Responsibilities: Lead the organization's cyber security strategy, roadmap, governance framework and resilience initiatives across the enterprise Partner with executive leaders, operating companies and business stakeholders to align cyber security priorities with business objectives and risk tolerance Provide leadership and oversight for cyber security operations, risk reduction activities, vulnerability management, control effectiveness and continuous improvement programs Establish meaningful cyber security metrics, dashboards and reporting to communicate risks, performance, and improvement priorities to leadership Embed secure-by-design principles into enterprise architecture, infrastructure, applications, projects, and operational processes Review and provide security oversight for major technology initiatives, implementations and business transformation activities Lead organizational preparedness for cyber incidents through effective governance, response planning, recovery capabilities and resilience testing Partner with Enterprise Risk to strengthen incident response, disaster recovery, business continuity and enterprise resilience programs Develop and maintain cyber security policies, standards, controls and governance practices that support compliance and risk management objectives Lead third-party cyber risk management activities, including supplier assessments, security reviews, contractual requirements and ongoing monitoring of critical technology partners Build and maintain relationships with external cyber security advisors, vendors and industry partners to support emerging threat awareness and best practices Lead, develop and strengthen cyber security capabilities, awareness and culture across the organization while fostering accountability and informed decision-making Technical/Business Requirements:



Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering or a related discipline 10+ years of progressive experience in cyber security, information security or technology risk management Minimum 5 years of leadership experience in cyber security, technology or risk management functions Experience leading enterprise cyber security programs within complex, multi-site or multi-business-unit organizations Strong understanding of cyber governance, risk management, security operations, vulnerability management, incident response, resilience and compliance requirements Experience developing cyber security strategies, roadmaps and investment priorities aligned with business objectives Demonstrated experience working with executive leaders, business stakeholders and external service providers Experience managing third-party cyber risk, supplier security programs, and technology vendor relationships Exposure to industrial, manufacturing, or operational technology (OT) environments is considered an asset Professional certifications such as CISSP, CISM, CCSP, GICSP, or equivalent are considered assets Leadership Requirements: Strategic leadership and enterprise thinking Executive presence and influence Risk assessment and decision-making Relationship building and stakeholder management Business partnership and advisory capability Change leadership and continuous improvement mindset Solid communication and executive reporting skills As a member of the OSCO Construction Group, we offer a comprehensive compensation package including health and dental coverage, life insurance, RRSP and tax-free savings account options.

Additionally, we offer educational bursaries to children of employees, health & wellness programming, celebratory events and employee sport team sponsorships.

📌 Director, IT Cyber Security & Resilience (Saint John)
🏢 OSCO Group Services
📍 Saint John