Position Summary

The Cybersecurity Lead is responsible for shaping and advancing De Havilland's cybersecurity program across enterprise IT and operational technology environments. This role combines enterprise security architecture, operational security leadership, governance, risk management, and hands-on engineering to improve cyber resilience and reduce business risk.

The Cybersecurity Lead provides technical and functional direction to cybersecurity analysts, specialists, architects, and service partners. The role coordinates work, mentors team members, sets technical standards, and supports capability growth, while formal people-management activities remain with the accountable manager.

Working closely with IT leadership, infrastructure, engineering, operations, and business stakeholders, the Cybersecurity Lead translates risk into practical, secure, and resilient technology outcomes aligned with DHC's business priorities.

Key Responsibilities

Cybersecurity Strategy and Program Leadership

- Develop and execute DHC's cybersecurity roadmap, priorities, and maturity plan in alignment with business objectives and risk tolerance.
- Act as a trusted cybersecurity advisor to IT leadership and key business stakeholders, translating technical risk into business impact and recommended action.
- Contribute to IT strategy, investment planning, business cases, budgets, and technology roadmaps.
- Lead cybersecurity governance discussions and contribute to enterprise architecture, risk, and audit forums.
- Define meaningful cybersecurity metrics and provide regular, actionable reporting on posture, risks, progress, and priorities.

Technical Leadership and Architecture

- Define and maintain secure, scalable,



and resilient security architectures across cloud, hybrid, network, endpoint, identity, application, and OT environments.
- Embed secure-by-design requirements into infrastructure, cloud, application, data, and operational technology initiatives.
- Establish and enforce security standards for configuration, segmentation, access control, and technical controls, aligned with NIST CSF, ISO 27001, and IEC 62443 where applicable.
- Provide hands-on leadership for the implementation, configuration, integration, and continual optimization of cybersecurity technologies.
- Evaluate emerging technologies and recommend practical capabilities that strengthen DHC's defense-in-depth strategy.

Security Operations and Resilience

- Provide technical direction for threat detection and response, vulnerability management, identity security, endpoint security, network security, and security monitoring services.
- Lead significant security incidents, escalations, containment decisions, post-incident reviews, and corrective-action follow-through.
- Advance the use and optimization of Microsoft Defender, Sentinel, Entra ID, XDR, SIEM, MFA, conditional access, and related security capabilities.
- Establish and monitor service measures including detection and response performance, vulnerability remediation, operational SLAs,



and cybersecurity maturity targets.
- Lead or support tabletop exercises, BCP/DR testing, and other resilience activities to validate readiness.

Governance Risk Compliance and Third Party Security

- Maintain cybersecurity policies, standards, procedures, and control frameworks that support regulatory, contractual, audit, and internal governance requirements.
- Lead cybersecurity risk assessments, risk treatment planning, and ongoing tracking of material risks and exceptions.
- Coordinate third-party and supply-chain cybersecurity assessments with procurement, legal, finance, and business owners.
- Support clear evidence collection and remediation planning for internal and external audits.

Operational Technology Security

- Lead the design and evolution of cybersecurity controls for OT and industrial environments, with an emphasis on protected IT and OT convergence.
- Partner with engineering and operations teams to protect critical manufacturing systems, industrial assets, connectivity, and data exchange.
- Apply risk-based OT security practices aligned with IEC 62443, NIST CSF, and DHC operational requirements.

Functional Leadership and Capability Growth

- Provide day-to-day technical guidance, work prioritization, coaching, and mentorship to cybersecurity team members and relevant IT resources.
- Help define role expectations, operating procedures, skills development priorities, and practical career-growth opportunities for cybersecurity staff.
- Coordinate cybersecurity capacity, service intake, and delivery with the accountable people manager and IT leadership.
- Build a security-first culture thr

📌 Lead, Cyber Security (Calgary)
🏢 De-Havilland-Aircraft-of-Canada-Lt
📍 Calgary