Information Security and Compliance Manager

MDA Space; Ottawa; On-site; CAD 115,000 - 130,000; Full time

Benefits offered by this job

Comprehensive health benefits

Retirement savings plans

Employee and family assistance program

Job summary

A leading space technology firm in Ottawa is seeking an experienced Information Security and Compliance Manager. The role involves developing and implementing data protection policies, managing compliance programs, and working collaboratively with multiple departments. Applicants should have a Bachelor's degree, over 6 years of experience in data analytics or compliance, and strong knowledge of data protection laws. This position offers a competitive salary in the range of $115,000 to $130,000 annually and a comprehensive benefits package.

Qualifications

• 6+ years of experience in information security, compliance, or risk management.
• Strong knowledge of data protection laws and related frameworks.
• Ability to work independently and in a team-oriented environment.

Responsibilities

• Develop and maintain information security policies and procedures.
• Lead implementation of data protection and compliance programs.
• Conduct regular risk assessments and audits.

Skills

Data protection laws knowledge

Risk management

Information Security practices

Data analytics

Bilingual communication

Education

Bachelor's degree in Information Security or related

Tools

GDPR compliance frameworks

ISO 27001

NIST standards

Job description

Building the space between proven and possible, MDA Space is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure. The MDA Space team of more than 3,800 space experts in Canada, the US and the UK has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one. For those who dream big and push boundaries on the ground and in the stars to change the world for the better, we’ll take you there. For more information, visit www.mda.space.

The Role

Working closely with multiple parties including IP, Data Owners, CADM, IT and others, the Information Security and Compliance Manager is a key player in multiple data management and classification efforts. In this role, you will analyze and identify the appropriate data classification and ensuring safe compliant storage is assigned to different types of information is essential to protect MDA Space’s Data information. Proper data classification will enable MDA Space’s to leverage key technologies such as Cloud Services and Artificial Intelligence, and understanding the type of data generated and the owners of that data combined with in depth knowledge of IP, Internal and External classification and Export Controls will be a key success factor.

In an interdepartmental collaboration environment, the DSO will work with multiple stakeholders to determine and ensure proper handling of data (Including access controls and storage) based on its type and level of sensitivity.

Job Responsibilities

• Develop and maintain information security policies, standards, and procedures.
• Lead the implementation of data protection and compliance programs (e.g., GDPR, HIPAA, ISO 27001).
• Conduct regular risk assessments and audits to identify vulnerabilities and ensure compliance.
• Collaborate with IT, Legal, HR, and other departments to ensure security and compliance are embedded in business processes.
• Manage incident response planning and execution, including breach investigations and reporting.
• Provides tactical and operational stewardship of data assets, managing security, retention, and technical access controls to ensure data is handled in accordance with standards, policies, and regulatory requirements.
• Provide training and awareness programs to promote a culture of security and compliance.
• Oversee vendor risk management related to data security and privacy.
• Prepare and present reports to senior leadership on compliance status, risks, and mitigation strategies.
• Provide classification assessments based on company standards and information about the data provided by data owners.
• Provides regulatory interpretation, risk guidance and policy constraints for data use, advises on compliance implications
• Works closely with MDA Space’s security team and cyber-security to ensure adherence to complex data management programs such as Canada’s CPCSC and US’s CMMC
• Communicate with multiple departments, ex. Program managers, IP, data owners, engineering, CADM. to obtain necessary information to support and document data handling.
• Acts as Alternate Security Officer, (ACSO) and Designated Official (DO) to support data access control related functions under the Controlled Goods and Contracts Security programs.
• Provide training to different members of the teams involved in data-management efforts as well as multiple users
• Report risks to Senior management on a periodic basis highlighting any issues along with strategies for risk mitigation.
• Liaise with and support all MDA Space’s Locations on all tasks in this job description.
• Support with internal audits and compliance investigations

Job Requirements

• Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field desired or equivalent experience.
• 6 or more years of experience in data analytics roles, information security, compliance, or risk management.
• Understanding of safe and compliant handling practices of sensitive information and technology, including but not limited to, PROTECTECTED, CLASSIFIED, CGP CUI, ITAR, EAR
• Strong knowledge of data protection laws and frameworks (e.g., GDPR, CCPA, ISO 27001, NIST).
• Relevant certifications (e.g., CISSP, CISM, CISA, ISO 27001 Lead Implementer) preferred.
• Ability to work in a team-oriented environment and with minimum supervision.
• Must be dead-line oriented and flexible and be able to work under pressure.
• Good understanding of space technology would be a definite asset.
• Bilingual (Asset)

Special Considerations

Successful candidates must obtain and hold security clearance at the secret status level, and pass security assessment for the Controlled Goods Program (CGP) and ITR.

We’re a dream team of purpose-driven, collaborative and passionate people, and we are constantly looking for others to join #TeamMDA to ignite new and innovative approaches to problem-solving that push us forward to improve life on and above Earth. If you’re excited to expand our place in space and driven to inspire the next generation, we’ll take you there.

An equal opportunity employer prizing diversity, integrity and collaboration, we are committed to growing MDA’s and Canada’s leadership in this next golden age.

MDA provides competitive compensation and benefits packages for its employees at all locations. As a team member of MDA, you and your qualified dependents are eligible to participate in a benefit plan that ensures a comprehensive level of protection through competitive health care including; extended healthcare and flexible drug plans, dental and vision benefits, disability income protection, life insurance, group retirement savings plans; and an employee and family assistance program.

MDA is proud to provide accommodation(s) during the recruitment process. Should you require any accommodations, please indicate this on your application/cover letter and we will work with you to meet your accessibility needs.

The compensation range for this position is $115,000- $130,000 annually. The specific compensation offered will be based on the qualifications and experience of the successful candidate.

#MDA