IT Security Manager providing operational leadership for ICBC’s IT security program. Enhancing cyber security practices and managing security initiatives in a dynamic, hybrid cloud environment.
Responsibilities
Provide overall operational leadership of ICBC’s information technology security program.
Lead our security operations and security platforms team members.
Develop and provide execution leadership of our IT security roadmap, vulnerability management and incident handling.
Ensure security standards, controls, strategies and best practices are incorporated and executed across our IT organization.
Enhance cyber security practices through collaboration and influence.
Oversee the reporting and analysis of information technology security operational effectiveness.
Drive the evolution of the IT Security program, developing the roadmap, plans, technologies, and processes.
Lead IT security initiatives and projects while staying on budget, schedule and within scope.
Provide vendor and contract management of our IT security vendors and service providers.
Oversee the provision of consultation and subject matter expertise to other IT and business stakeholders.
Manage the day-to-day operations of the team including the units business plan and budget.
Raise and promote new ideas, continuous improvements, and process optimization leveraging automation.
Requirements
Proven expertise and experience in IT Security principles and standards, process, systems and tools, and trends and best practices.
Define and implement security controls across multiple layers of the technology architecture stack to ensure robust protection and compliance.
Analyze and translate requirements from industry standards (e.g., ISO, NIST, OWASP, CIS, CCCS), organizational policies, regulatory frameworks, and threat/risk assessments into actionable strategies for enterprise security.
Support in designing hybrid security architecture, managing vulnerabilities and patching processes, enabling identity strategy, strengthening cloud security, and ensuring compliance with privacy requirements.
Experience in managing Cyber Security operations, monitoring, and capabilities both on-prem and in the cloud.
Experience with vendor and contract management.
Experience developing roadmaps, plans, technical standards for IT security services and initiatives.
Demonstrated success leading technical teams with experience creating a collaborative and positive work environment, coaching and influencing team members, and building and maintaining strong and effective stakeholder relationships.
Excellent interpersonal communication, negotiation and facilitation skills.
Several years of experience in information security.
Professional designation or certification in the information security field such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.
Benefits
Three options of health and dental coverage.
100% employer paid life insurance, long term disability and travel insurance.
Sick leave plan – 100% of pay for a period of a maximum of 8 weeks plus 85% of your pay for a subsequent period of up to 9 weeks.
Security Officer ensuring safety and security of Yankee Candle assets and personnel. Responsiblities include monitoring, patrols, incident response, and safety training at the corporate campus.
Senior Specialist in Information Security Governance, Risk & Compliance at Cellulant, driving information security, privacy, and compliance standards within BFSI context.
Cloud Security & Application Security Engineer at Cellulant enhancing security across cloud - native platforms and applications. Working in a hybrid role to support a leading payment service provider in Africa.
IT Audit Consultant joining Baker Tilly to manage technology risks for clients, offering strategic advice and audit support. Engaging with client executives to ensure compliance and operational efficacy.
Senior Health and Safety Advisor overseeing health and safety on construction projects for Aecon. Ensuring compliance with SST legislation and promoting zero accident culture.
Senior Information Security Specialist executing Daikin Europe’s Information Security strategy. Collaborating with leadership to ensure our systems and services remain secure and compliant with regulations.
Experienced Information Security Officer at Daikin responsible for defining Information Security strategy and ensuring compliance with regulatory frameworks. Collaborating with external specialists and mentoring junior team members in EMEA.
Industrial Security Specialist conducting daily security functions and providing technical support within Booz Allen. Focused on protecting company and government assets while handling classified materials.
Security Specialist ensuring the protection of company and government assets. Conducting daily security functions and providing technical support while maintaining compliance with regulations.
Cyber Security Architect at Booz Allen supporting program management of cybersecurity tools suite and Zero Trust Architecture roadmap. Lead technical efforts in modern security practices and team collaboration.