Senior Program Manager, Cybersecurity Awareness & Culture

Ontario Health; Toronto; Sur place; CAD 110 000 - 160 000; Plein temps

Avantages offerts par ce poste

Health coverage

Wellness accounts

Pension plan

Vacation entitlement

Personal days

Learning & development

Résumé du poste

Ontario Health is seeking a Senior Program Manager, Cybersecurity Awareness & Culture to lead the strategy and evolution of our cybersecurity learning program. You will craft proactive, risk-informed learning that strengthens secure behaviours and fosters a strong security culture across the organization.

Using behavioural science and modern learning approaches, you will deliver targeted interventions for diverse audiences, with success measured by effectiveness and risk reduction.

Qualifications

• Bachelor’s or Master’s degree in Business, Health Studies, Public Administration or related field, or equivalent experience.
• 7–10 years of overall experience in related roles with progressively increasing scale and scope up to leadership.
• Experience in the health care sector and public service is preferred.
• Experience with contract and budget management.
• Experience in hybrid work environments and leading large meetings.

Responsabilités

• Lead strategy, design, implementation and evolution of Ontario Health’s cybersecurity awareness and learning program.
• Develop and deliver an integrated, year-round learning program with mandatory training, simulations, campaigns and role- and risk-based education.
• Apply behavioural science and instructional design to create engaging interventions that drive measurable behaviour change.
• Monitor threats and risks, translating developments into timely learning guidance and advisories.
• Collaborate across teams to translate threats and risk trends into targeted learning and awareness initiatives.
• Establish measures and reporting to evaluate participation, behaviour, and program effectiveness.

Connaissances

Leadership

Strategic thinking

Stakeholder engagement

Change management

Cybersecurity awareness

Learning & development

Formation

Bachelor/Master degree

PM certification asset

Outils

CISSP (asset)

Description du poste

At Ontario Health, we are committed to developing a strong organizational culture that connects and inspires all team members across the province. Our vision is that together, we will be a leader in health and wellness for all. Our mission is to connect the health system to drive improved and equitable health outcomes, experiences and value. How we work together is reflected through our five values: integrity, inspiration, tenacity, humility and care.

What Ontario Health offers

• Comprehensive health coverage from day one, with fully paid medical, dental, and vision benefits to support you and your family’s health
• Flexible health care or wellness spending accounts, plus an inclusive program to support your overall well-being
• A premium defined benefit pension plan, ensuring long-term financial security
• Competitive vacation entitlement that encourages time to rest and recharge
• Three personal days and two float days annually, providing added flexibility to support work-life balance, in addition to vacation days
• Ongoing learning and career development opportunities designed to help you grow, advance, and thrive in your profession
• A collaborative, values-driven workplace where integrity, care, humility, inspiration, and tenacity shape everything we do
• Opportunities to participate in Communities of Inclusion, fostering belonging, equity, and the sharing of diverse perspectives across our team

Ontario Health is seeking a Senior Program Manager, Cybersecurity Awareness & Culture to lead the strategy, development, implementation and continuous evolution of our cybersecurity awareness and learning program. In this role, you will build a proactive, risk-informed approach to cybersecurity learning that strengthens secure behaviours, reduces human-related cyber risk and helps foster a strong organizational security culture. You will translate evolving cyber threats, risk trends and organizational needs into relevant and actionable learning experiences for diverse audiences. Using behavioural science, adult-learning, change-management and modern learning approaches, you will develop targeted interventions that support sustained behaviour change and strengthen cybersecurity as a shared responsibility across the organization. Working collaboratively across Cybersecurity and Ontario Health, you will provide program leadership and subject-matter guidance, establish meaningful measures of effectiveness, and continuously evolve the program based on data, emerging threats, stakeholder feedback and leading practices. The role may also apply expertise in learning, behavioural change, stakeholder engagement and change management to support strategic enterprise digital initiatives and organizational transformation.

