Cybersecurity Program Manager

Chubb; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading insurance company is seeking a Cybersecurity Program Manager to oversee and manage security issues in Toronto. The role includes collaborating with IT teams, driving security initiatives, and providing technical guidance. The ideal candidate has a Bachelor’s degree and at least 5 years of experience in security technologies and practices. Strong communication skills and familiarity with security scanning tools are essential.

Qualifications

• 5+ years working experience in security technologies.
• 3+ years delivering on security initiatives with senior management exposure.
• Experience interpreting results of security scanning tools.

Responsibilities

• Own and manage security issues from network changes.
• Drive security initiatives through consultancy.
• Manage cybersecurity-related escalations.

Skills

Information Security

Communication skills

Application security principles

Security scanning tools

IT technologies

Education

Bachelor’s Degree in Information Security, IT, or related field

Tools

SAST/DAST/SCA/IAST

CI/CD

Agile methodologies

Job description

The Cybersecurity Program Manager will work on the Chubb Canada IT team as a senior member dedicated to working with members of the wider Chubb RISO and Security Architecture teams. The Cybersecurity Program Manager will represent Canadian security initiatives, issues, and policy alignment to the RISO and Security Architects for discussion and resolution. The successful candidate will own and manage security issues arising from network changes, vulnerability scanning, new security guidelines, new application build permit approvals, and other sources. This is a role with delivery accountabilities.

• Participate in IT projects as the security representative, driving good practice through consultancy.
• Work with delivery Project Managers and technical teams to ensure security initiatives are delivered, and regularly report to senior management.
• Senior stakeholder for management of cybersecurity-related escalations and Global Information Security priorities.
• Manage control exemptions/remediations identified through projects.
• Provide technical security guidance where required.
• Implement and monitor standards with regional\outsourced IT and Development.
• Collaborate and guide IT and Business units, to correct non-compliant processes.
• Identify gaps in technical security policy and process, and help develop standards and processes.
• Provide security oversight of IT delivery processes.
• Assist with strategic global and regional security project deployment within North America.
• Provide metrics for relevant areas of responsibility when required.
  

Qualifications

• Bachelor’s Degree from an accredited college or university in Information Security, Information Technology, Computer Science, or a related technical degree.
• At least 5 years’ working experience of security technologies.
• At least 3 years’ experience delivering on security initiatives, with exposure to senior management.
• Good knowledge of security technology, with proven ability to apply knowledge to a use case.
• Well-versed in application security principles, practices, and standards.
• Knowledge of authentication and authorization processes and technologies.
• Experience with interpreting results of security scanning tools, including SAST/DAST/SCA/IAST/Infra Vulnerability Scans, and advising on remediation.
• Excellent communication skills, ability to explain technical issues to a mixed audience ranging from technical to business, project management to leadership.
• Knowledge of project lifecycles, with working experience of Agile, Waterfall, and CI/CD project methodologies
• Good understanding of IT technologies such as networking, servers, firewalls, encryption, vulnerabilities, and other security-related domains.
• Demonstrated ability to understand and analyze complex technical security tools and processes to make sound recommendations on implementation and utilization.
• Knowledge of securing on-prem and cloud platforms and applications.