Position Title: Senior Director, Information Security and End-User Technology (T & I) (Telework/Hybrid)
Status of Employment:Permanent
Position Language Requirement:English, French
Language Skills:English (Reading - C - Advanced), English (Speaking - C - Advanced), English (Writing - B - Intermediate), French (Reading - C - Advanced), French (Speaking - C - Advanced), French (Writing - B - Intermediate)
This is a hybrid role with a mix of in-office and remote work. Work arrangements will be discussed with hiring managers per departmental guidelines.Role Vision and ImpactThe Senior Director, Information Security and End-User Technology, serves as CBC/Radio-Canada's Chief Information Security Officer (CISO). A strategic, visionary and collaborative leader, the CISO defines, implements and drives the overarching vision for cybersecurity, risk management and technological resilience across all corporate environments.
The mission of this strategic role is to
protect information assets, data, digital heritage, and production and broadcasting infrastructure across all platforms, while ensuring seamless, agile and uninterrupted media operations. The Senior Director optimally balances rigorous security architecture governance with the flexibility that creative, journalistic and technical teams need to innovate and broadcast without disruption.
Operating at a senior executive level, the CISO regularly briefs and advises the
Board of Directors (BoD), the
Audit Committee, the
CBC/Radio-Canada Senior Executive Team (SET) and the
T&I Management Executive Team (MET).Supported by a team of experienced directors and senior managers overseeing governance, security operations, end-user technology and identity management, the Senior Director serves as the cornerstone of digital trust and strategic transformation for Canada's public broadcaster.
Key ResponsibilitiesStrategic Vision, Leadership and Executive Relations- Develop, champion and execute an enterprise-wide cybersecurity strategy aligned with the Corporation's business mission, risk profile and digital transformation.
- Serve as a trusted expert and strategic adviser to the BoD, Audit Committee, SET and MET regarding risk status, security posture and maturity, and required investments.
- Foster a "Security by Design" culture and establish security architecture governance frameworks that keep operational and production workflows running smoothly while proactively managing risk.
- Anticipate technology trends and lead the secure integration of artificial intelligence (AI/GenAI) and automation into business processes and security defences across the organization.
Securing IT, Cloud, Distribution and Broadcast/Operational Technology (OT) Environments- Define and continuously adapt the security strategy across the entire technology landscape, including corporate IT infrastructure, cloud systems, end-user environments, and critical production, broadcast and network infrastructure.
- Ensure the resilience of content acquisition, processing and distribution workflows against threats targeting the media sector and critical infrastructure.
Governance, Risk, Compliance and AI Governance- Oversee the governance function responsible for developing, maintaining and enforcing policies, standards, security architecture principles, exception management and industry frameworks (e.g., NIST, ISO 27001, AI frameworks).
- Lead the third-party and partner risk management program (covering vendors and technology contracts) in close collaboration with the Legal Services and Procurement teams.
- Co-develop a governance, compliance and ethical framework for the enterprise-wide use of AI and generative AI, assessing specific risks throughout their life cycle.
- Ensure strict compliance with applicable laws and regulations (e.g., Quebec's Law 25, GDPR and sector-specific requirements).
- Drive a cybersecurity culture and awareness program focused on lasting behaviour change across the organization.
Defence Operations, SOC and Crisis Management- Oversee the performance and modernization of the Security Operations Centre (SOC), advanced detection tools (SIEM, EDR/XDR, automation) and continuous threat monitoring.
- Direct major security incident response operations and lead technology crisis management, from detection to full business recovery.
- Oversee regular penetration testing, vulnerability assessments and cyberattack simulation exercises across IT, broadcast and distribution environments.
Identity and End-User Technology- Guide the strategic vision for Identity and Access Management (IAM, PAM) to provide secure, simple and frictionless access for all staff and contractors.
- Collaborate closely with the End-User Technology teams to align security with a modern, efficient and intuitive employee experience.
Financial Management and Team Engagement- Plan and optimize the cybersecurity department's overall budget and partner with internal procurement teams to negotiate major technology contracts.
- Inspire, coach and develop a team of directors and senior managers - fostering excellence, innovation and cross-functional collaboration.
- Lead with the heart.
Qualifications, Experience and Core CompetenciesEducation and Certifications- Bachelor's or master's degree in computer science, cybersecurity, computer engineering, business administration (IT concentration) or a related field.
- At least one recognized executive-level professional certification: CISSP, CISM, CCISO, CISA or CRISC.
Professional Experience- Seven to 10 years of experience managing professional teams or equivalent.
- Deep expertise in technology architecture, cloud security, network infrastructure, cryptography, and identity and access management (IAM).
- Ability to provide collaborative leadership within the organization to see complex, transformational initiatives through to completion.
- Demonstrated skills in planning, organizing and engaging teams.
- Proven ability and track record in leading cross-functional teams.
- Proven ability to work with cross-functional, agile teams or on projects that have multi-team dependencies.
- Ability to distil complex issues into clear, concise presentations and reports.
- Expertise in the various technologies typically used by journalists in a newsroom.
- Knowledge of business practices, including drafting plans and specifications, contracts, negotiation, finance, and IT management software.
- Knowledge of software development and the technology infrastructure required for product delivery.
- Knowledge of workflows for content acquisition, management and distribution, with a focus on storytelling.
- Innovative approach to technical and operational challenges, paired with sound judgment to protect CBC/Radio-Canada from legal liability and financial loss.
- Excellent interpersonal skills, with an ability to engage and influence stakeholders and partners at every level of the organization.
- Excellent ability to listen to and communicate with people having different points of view or competing business objectives.
- Experience implementing product governance models.
- Ability to travel occasionally between Montreal and Toronto.
- Bilingualism (English and French), both spoken and written.
Candidates may be subject to skills and knowledge testing.
We thank all applicants for their interest, but only candidates selected for an interview will be contacted.
Primary Location:Broadcast Centre 205 Wellington St. W., Toronto, Ontario, M5V 3G7
Number of Openings:1
Work Schedule:Full time
