Position Details

Office of the Chief Information Officer - Executive Council

Reporting to the Assistant Deputy Minister, Infrastructure & Cybersecurity, the Director of Cyber Security - Resilience & Assurance is a senior leadership role within the Cyber Security Office (CSO) of the OCIO. The position is responsible for leading and expanding the existing Communities of Action while providing strategic direction and oversight for the Government of Newfoundland and Labrador's proactive cybersecurity capabilities. These capabilities include threat intelligence, exposure management, cybersecurity awareness, and security validation.

The role will build on existing Community of Action programs while establishing and enhancing the proactive cybersecurity functions outlined above. The Director works collaboratively across the Office of the Chief Information Officer, Government departments, public bodies, and external partners to strengthen Government's cybersecurity posture. The high-level responsibilities associated with this role include:

Cybersecurity Awareness, Partnerships & Community Engagement

Lead Government's cybersecurity awareness and engagement program by enhancing and delivering existing initiatives for the CSO Communities of Action, including education programs, phishing simulations, role-based training, executive awareness, and workforce resilience initiatives. The role also establishes strategic partnerships across Government and the broader public service through cybersecurity councils, communities of practice, outreach activities, and team-oriented security events that strengthen knowledge sharing and promote cybersecurity as a shared responsibility.

Threat Intelligence

Lead Government's threat intelligence capability by establishing processes to identify, assess, analyze, and communicate emerging cyber threats and risks.



This function provides actionable intelligence to Government and the Communities of Action to support strategic decision-making, inform cybersecurity priorities, validate defensive capabilities, and strengthen cyber resilience through ongoing assessment of the evolving threat landscape.

Exposure Management & Security Validation

Provide strategic leadership for Government's enterprise exposure management program through the continuous identification, assessment, prioritization, and reduction of cybersecurity risk across infrastructure, cloud services, applications, identity services, and third-party technologies. This role establishes modern vulnerability management, including offensive and defensive artificial intelligence capabilities, and security validation practices that measure the effectiveness of security controls, validate remediation efforts, and provide independent assurance of Government's cybersecurity posture.

Cybersecurity Strategy & Continuous Improvement

Work with Executive and Director teams across the OCIO to advance strategic cybersecurity initiatives and ensure the continuous evolution of Government's proactive cybersecurity capabilities across all layers of the OCIO technology environment. This includes capability roadmaps, maturity assessments, performance metrics, organizational improvement initiatives, and strategic planning. The Director identifies emerging trends, recommends future cybersecurity investments,



and ensures proactive cybersecurity capabilities evolve in alignment with changing business priorities and the threat landscape.

Leadership

Provide leadership to a multidisciplinary team of cybersecurity professionals by fostering a collaborative, high-performing culture focused on mentorship, innovation, cross-functional knowledge sharing, and continuous professional development. The Director also promotes strong partnerships across the OCIO to ensure Government maintains an integrated, enterprise-wide cybersecurity capability.

Screening Criteria

1. Post-secondary education in Computer Science, Information Technology, Cybersecurity, Business or related discipline (equivalencies will be considered)
2. Senior leadership experience in cybersecurity, information security or enterprise technology
3. Experience developing cybersecurity strategy, governance or enterprise security programs
4. Experience leading teams through organizational change
5. Experience with stakeholder engagement
6. Professional cybersecurity certification (e.g. CISSP, CISM, CRISC, GIAC) (asset)

Assessment Criteria

1. Knowledge of Technology Infrastructure areas
2. Ability to collaborate with executive leadership and other stakeholders
3. Ability to effectively prioritize
4. Ability to manage multidisciplinary teams
5. Ability to effectively exchange information
6. Leadership skills
7. Solutions-oriented

Conditions of Employment

Conditions of Offer

1. Recent and satisfactory Criminal Records Certificate from local police

Conditions of Acceptance

1. Willing to work overtime (occasional)

Information for Applicants For more information about this opportunity please contact, Shawn Edwards, Assistant Deputy Minister, Infrastructure and Cybersecurity at [email protected] or (709) 702-3950.

📌 Director of Cyber Security (St. John's)
🏢 Government of Newfoundland and Labrador
📍 St. John's