Discovery is an Americas-focused precious metals company with a diversified portfolio. Our Mission is to deliver sustainable value for all stakeholders by operating in a protected and responsible manner and having a positive impact on local communities. Discovery has an experienced team, dedicated to being a highly profitable producer of precious metals that generates superior returns, delivers substantial social-economic benefits and meets the highest environmental standards.

Location

Corporate

Schedule

5x2

The Position

The Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments. The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).

Key Responsibilities

Cybersecurity Operations and Risk Management

- Build, implement, and continuously improve cybersecurity policies, standards, and controls.
- Identify, assess, and mitigate cybersecurity risks across IT and OT environments.
- Protect sensitive business information and critical operational systems and mitigate cybersecurity risks.
- Manage security controls including identity and access management, network security, endpoint protection,



vulnerability management, and encryption.
- Conduct security assessments and recommend remediation strategies to address identified vulnerabilities.

Incident Response and Security Monitoring

- Oversee the relationship with the MSSP and ensure effective monitoring and threat detection.
- Ensure the Company's infrastructure is equipped with the appropriate sensors, agents, and log sources, and that the relevant security data and metadata flow reliably from IT and OT environments to the MSSP's tooling platforms.
- Act as the escalation point for cybersecurity incidents and investigations.
- Lead incident response activities including investigation, containment, recovery, and post-incident reviews.
- Coordinate internal and external resources during cybersecurity incidents and ensure timely communication with stakeholders.
- Maintain incident response plans, recovery procedures, and cybersecurity support for business continuity initiatives.

Operational Technology (OT) and Mining Infrastructure Security

- Oversee the security of industrial control systems, communications infrastructure, and OT environments, aligned to IEC 62443.
- Partner with Operations, Engineering, and OT teams to mitigate cyber risks affecting safety, productivity, and operational continuity.




- Evaluate cybersecurity risks associated with remote sites, field operations, third-party connections, and operational technologies.
- Maintain appropriate security controls and network segregation between IT and OT environments.

Compliance, Governance, and Audit

- Develop and maintain cybersecurity policies, standards, and controls aligned with industry best practices, regulatory requirements and recognized frameworks.
- Support audits, assessments, and remediation activities to ensure ongoing compliance and risk reduction.
- Monitor cybersecurity metrics and provide reporting on security posture, risks, and improvement initiatives.
- Contribute to business continuity and disaster recovery planning from a cybersecurity perspective.
- Maintain documentation related to cybersecurity controls, incidents, risk assessments, and compliance activities.

Stakeholder Engagement and Security Awareness

- Serve as the primary cybersecurity advisor to business, operational, and technology stakeholders.
- Collaborate with internal teams and external partners to support secure project delivery and technology implementations.
- Promote cybersecurity awareness and training across the organization.
- Support vendor and third-party security reviews and assessments.
- Stay informed on emerging cybersecurity threats, trends, and technologies and communicate relevant impacts to stakeholders.

Skills And Qualifications

- College diploma or university degree in Computer Science, Information Security, Information Technology, or a related field.
- Minimum 10 years of progressive cybersecurity experience, including experience building or significantl

📌 Cybersecurity Lead (Toronto)
🏢 Discovery Mining
📍 Toronto