Chief Information Security Officer

The Financial and Consumer Services Commission (Commission) is a leader in integrated financial and consumer services regulation. The Commission's mandate is to protect consumers and enhance public confidence in the financial and consumer marketplace through the provision of regulatory and educational services. With offices in both Fredericton and Saint John, it is responsible for the administration and enforcement of provincial legislation regulating mortgage brokers, payday lenders, real estate, securities, insurance, pensions, credit unions, trust and loan companies, cooperatives, unclaimed property, and a wide range of consumer legislation. The Commission is a self-funded Crown corporation responsible for the administration and enforcement of financial consumer services legislation.

We offer opportunities for dedicated professionals to play a vital role in carrying out our mandate.

Chief Information Security Officer - Information Technology and Strategic Performance Division (Saint John or Fredericton office)

The Commission is seeking an experienced cybersecurity and technology leader to serve as its Chief Information Security Officer (CISO).

Reporting to the Director of Information Technology Services, the CISO is responsible for leading the Commission's cybersecurity program and strengthening its overall cybersecurity posture. The position provides strategic leadership for cybersecurity governance, risk management, incident response and security operations, along with operational leadership for the Commission's technology infrastructure and supporting services. The CISO leads cybersecurity and infrastructure teams and provides strategic advice to leadership on cybersecurity and technology risks.

Your Focus:

• Lead the development and execution of the Commission's cybersecurity strategy, governance framework and risk management program.
• Assess and communicate cybersecurity and technology risks and provide strategic advice, recommendations and cybersecurity posture updates to leadership.
• Lead cybersecurity operations, including monitoring, threat and vulnerability management, incident response, recovery preparedness, disaster recovery and security awareness.
• Provide leadership during significant cybersecurity incidents, including response coordination, recovery prioritization and post-incident review.
• Establish and oversee security assurance and review activities for technologies, applications, vendors and service providers, including cybersecurity audits, assessments and remediation activities.
• Oversee security governance for identity, authentication, authorization and privileged access management.
• Provide operational leadership for Microsoft 365, Azure cloud services, network infrastructure, endpoint management and core technology services.
• Manage and develop cybersecurity and infrastructure staff while overseeing technology vendors, contracts, procurement activities and operational budget.

What You Bring

• A university degree in Computer Science, Information Technology, Information Security or a related discipline, or an equivalent combination of education and experience.
• A minimum of eight (8) years of progressive experience in cybersecurity, infrastructure operations and cloud technologies.
• A minimum of five (5) years of people management experience, including staff supervision, coaching, performance management, and professional development.
• Demonstrated experience in cybersecurity governance, risk management, security operations, compliance programs, and technology infrastructure.
• Strong knowledge of cybersecurity frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, ISO/IEC 27001 and Zero Trust principles.
• Demonstrated experience leading secure cloud, infrastructure, endpoint, network and identity services in a complex technology environment.
• Experience managing technology vendors, contracts, procurement activities, and service providers.
• Experience developing and maintaining technology policies, standards, and operational procedures.
• Demonstrated ability to influence organizational decision-making, build consensus, and lead initiatives across diverse stakeholder groups.
• Strong analytical, leadership and relationship-building skills, with the ability to communicate complex cybersecurity and technology risks clearly to executive and non-technical audiences.

Additional Strengths

• Professional certifications such as CISSP, CISM, CRISC, CISA, CCSP, Azure Security Engineer Associate, Azure Solutions Architect Expert or equivalent certifications would be considered an asset.

The Financial and Consumer Services Commission offers a competitive salary and benefits package as well as excellent opportunities for personal growth and challenge. Salary will be commensurate with experience. If you are interested in being a key part of this team, please forward your resume and cover letter.

Salary Range: $91,850 - $126,294 (annual compensation)

As a condition of employment, the successful candidate will be required to undergo a pre-employment background check in accordance with the Commission's Pre-Employment Background Checks Directive. This may include criminal record checks, credential verification, and reference checks.

For more information about this position, please visit our website at www.fcnb.ca or call the Talent Acquisition Specialist at (506) 643-7790.

Please note that only candidates selected for further evaluation will be contacted.