De Havilland Aircraft of Canada Limited (DHC) is a storied name in the aerospace industry, recognized worldwide for its pioneering contributions to aviation and its unwavering commitment to quality, innovation, and reliability. Headquartered in Calgary, AB, DHC currently has approximately 2,400 employees across British Columbia, Alberta and Ontario, as well as in markets and distribution hubs world-wide.

Established in 1928, De Havilland Canada has a rich history marked by the development of some of the most iconic and versatile aircraft ever built. These aircraft have served a variety of roles—from bush flying to commercial aviation—and are celebrated for their rugged durability, operational versatility, and excellence in performance.

Over the decades, De Havilland Canada has evolved to meet the changing needs of the aviation industry. Today, we are more than just an aircraft manufacturer; we are a comprehensive aerospace company with capabilities that span design, production, maintenance, repair, and overhaul (MRO) services. Our operations are supported by a team of skilled engineers, technicians, and industry professionals who are dedicated to upholding the highest standards of craftsmanship and innovation.

Position Summary

The Cybersecurity Lead is responsible for shaping and advancing De Havilland's cybersecurity program across enterprise IT and operational technology environments. This role combines enterprise security architecture, operational security leadership, governance, risk management, and hands‑on engineering to improve cyber resilience and reduce business risk.

The Cybersecurity Lead provides technical and functional direction to cybersecurity analysts, specialists, architects, and service partners. The role coordinates work,



mentors team members, sets technical standards, and supports capability growth, while formal people‑management activities remain with the accountable manager.

Working closely with IT leadership, infrastructure, engineering, operations, and business stakeholders, the Cybersecurity Lead translates risk into practical, secure, and resilient technology outcomes aligned with DHC's business priorities.

Key Responsibilities

Cybersecurity Strategy and Program Leadership

- Develop and execute DHC's cybersecurity roadmap, priorities, and maturity plan in alignment with business objectives and risk tolerance.
- Act as a trusted cybersecurity advisor to IT leadership and key business stakeholders, translating technical risk into business impact and recommended action.
- Contribute to IT strategy, investment planning, business cases, budgets, and technology roadmaps.
- Lead cybersecurity governance discussions and contribute to enterprise architecture, risk, and audit forums.
- Define meaningful cybersecurity metrics and provide regular, actionable reporting on posture, risks, progress, and priorities.

Technical Leadership and Architecture

- Define and maintain secure, scalable, and resilient security architectures across cloud, hybrid, network, endpoint, identity, application, and OT environments.




- Embed secure‑by‑design requirements into infrastructure, cloud, application, data, and operational technology initiatives.
- Establish and enforce security standards for configuration, segmentation, access control, and technical controls, aligned with NIST CSF, ISO 27001, and IEC 62443 where applicable.
- Provide hands‑on leadership for the implementation, configuration, integration, and continual optimization of cybersecurity technologies.
- Evaluate emerging technologies and recommend practical capabilities that strengthen DHC's defense‑in‑depth strategy.

Security Operations and Resilience

- Provide technical direction for threat detection and response, vulnerability management, identity security, endpoint security, network security, and security monitoring services.
- Lead significant security incidents, escalations, containment decisions, post‑incident reviews, and corrective‑action follow‑through.
- Advance the use and optimization of Microsoft Defender, Sentinel, Entra ID, XDR, SIEM, MFA, conditional access, and related security capabilities.
- Establish and monitor service measures including detection and response performance, vulnerability remediation, operational SLAs, and cybersecurity maturity targets.
- Lead or support tabletop exercises, BCP/DR testing, and other resilience activities to validate readiness.

Governance Risk Compliance and Third Party Security

- Maintain cybersecurity policies, standards, procedures, and control frameworks that support regulatory, contractual, audit, and internal governance requirements.
- Lead cybersecurity risk assessments, risk treatment planning, and ongoing tracking of material risks and except

📌 Lead, Cyber Security (Calgary)
🏢 De Havilland Aircraft of Canada
📍 Calgary