Position Description

CGI, a global leader in IT service outsourcing is seeking a Manager or Director of Security, internally referred to as a Business Unit, Security Business Partner (BUSBP), to support business units across Canada. The BUSBP is a leadership position that is a direct report to the Vice President of Security for Canada Operations within the Office of the Chief Security Officer. The role will focus on all aspects of corporate security, from physical, cyber and information security disciplines.

The BUSBP is the primary security point of contact to support the business unit in executing CGI security requirements within Canada, responsible for the overall security posture of the business unit and supporting and responding to client security related matters.

This role can be located in any CGI Office in Toronto or Montreal.

Your future duties and responsibilities The Business Unit Security Business Partner (BUSBP) manages the implementation of internal corporate policies, procedures, and standards within the Business Unit (BU).

Client Delivery Enablement

- Ensure implementation of the ESMF consistently across the BU delivery operations. Support engagement delivery and client inquiries related to CGI Global Security (i.e. VIP and client meetings)
- Support client security reviews and audits in collaboration with all stakeholders. Primary point of contact for CGI Global Security functions and client security matters within the BU Business Development Enablement
- Review proposals/renewals for security risk and CGI Security Baseline compliance, and provide recommendations (i.e., security integration into BEMF). Support Global Security aspects of client presentations
- Support strategic team-oriented opportunities with the business security practices and delivery centers. Support CGI Merger and Acquisition program as needed.Strategy and Framework Execution
- Communicate,



train and enforce BU adherence to CGI Security Baseline for internal and shared (multi client) environments
- Manage exceptions to the CGI Security Baseline within the BU
- Validate BU requirements are in alignment with Global Security initiatives in collaboration with all stakeholders
- Lead the security education, training and awareness programs within the BU in alignment with Global Security directives
- Support security certification and re certification within the BU (e.g. ISO 27001) where applicable, consistent with ESMFSecurity Management and Reporting
- Maintain and report on security metrics including quarterly scorecard. Report on security risks at the BU level
- Oversee the management of security incidents including escalation to the SBU SBP and BU management as needed. Lead the Security Risk Management process within the BU (i.e., analysis, mitigation and monitoring of identified risks)
- Participate and inform security audits and compliance activities within the BU
- Manage security vulnerability program and ensure remediation are deployed timely
- Validate the execution of third party security risk assessments for the BUPhysical / Workforce Security and BCP. Oversee the execution of physical security and workforce protection at the BU level
- Ensure that the BU develops, maintains and tests business continuity plans (BCP)
- Support global crisis management activities and work closely with the BU during crisis/ BCP situations
- Support insider threat management as requested Government Security Programs (when applicable)
- Oversee personnel and security clearance program
- Manage special security agreements (e.g. defense, space,



intelligence etc.). Oversee security operations in alignment with ESMF and manage conflicts between CGI and government scope

Required Qualifications To Be Successful In This Role

- A minimum of eight or more years in an information security role.
- Ability to work independently in a high stress, often fast paced environment. Within security, and especially during incident response, business hours often do not conform to standard and/or extend beyond the traditional eight hour “work day”.
- Experience leading the security incident response.
- Experience with client contract (MSA/SOW) reviews based on best practices and company policy
- Expert understanding of risk management principles
- A results focused approach to work which values service quality, economy and collaboration.
- Demonstrated judgment and the ability to adapt to a dynamic environment.
- Must be a self motivating, and self starter capable of operating with little to no supervision to be successful. Candidates that are reliant upon day to day oversight and/or instructions will not be successful in this workplace.
- Must be comfortable with executive presentations and general interactions. Must be a proficient public speaker.
- Must be available to perform security functions during non standard business hours when required.

Desired Qualifications

- Security related certifications are a plus (e.g. CISSP, CISM, CISA, etc.).
- A Bachelor's degree or additional years of experience in lieu of.

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $125,000–$175,000. This role is an existing vacancy.

📌 Security Business Partner (Director) (Toronto)
🏢 CGI
📍 Toronto