Chief Information Security Officer

Socket.dev; Fredericton; On-site; CAD 92,000 - 126,000; Full time

Job summary

The Financial and Consumer Services Commission is seeking an experienced Chief Information Security Officer to lead its cybersecurity program and strengthen overall posture from either the Saint John or Fredericton office. Reporting to IT leadership, you will drive strategy, governance, risk management and incident response across the organization.

You will oversee security operations, cloud and on‑premise infrastructure, and staff development while partnering with vendors and executives to

Qualifications

• University degree in Computer Science, Information Technology, Information Security or related discipline.
• 8+ years of progressive experience in cybersecurity, infrastructure operations and cloud technologies.
• 5+ years of people management experience including supervision and development.
• Experience in cybersecurity governance, risk management, security operations and compliance programs.
• Strong knowledge of NIST, CIS, ISO/IEC 27001, Zero Trust principles.
• Experience leading secure cloud, infrastructure, endpoint, network and identity services.

Responsibilities

• Lead the development and execution of the Commission's cybersecurity strategy, governance framework and risk management program.
• Assess and communicate cybersecurity risks and provide strategic advice to leadership.
• Lead cybersecurity operations including monitoring, threat and vulnerability management, incident response and recovery planning.
• Provide leadership during significant cybersecurity incidents and post‑incident reviews.
• Oversee security audits, assessments and remediation activities for technologies, vendors and service providers.
• Oversee security governance for identity, authentication, authorization and privileged access management.
• Provide operational leadership for Microsoft 365, Azure, network infrastructure and core services.
• Manage cybersecurity and infrastructure staff and oversee vendors, contracts and budget.

Skills

Cybersecurity leadership

Stakeholder communication

Risk assessment

Cloud technologies

Team management

Strategic planning

Education

University degree in Computer Science / Information Technology / Information Security

Tools

Azure cloud services

Microsoft 365

Endpoint management

Identity services

Security governance tools

Job description

The Financial and Consumer Services Commission (Commission) is a leader in integrated financial and consumer services regulation. The Commission's mandate is to protect consumers and enhance public confidence in the financial and consumer marketplace through the provision of regulatory and educational services. With offices in both Fredericton and Saint John, it is responsible for the administration and enforcement of provincial legislation regulating mortgage brokers, payday lenders, real estate, securities, insurance, pensions, credit unions, trust and loan companies, cooperatives, unclaimed property, and a wide range of consumer legislation. The Commission is a self-funded Crown corporation responsible for the administration and enforcement of financial consumer services legislation.

We offer opportunities for dedicated professionals to play a vital role in carrying out our mandate.

Chief Information Security Officer - Information Technology and Strategic Performance Division (Saint John or Fredericton office)

The Commission is seeking an experienced cybersecurity and technology leader to serve as its Chief Information Security Officer (CISO).

Reporting to the Director of Information Technology Services, the CISO is responsible for leading the Commission's cybersecurity program and strengthening its overall cybersecurity posture. The position provides strategic leadership for cybersecurity governance, risk management, incident response and security operations, along with operational leadership for the Commission's technology infrastructure and supporting services. The CISO leads cybersecurity and infrastructure teams and provides strategic advice to leadership on cybersecurity and technology risks.

Your Focus:

• Lead the development and execution of the Commission's cybersecurity strategy, governance framework and risk management program.
• Assess and communicate cybersecurity and technology risks and provide strategic advice, recommendations and cybersecurity posture updates to leadership.
• Lead cybersecurity operations, including monitoring, threat and vulnerability management, incident response, recovery preparedness, disaster recovery and security awareness.
• Provide leadership during significant cybersecurity incidents, including response coordination, recovery prioritization and post-incident review.
• Establish and oversee security assurance and review activities for technologies, applications, vendors and service providers, including cybersecurity audits, assessments and remediation activities.
• Oversee security governance for identity, authentication, authorization and privileged access management.
• Provide operational leadership for Microsoft 365, Azure cloud services, network infrastructure, endpoint management and core technology services.
• Manage and develop cybersecurity and infrastructure staff while overseeing technology vendors, contracts, procurement activities and operational budget.

What You Bring

• A university degree in Computer Science, Information Technology, Information Security or a related discipline, or an equivalent combination of education and experience.
• A minimum of eight (8) years of progressive experience in cybersecurity, infrastructure operations and cloud technologies.
• A minimum of five (5) years of people management experience, including staff supervision, coaching, performance management, and professional development.
• Demonstrated experience in cybersecurity governance, risk management, security operations, compliance programs, and technology infrastructure.
• Strong knowledge of cybersecurity frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, ISO/IEC 27001 and Zero Trust principles.
• Demonstrated experience leading secure cloud, infrastructure, endpoint, network and identity services in a complex technology environment.
• Experience managing technology vendors, contracts, procurement activities, and service providers.
• Experience developing and maintaining technology policies, standards, and operational procedures.
• Demonstrated ability to influence organizational decision‑making, build consensus, and lead initiatives across diverse stakeholder groups.
• Strong analytical, leadership and relationship‑building skills, with the ability to communicate complex cybersecurity and technology risks clearly to executive and non‑technical audiences.

Additional Strengths

• Professional certifications such as CISSP, CISM, CRISC, CISA, CCSP, Azure Security Engineer Associate, Azure Solutions Architect Expert or equivalent certifications would be considered an asset.

The Financial and Consumer Services Commission offers a competitive salary and benefits package as well as excellent opportunities for personal growth and challenge. Salary will be commensurate with experience.

Salary Range: $91,850 - $126,294 (annual compensation)

As a condition of employment, the successful candidate will be required to undergo a pre‑employment background check in accordance with the Commission's Pre‑Employment Background Checks Directive. This may include criminal record checks, credential verification, and reference checks.

For more information about this position, please visit our website at www.fcnb.caor call the Talent Acquisition Specialist at [phone].

Please note that only candidates selected for further evaluation will be contacted.