What You Will Do

Develops and implements client information security programs that meet business, regulatory, and industry requirements

Advises executive leadership on information security strategy, policies, standards, and procedures

Updates client executives on security plan progress, emerging threats, and actual or potential security incidents

Develops and maintains security policies and procedures that govern the protection of the confidentiality, integrity, and availability of client systems and data

Monitors client security programs and workplace changes to keep controls effective and risks minimized

Oversees implementation of security solutions to improve overall security posture

Develops, maintains, and coordinates testing of disaster recovery and business continuity plans that reflect client system and facility needs

Develops, delivers, and monitors security awareness training programs

Works within cross-functional teams to develop and deliver secure solutions

Leads or participates in client steering committees and working groups as needed

Coordinates with client security teams on incident detection, response, and resolution within agreed service-level agreements (SLAs)

What You Will Do Security Program Leadership & Operations

Develops and implements client information security programs that meet business, regulatory, and industry requirements

Advises executive leadership on information security strategy, policies, standards, and procedures

Updates client executives on security plan progress, emerging threats, and actual or potential security incidents

Develops and maintains security policies and procedures that govern the protection of the confidentiality, integrity,



and availability of client systems and data

Monitors client security programs and environment changes to keep controls effective and risks minimized

Oversees implementation of security solutions to improve overall security posture

Develops, maintains, and coordinates testing of disaster recovery and business continuity plans that reflect client system and facility needs

Develops, delivers, and monitors security awareness training programs

Works within cross-functional teams to develop and deliver secure solutions

Leads or participants in client steering committees and working groups as needed

Coordinates with client security teams on incident detection, response, and resolution within agreed service-level agreements (SLAs)

Risk & Compliance Support

Leads internal, vulnerability, and third-party risk assessments and supports client security audits

Conducts security reviews of new and existing systems and recommends improvements to systems, policies, and procedures

Ensures appropriate administrative, technical, and physical safeguards protect client systems and information

Advises clients on control requirements for NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable frameworks and regulations





Assesses control gaps and maturity against applicable frameworks and helps clients prioritize remediation

Supports client audits, assessments, and certifications by clarifying controls, coordinating evidence, and addressing findings

Defines scope and maintains segmentation and protection controls for regulated data environments (e.g., ePHI, cardholder data, CUI)

Oversees vulnerability scanning and penetration testing programs aligned with framework and regulatory requirements

Maintains cross-framework control mappings and supports compensating-control and risk-acceptance documentation

What Makes You Stand Out

Communication Proficiency

Decision Making

Project Management

Teamwork Orientation

Thoroughness

Client Relationship Management

Regulatory Compliance Expertise

What Are We Looking For Information Security Experience Note: The required qualifications may be satisfied through a combination of the experience areas listed below.

At least five years of information security leadership experience, such as CISO, vCISO, or senior security leadership

At least three years of experience in security operations, security engineering, vulnerability management, or system administration

Consulting or managed services experience supporting multiple clients across regulated industries (e.g., healthcare, financial services, government contracting)

Compliance & Regulatory Experience

At least three years of hands-on experience implementing and operating controls for frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS

Experience serving as the security point of contact during external audits and assessment

📌 Information Security Program Manager (Winnipeg)
🏢 Harris Computer
📍 Winnipeg