. Your knowledge and expertise will support more than 25,000 Canadian businesses and their customers in as many as 200 markets worldwide. You’ll work amongst the best and brightest in an inclusive, collaborative environment that fosters professional development and success. And you’ll know that you’re making an impact every day – for businesses, for Canada and for the people you work with.

Are you ready to make an impact? Join EDC, recognized as a Top 100 and Top Family-Friendly Employer, as we take on the risk so Canadian businesses can take on the world.

Team & Job Overview

The Digital & Technology Solutions (DTS) group under the leadership of the Chief Information Officer was established in 2023 with the mission of empowering our customers and colleagues to take on the world, by seamlessly delivering secure and reliable digital experiences. Digital & Technology Solutions has set out to achieve the following objectives for EDC:

• Define, execute, and sustain the integrated technology target state, target data model and technology operations required to enable EDC’s 2030 business transformation.
• Establish and manage the rolling 3 Year Digital Roadmap that sequences the technology outcomes required to achieve the technology target state and facilitate its execution across all domains in the organization.
• Keep pace with industry trends and emerging technologies, ensuring EDC has access to the digital technology tools it needs to stay relevant in the market and grow Canadian global trade.
• Lead and ensure integrated digital, data, infrastructure, and cybersecurity implementations to create excellent customer, user, and employee experiences.

The Enterprise Information Security (EIS) team is seeking a highly skilled and experienced Cybersecurity Program Manager to lead and manage a portfolio of projects delivering cybersecurity capabilities at EDC. Reporting to the EIS Director, this role supports the strategic planning process and outcomes, actively participating in outlining the tactics, programs, projects, initiatives, and resources needed to achieve business goals.

High-Level Responsibilities:

• Program and Project planning, monitoring and reporting: Support the strategic planning process by outlining tactics, programs, projects, initiatives, and resources needed to achieve business goals.
• Cross-Functional Collaboration: Work closely with both technical (e.g. Engineering, Security) and non-technical (e.g. Legal, Privacy, Compliance) partners to design, plan, track, and report progress of cybersecurity initiatives.
• Communication: Maintain open lines of communication with business and technology units to understand their plans and ensure information security is built in their plans and supports their vision and business obligations.
• Enable team operations, cyber governance and Issue Resolution: Act as the primary point of contact for cyber governance and program issue resolution, document and maintain team intake and operational procedures.
• Resource Optimization: Collaborate with technical experts, product owners, and project managers to ensure optimal resource utilization, project planning, risk assessment, and stakeholder communication.

The successful candidate exemplifies leadership through integrity, trustworthiness, and confidence, effectively representing the cyber team within EDC and with external partners and stakeholders. The Cyber Program Manager is both process- and results-oriented, showcasing strong problem-solving skills and expertise in various technology implementation projects, compliance requirements, and risk analysis methodologies. With robust analytical and problem-solving abilities, this individual adeptly assesses complex issues and excels in communicating technical concepts to non-technical stakeholders. Additionally, the Cyber Program Manager leads and supports technical subject matter experts in breaking down tasks and addressing cybersecurity challenges.

Key Responsibilities:

• Define cyber program objectives and key results - plan, manage, and track a portfolio of projects, including cyber initiatives delivered by other teams across the organization.
• Collaborate effectively with a wide range of EDC employees and external business and technology stakeholders. Understand and manage dependencies across stakeholders to coordinate and deliver results, reducing cyber risk exposure at EDC while enabling business objectives.
• Manage the cyber team intake/backlog, triage, prioritization, and alignment on execution approaches for cyber change and operational initiatives. Facilitate cyber team ceremonies to visualize work, manage impediments, and ensure a well-balanced and consistent flow of work through the system.
• Oversee the execution of cybersecurity projects across the organization, providing integrated progress status, addressing execution issues and risks to ensure projects are completed as per the approved plan and resource allocation.
• Document and maintain cyber team procedures, the team site, and the cyber governance framework. Establish key performance indicators to support clear accountability, measure program effectiveness, and drive continuous improvement of cyber program and operations activities.
• Collaborate with other internal functions to plan, track, and manage budget and resources efficiently. This includes the procurement of cybersecurity services and solutions, working closely with vendor management, procurement, and DTS digital office functions.
• Foster innovation and continuous improvement by partnering with business and technology product owners and delivery partners. Use a hypothesis-driven approach to experimentation, measurement, and learning to ensure the cyber team actively seeks opportunities for improvement through retrospectives.

Screening Criteria:

• Undergraduate degree in Computer Science, Information Security, Management Information Systems, or a related discipline.
• Minimum of 5 years of hands-on experience as a subject matter expert performing project/program management roles, including but not limited to business analyst, scrum master, product owner management and product development.
• Minimum of 3 years of experience leading cybersecurity and/or technology project implementations.
• At least 2 years of experience implementing technology programs, influencing and driving cross-functional teams to deliver solutions in complex, dynamic environments.
• Excellent verbal and written communication, critical and strategic thinking, time management, priority planning, and interpersonal skills.
• Experience managing service providers/vendors (managed services delivery).

Assets:

• Working knowledge/experience with standard security frameworks such as NIST, ISO, COBIT and/or CIS.
• Relevant certifications (e.g., Scrum Alliance or SAFe certification, PMP, CISM, GIAC Security Essentials).
• Bilingualism in both official languages (English and French).

Compensation Details:

• Cyber Security Business Lead 18: Salaries typically range from $92,355 to $123,140 annually, based on qualifications and experiences, plus a performance-based incentive.

Location:

• Export Development Canada is a hybrid work environment.
• This role may be performed from EDC’s headquarters in Ottawa, or from the Community Hub in Toronto, Mississauga, Montreal, Laval, Brossard, Halifax, Calgary, or Vancouver.
• Relocation assistance is available for eligible candidates.

EDC's Commitment to Employment Equity:

EDC is committed to employment equity and achieving a diverse workforce. EDC actively encourages applications from women, Aboriginal peoples, visible minorities, persons with disabilities and members of the 2SLGBTQI+ community. If selected for an interview, please advise us if you need any special accommodation.