Associate Director of Project Management Services

p>The Associate Director, IT Security plays a vital role in securing the College’s digital assets, including proprietary and sensitive information. The Associate Director, IT Security is responsible for establishing and maintaining an enterprise IT security strategy through strategic initiatives, policy development, architecture design, implementation and management of technology solutions and training programs. Other responsibilities include the selection of appropriate security solutions and managing the budget. The Associate Director, IT Security is responsible for the ongoing operations of security monitoring and remediation, adoption of security best practices and enforcement within the college. The Associate Director, IT Security is responsible for maintaining and testing of a robust cybersecurity incident response plan, including technical playbooks, in the event of a significant cyber-related event.REPORTING RELATIONSHIPS
The Associate Director, IT Security reports to the Chief Information Officer.
Reporting to the Associate Director, IT Security are: 1 FTE – IT Security Analyst – CUPE 1 FTE – IT Senior Network Administrator – CUPE The Associate Director, IT Security frequently meets and collaborates with senior leadership and workplace leaders across the college. The Associate Director, IT Security, is an integral member of the ITS Management Team and is expected to work in close partnership and cooperation with the Information Technology Services management team. li>Is accountable for the security architecture design and the College’s IT security strategy, guided by CIS Controls and the Province of B.li>Develop and maintain a cyber security awareness training program, including phishing cyber security workshops and end-user training.Create, maintain and promote the College’s security documentation (policies, standards, baselines, guidelines and procedures).Maintains the development and implementation of a cyber security incident response program that ensures that all stages of incident lifecycle management are followed: preparation, detection and analysis, containment and eradication and recovery, and post-incident activity.Leads the IT Security Team and provides clear direction for goals and associated actions.Ensures that Payment Card Industry Data Security Standards (PCI-DSS) compliance is maintained and works closely with the IT Infrastructure team to enforce controls concerning card holder data to reduce credit card fraud.Perform threat-hunting exercises and stay current with relevant threat actors and actor groups to ensure the College understands the current risks and trends in targeted higher education attacks.Acquisition & Deployment Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and new attack and threat vectors.Accountable for the selection and acquisition of technical security solutions and enhancements to improve overall enterprise security as per the College’s existing procurement processes.Manage the deployment, integration and configuration of new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures and the College’s security policies and standards.Operational Management Ensure the confidentiality, integrity and availability of the College’s systems, network and data.Ensure the enforcement of security policies, procedures and standards.Leads and coordinates an appropriate level of response to cyber security events, alerts and incidents.Accountable for security-related investigations and communicates frequently with the CIO and ITS management team.Responsible for the design and execution of vulnerability assessments, penetration tests and security audits.Ensures regular cyber security awareness training for all employees is performed to ensure consistently high levels of compliance with security policies, procedures, standards and general security best practices.Perform regular assessments and audits of existing security systems, tools and control, ensuring that we are maximizing the use and value of our investments.Assist in the development and testing of the ITS Disaster Recovery Plan and where appropriate, assist in the College’s Business Continuity Plan.Assist the ITS Management Team, Privacy Officer and functional workplace leaders in providing recommendations related to privacy and the development of Privacy Impact Assessments (PIAs).Engage in ongoing communications to ensure a wide understanding of security goals, to solicit feedback, and to foster cooperation with peers in ITS, the College community, the broader post-secondary institution’s community and BCNET as well as the Ministry of Advanced Education, Skills and Training, the Office of the Chief Information Officer for the Province of British Columbia and the Office of the Information & Privacy Commissioner for British Columbia.Establish and maintain regular written and in-person communications with the College’s executives, decision-makers, stakeholders, department and program heads, schools and end users regarding pertinent security activities.Manages reporting staff, overseeing and participating in the selection, coaching, mentoring, development, and performance management.Researches, demonstrates and presents in public on current ITS cyber security issues and directions for both the College and external audiences.Responsible for maintaining an accurate and current risk register for cyber-related risks and associated remediation plans.Leads large and small projects using project management skills.Participates in community professional associations.Perform 3rd party security risk assessment on vendor solutions and service providers.A Bachelors Degree in Computer Science, Information Systems, Business Administration, or related discipline along with a minimum of eight-years’ experience leading an enterprise security strategy or an equivalent combination of education and relevant experience may be considered.Certification in Project Management and ITIL practices would be beneficial.ISACA Certified Information Security Manager Microsoft Certified Systems Engineer: li>Leadership experience in strategic decision-making and leading large, complex projects.Extensive experience in security architecture design and implementation of security technologies.Experience in designing and implementing employee security awareness training.Strong technical knowledge of IP, TCP/IP, and other network administration protocols.Experience in managing and motivating staff.Broad technical knowledge relating to IT and cyber security practices, including OS and 3rd party software patching, firewalls, network configurations, phishing, and software hardening and deployment and imaging systems.Experience in assessing and implementing CIS Controls, NIST and Defensible Security.Experience in cloud infrastructure, networks, operating Systems and secure software development lifecycle.Excellent leadership skills, including team building, planning and working through change and conflict resolution.Strong interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community.Ability to effectively present ideas and technical concepts to a wide range of College stakeholders.Knowledge of management principles and practices in a service environment.Experience in interpreting the applicability of local and federal laws/regulations to the College’s operations.Job Types: Full-time, Permanent Monday to Friday Bachelor's Degree (preferred)

---