Senior Manager, Information Security & Cyber Resilience Post Date: October 27, 2026 Closing Date: November 2, 2026 4:30 pm Department: Information Technology Services Job Type: Full Time
The Corporation of the County of Huron’s Business Technology Solutions department is seeking a Senior Manager, Information Security & Cyber Resilience ! Position Summary Reporting to the Director, Business Technology Solutions, the Senior Manager, Information Security & Cyber Resilience leads the County’s cybersecurity, cyber risk, business continuity, disaster recovery, and resilience programs . This senior leader protects County information, technology assets, critical services, and operations by setting priorities, strengthening governance, overseeing security initiatives, and continuously improving organizational resilience.
As the County’s principal advisor on cybersecurity and technology risk, the Senior Manager provides expert guidance, risk and incident reporting, strategic recommendations, and security oversight to senior leadership. The role directs cybersecurity-related work across employees, contractors, consultants, vendors, and managed service providers and leads assigned cybersecurity staff, including recruitment, coaching, performance management , and workforce planning .
What We Offer At the County of Huron, we’re committed to offering a modern work environment that puts people first. We are a Certified Living Wage employer that values equity, diversity and inclusion. We offer our staff competitive wages and a comprehensive perks package.
The County of Huron offers a diverse portfolio of employment opportunities. When you join our team, you’ll have the benefit of working with and learning from, people who have a broad range of skills and knowledge. We offer training, mentorship, and career development opportunities to all staff. When you work for the County of Huron, you invest in the community, and you benefit from seeing the results of your efforts firsthand. It’s a great place to work!
Information Security Governance & Strategy – 20%
Develop and maintain the County’s Information Security and Cyber Resilience Program, cybersecurity strategy, and roadmap.
Establish security policies, standards, governance, performance measures, and reporting.
Advise the Director and senior leadership on security priorities, risks, regulatory expectations, and investments.
Monitor emerging threats, legislation, regulatory expectations, and industry practices.
Cyber Risk Management & Security Assurance – 20%
Lead cyber risk management and maintain the cybersecurity risk register and treatment plans.
Conduct or oversee security assessments for systems, projects, vendors, and technology initiatives.
Coordinate compliance reviews, audits, penetration testing, and security assessments.
Monitor remediation of material risks and control deficiencies and escalates unresolved concerns.
Cybersecurity Operations & Incident Leadership – 15%




Provide oversight of cybersecurity monitoring, vulnerability management, threat management, and security operations.
Lead cyber incident preparedness and coordinate response to significant incidents.
Coordinate investigations, executive communications, recovery activities, and lessons learned.
Provide timely risk and incident reporting to the Director and senior leadership.
Cyber Resilience, Business Continuity & Disaster Recovery – 15%
Establish cybersecurity requirements for business continuity, disaster recovery, backup, and recovery.
Coordinate testing and validation of critical recovery capabilities.
Identify resilience gaps, recommend improvements, and monitor corrective action.
Support corporate emergency management and continuity planning.
Security Awareness, Education & Culture – 10%
Develop and maintain enterprise security awareness and education programs.
Provide practical security guidance to employees, managers, technical teams, and senior leadership.
Promote shared accountability for security, resilience, and responsible information handling.
Measure program effectiveness and recommend targeted improvements.
Leadership, Workforce Development & Partnerships – 10%
Participate as a member of the BTS leadership team and contribute to departmental planning and performance.
Develop workforce, succession, budget, business case, and security investment recommendations.
Build relationships with departments, government agencies, auditors, insurers, vendors, law enforcement, and external partners.
Oversee contractors, consultants, vendors, and managed security service providers supporting the program.
Lead the County’s dedicated Information Security and Cyber Resilience function, including direct supervision, work assignment, performance management, coaching, professional development, recruitment, and workforce planning for assigned cybersecurity staff. Dedicated cybersecurity positions form part of the intended organizational structure and will report directly to this position, although they may be vacant or not yet staffed at implementation.
Establish priorities, assign work, coordinate resources, and monitor performance to ensure cybersecurity, cyber risk, business continuity, disaster recovery, and resilience objectives are achieved.
Provide functional leadership and work-assignment authority for cybersecurity and risk-related activities across BTS, including work performed by managers, staff, contractors, consultants, and managed service providers.
Build and maintain the organizational capabilities, specialized skills, partnerships,



and resources required to support the program.
Foster a culture of accountability, collaboration, continuous improvement, professional development, and shared responsibility for cybersecurity.
Qualifications and Education University degree in cybersecurity, information security, computer science, information systems, technology management, or a related discipline.
An equivalent combination of education, professional development, relevant certifications, and progressively responsible experience may be considered.
Current Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM) designations are required.
Additional education or credentials in cyber leadership, public administration, risk, continuity, project management, audit, privacy, human resources, or IT service management are assets.
Experience Requirements
Minimum ten years of progressive information technology experience, including substantial cybersecurity, information security, technology risk, or cyber resilience responsibilities and significant leadership experience.
Experience leading or advancing an enterprise information security program and developing security strategies, governance, policies, standards, risk registers, and roadmaps.
Demonstrated experience supervising employees, assigning work, managing performance, coaching, developing staff, workforce planning, and building specialized team capability.
Experience advising senior leadership on cyber risk, incidents, security priorities, and investment decisions.
Experience with incident response, security assessments, audits, compliance, vulnerability management, third-party risk, continuity, and recovery.
Experience overseeing contractors, consultants, vendors, and managed security providers and directing cross-functional work where resources do not report directly to the position.
Municipal or broader public-sector experience, recognized security frameworks, and hybrid Microsoft 365, cloud, identity, endpoint, network, and on-premises environments are assets.
Preferred Skills:
Executive judgment, integrity, discretion, and the ability to provide clear, objective advice and constructive challenge.
Strong knowledge of security governance, enterprise risk, incident management, assurance, security architecture, and cyber resilience.
Ability to translate complex security issues into business, service, financial, legal, privacy, and reputational impacts.
Strong leadership, supervision, communication, relationship management, policy writing, workforce planning, and financial planning skills.
Competitive Compensation $63.69 – $74.41 per hour; as per the 2026 non-union pay grid
Only those individuals selected for an interview will be contacted. The County of Huron is an equal opportunity employer. Accessibility accommodations are available for all parts of the recruitment process. Applicants need to make their needs known in advance.

#J-18808-Ljbffr

📌 Senior Manager, Information Security & Cyber Resilience (Ontario)
🏢 Huron County
📍 Ontario