Director, Cyber Security and Operations

Job Description

Payments Canada is at the forefront of the Canadian payment ecosystem. Our purpose is to make payments easier, smarter and safer for all Canadians. Every day we are working diligently to ensure your payments are cleared and settled. In 2023 alone, our systems cleared approximately $112 trillion or $450 billion each business day! If you are passionate about payments and want to help ensure that these financial transactions in Canada are carried out safely and securely, working with us is for you!

Who we are

We are a public purpose, non-profit organization situated at the centre of Canada’s payment ecosystem. We own and operate payment systems that process hundreds of billions of dollars worth of payment transactions every business day. We convene ecosystem participants to discuss their multiple and diverse interests and ideas and to navigate industry-level challenges. We adhere to a set of values that are our north star: Inspire trust, build community and enable change.

With our people in mind we have created a culture that fosters authenticity, collaboration, innovation and development. We empower one another, make meaningful contributions that not only impact the organization, but our country! We develop and nurture meaningful connections that drive innovation in our ecosystem. We are Payments Canada!

Do you want to make payments easier, smarter and safer for Canada? Join us today!

You need to work here if

• You love working with passionate, ambitious and collaborative colleagues.
• You want to be challenged and lead unique initiatives.
• You want to grow, develop and become a subject matter expert in your field.
• You want your work to make an impact in your community and country.

Come and join us — where payments meet purpose!

What we are looking for

Reporting to the Chief Information Security Officer, the Director, Cyber Security and Operations is responsible for directing operational security teams for a financial market infrastructure of national significance. With the support of various managers and their supporting teams, this role is accountable for cyber threat intelligence products, continuous monitoring and security incident response. The Director serves as the representative on the Emergency Management Team within the organization as well as interfacing with the industry for activities related to the role. This role also directs other security teams as assigned.

The Director Cyber Security and Operations must gain, and maintain, the trust of their team, the organization, the regulators, and the industry to successfully lead security operations and other security teams at Payments Canada.

A day in the life

Your responsibilities as the Director, Cyber Security and Operations includes but are not limited to:

Organizational Leadership:

• Help shape strategic direction of the Security Operations team, align programs with corporate goals, and provide leadership on departmental issues.
• Serve as the cyber security lead in emergency situations and engage with industry forums and members.

Business Process Development:

• Develop and maintain cyber security operations capabilities related to cyber threat intelligence, Incident Response and Detection Engineering that align with risk management, service management, and enterprise programs.
• Coordinate with various subject matter experts in order to oversee the creation, review, and approval of cyber security processes, while also developing additional content when necessary.

Testing and Evaluation:

• Contribute to the testing and evaluation of security operations, including vulnerability assessments, penetration testing, red teaming, and audit-level control testing.

Security and Metrics Reporting:

• Prepare reports on security events, incidents, and threat investigations, as well as compile security metrics.
• Collaborate with internal partners to communicate and escalate necessary security measures.

Management Action Plans:

• Manage operational security controls, ensuring they meet audit requirements, and developing action plans to address gaps identified during compliance checks and audits that exceed the organization's risk tolerance.

What you need to be successful

• Bachelor’s degree in computer science or a relevant field.
• Minimum of ten (10) years’ experience in information security, information technology, computer engineering, and/or financial technology with at least five (5) years in security operations.
• Minimum of five (5) years experience leading operational teams within a cybersecurity domain (i.e. SOC, Incident Response, IAM, etc).
• A firm understanding of payment processes and associated technologies.
• Industry certifications from bodies like: ISC2, ASIS, ISACA, GIAC, EC-Council, BCI, DRI.
• A positive track record of leading change, strategic partnership building, and facilitating large groups in spirited conflict toward resolution.
• Some limited travel within Canada is expected to be required once it is safe to do so.
• Eligibility to obtain and maintain a Government of Canada Reliability Clearance and successfully complete enhanced background checks that may be carried out by Payments Canada.

Salary range

• Based on qualifications and experience: $134,837 to $168,546.

Please submit your application by April 08, 2025.

What's in it for you?

• Flexible, hybrid (remote/office) environment.
• Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).
• Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).
• Paid time off: minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.
• 26 weeks of paid maternity and parental leave top-up.
• Rewards and recognition program.
• Access to office gym facilities.
• Internal and external professional development opportunities.

Our diversity, inclusion and equity commitment

At Payments Canada, we are committed to making everyone feel they can be themselves and thrive at work. We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued.

We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities and visible minorities. If selected for an interview, please advise us if you require special accommodation by emailing hrinfo@payments.ca.

We thank all applicants for their interest in this opportunity. Preference will be given to Canadian citizens and permanent residents. Only selected candidates will be contacted for an interview.