Manager, IT Operations and Security

Canadian-Museum-For-Human-Rights; Winnipeg; On-site; CAD 100,000 - 140,000; Full time

Job summary

The Canadian Museum for Human Rights is seeking a Manager, IT Operations and Security to oversee the IS/IT department, align with CMHR objectives and lead in IT strategy, security, and digital transformation. Reporting to the Director, Information Services, the role emphasizes collaboration, policy development and cost-effective technology solutions.

The position requires at least 5 years in IT operations with security experience, professional certifications, and a commitment to human rights

Qualifications

• Post-secondary IT education is required and a cybersecurity background is preferred.
• Minimum 5 years of technical support/IT operations experience with security responsibilities.
• Certifications like CISSP, CISM, CRISC, GIAC or similar are desirable.

Responsibilities

• Fosters inclusive, anti-racist and accountable behaviours and leads IT leadership activities.
• Defines IT strategy, budgets and manages resources to support CMHR objectives.
• Drives digital transformation initiatives using modern platforms and automation.
• Develops and maintains information security policies, disaster recovery and business continuity plans.

Skills

Security

IT operations

Cybersecurity

Leadership

Strategic planning

Education

Post-secondary IT education

Tools

Azure

Virtualization

Firewalls

Disaster recovery

Job description

About the Role:

The Canadian Museum for Human Rights (CMHR) is centred around the idea that respect and understanding of human rights can serve as a positive force for change in the world. The Manager, IT Operations and Security plays a crucial role in fostering a workplace culture of inclusivity, equity and innovation that is focused on inspiring action.

Reporting to the Director, Information Services, this positionis responsible forensuring the streamlined operation of the Information Services/Information Technology (IS/IT) Department in alignment with the organization’s businessobjectives. The Manager will lead in planning, coordinating,directingand designing IT-related activities while providing administrative direction, technicalescalationsand support for daily operational tasks.

Key expectations for the Manager include optimizing IT service management processes, driving digital transformation using the M365 platform and prioritizing cybersecurity initiatives. Collaborating with decision makers in various departments, the Manager willbe responsible forcost-effective technology solutions across all organizational aspects. With a focus on enhancing Museum IT security through proactive communication and cooperation, the Manager is expected to be a strong communicator, who brings a collaborative approach to the role.

What you'll do:

Leadership

• Fosters a culture that promotes respect, equity, inclusion and innovation, and models anti-racist and accountable behaviours.


• Develops and executes tactics toproactivelysupporttheCMHR’s strategicobjectivesand to prioritize new and emerging issues and opportunities that mayimpactthe organization.


• Provides mentorship and coaching using performance-driven strategies focused on growth and development.


• RepresentsInformation Services as a strategic partner for the Museum.


• Contributes to the development and management of the annual budget for the CMHR’s Information Services department.


• Promotea culture of continuous improvement and learning.

Strategy, Architecture and Planning

• LeadsIT department operationaland infrastructure architecture,as well asorganizesand negotiatesthe allocation of IT resources.


• Collaborateswithpartnersto define business,systemsand architecturerequirements fornew technologyimplementations.


• Ensuresthe efficientutilizationof IT resources – including personnel and equipment – across theMuseum.


• Develops and overseesIT management processes,policies, and procedures, including those for network architecture, standards,purchasingand service provision,whilefinding continuous improvement opportunities.

Digital Transformation

• Leads and implements the CMHR’s technological evolution, AI and digital initiatives. Integrates cutting-edge technologies into our business processes, driving efficiency, automation and innovation.


• Works closely with cross-functional teams, identifying opportunities for automation, AI, streamlining workflows and leveraging emerging technologies to enhance customer experiences and operational excellence.

Information Management and Security

• Developsand implementsinformation security policies,security awarenessprogram,procedures,standardsand guidelines to promote the security and uninterrupted operation of computer-based application systems.


• Maintainssecurity andestablishesfunctioning controls such as firewalls, intrusiondetectionand prevention systems to protect information and prevent unauthorized access.


• Leads the development and maintenance of the CMHR’s cyber security, disaster recovery and business continuity plans for the Information Services department.


• Reviewssystems toidentifypotential security weaknesses, recommendsimprovements to amend vulnerabilities and reportsfindings to the leadership team.


• Manages the deployment, monitoring, maintenance, development,upgradeand support of all IT systems, including servers, PCs, operating systems, hardware,softwareand peripherals.


• Oversees the provision of end-user services, including Service Desk and technical support services.


• Creates andmaintainsthe Museum’s security architecture design.


• Creates andmaintainsthe Museum’s security awareness training program.

What we're looking for:

• Post-secondary education at the certificate,diplomaor degree level in Information Technology.


• Minimum of 5years’ experienceprovidingtechnical support in anenterprise environment and a considerable breath of knowledge and experience as an information security professional.


• One or more of the followingcertifications:Certified Information Systems Security Professional (CISSP), ITIL Expert, Certified in Risk and Information Systems Control (CRISC),CompTIA Security+, GIAC Information Security Fundamentals, Microsoft Certified Systems Administrator: Security,GIAC Security Essentials Certification,GIAC Security Leadership Certification,Certified Information Security Manager(CISM),or similar.


• Commitment to human rights principles, including respect, equity,inclusionand dignity for all, including anti-racism.


• Demonstratedleadership experience including developing,coachingand mentoringothers.


• Strongworking knowledge ofinformationsecurity concepts and vulnerabilities,including intrusiondetection systemsandfirewallsystems.


• Experience with virtualization platforms, shell scripting, hybrid cloud applications, infrastructure operations, containerarchitecture andtechnologies, TCP/IPnetworkingand network systems administration.


• Solid understanding of backup,replicationand disaster recovery technologies.


• Solid understanding of standard client/server,enterprise architecture,networking, Microsoft Azure/exchange/tenants, DHCP, firewallsandInternet fundamentals.


• Exceptional time managementandproblem-solvingskills,with the ability to work under pressure, multi-task and prioritizecompeting demands.

Desired Qualifications:

• ITIL 4, COBIT or similar IT service management process training.

Knowledge of Type 1 hypervisors, enterprise content management systems (e.CMS, DAM),applications management, Virtual/Hardware/Fixed Infrastructure (servers,mainframe, Storage DB),Linux mobileapplicationsand technologies.

• Experience in automation and AI initiatives.


• Experience managing/leading in a unionized environment.


• Experience working for or providing service to a museum, cultural institution, or similar entity.


• Ability to communicate in both official languages.

Official Language Proficiency:

• English Essential, French Non-essential

Other:

• Adheresto securityprotocols byensuring compliance to policies,proceduresand standards.


• Participates in required security training sessions (i.e. complete required security training modules).


• May require crouchinginto tight spaces and some heavy lifting.


• Will be required to provide 24-hour on-call response.


• May requirelong periodsat a desk, reading of lengthy documents and time in front of a computer.

Conditions of Employment:

• Security Screening LevelII–SecretStatus.


• Child Abuse Registry Check.