Here Is What You Will Be Doing

• Lead the strategy, design, implementation and continuous evolution of Ontario Health’s cybersecurity awareness and learning program, strengthening secure behaviours, security culture and organizational resilience.
• Develop and deliver an integrated, year-round learning program, including mandatory training, simulations, campaigns and targeted role- and risk-based education for diverse audiences.
• Apply behavioural science, adult-learning, instructional design and change-management practices to create engaging interventions that build cybersecurity knowledge and support measurable, sustained behaviour change.
• Monitor the evolving cyber threat and human-risk landscape, emerging practices and relevant frameworks, translating developments into timely learning, guidance, communications and awareness initiatives.
• Partner across Cyber Security Defence and Resilience team, and with other organizational stakeholders and teams to translate threats, incidents and risk trends into targeted learning, awareness interventions and timely cybersecurity advisories and guidance as needed.
• Lead cybersecurity awareness and engagement across appropriate channels and forums to reinforce priority behaviours, communicate emerging risks and strengthen organizational security culture.
• Establish meaningful measures, insights and reporting to evaluate participation, behaviour, human risk and overall program effectiveness, using findings to inform priorities and improvements.
• Continuously assess and mature the program using data, threat intelligence, stakeholder feedback and emerging practices to maintain a proactive and risk-informed approach.
• Engage and influence stakeholders at all levels, providing program leadership and subject-matter guidance on complex initiatives and decisions with organizational impact.
• Collaborate across teams, providing leadership, expertise, guidance and support to advance shared goals while coaching and inspiring others.

Here Is What You Will Need to Be Successful

• Education and Experience Bachelor’s or Master’s degree in Business, Health Studies, Public Administration or related field, or equivalent experience. Project Management, or related professional designation as an asset.
• 7 – 10 years of overall experience in related roles with progressively increasingly scale and scope of execution authority up to a leadership role.
• Experience in the health care sector and the public service, and existing relationships are preferred.
• Extensive experience in contract and budget management, and experience with standard terms and conditions.
• Experience working in a hybrid environment, equally comfortable working with teams online or in person.
• Experience planning and leading large meetings.
• Experience in the Ontario health care sector and public service, with existing positive relationships an asset.
• Advanced knowledge and understanding of the application of the Project Management LifeCycle and Software Development LifeCycle, as well as modern mode two ways of working. e.g., Agile/Scrum.
• Cybersecurity certification such as CISSP, CISM or equivalent is an asset.
• Experience developing or leading cybersecurity awareness, security culture, human-risk or organizational learning programs would be an asset.
• Knowledge of recognized cybersecurity frameworks, standards and leading practices would be an asset.

Key Competencies

• Exceptional leadership and program ownership skills, with the ability to set direction, mobilize stakeholders and lead complex organization-wide initiatives toward measurable outcomes.
• Exceptional communication, presentation and influencing skills, with demonstrated ability to engage diverse audiences and build support for cybersecurity and organizational priorities.
• Strong knowledge-translation skills, with the ability to understand complex cybersecurity threats, risks and technical concepts and turn them into clear, relevant and actionable guidance.
• Strong understanding of behavioural science, adult learning, instructional design and change management, with demonstrated ability to apply these principles to learning, behaviour change and organizational adoption.
• Strong cybersecurity and risk-management acumen, including the ability to understand evolving threats and human-related cyber risks and translate them into program priorities and interventions.
• Strong analytical and measurement capabilities, with the ability to define meaningful measures, identify trends and translate behavioural and program data into improvements.
• Strong relationship-building, collaboration and consensus-building skills, with the ability to work effectively across technical and non-technical teams and influence without direct authority.
• Strategic, curious and adaptable thinker with strong judgement and a continuous-improvement mindset, able to respond effectively to evolving threats, organizational priorities and emerging practices.
• Strong program-management and prioritization skills, with the ability to balance planned and emerging priorities and lead initiatives from strategy through implementation and evaluation.
• Sound judgement, discretion and professional maturity, with the ability to operate autonomously, navigate sensitive issues and make informed decisions with significant organizational impact.
• Highly self-motivated and proactive, with strong initiative, judgement and accountability.

Location

Ontario Health (OH) welcomes applications from candidates across Ontario. Please note that this role follows an in-office work model, requiring employees to work from a designated, approved Ontario Health location.

Employment Type: Permanent Full time

Contract Length: N/A

Salary Band: Band 7

External Application Deadline Date: November 5, 2026

All applicants must be a resident of Ontario to be considered for roles at Ontario Health.

Ontario Health encourages applications from candidates who are First Nations, Métis, Inuit, and urban Indigenous; Francophone; members of Black and racialized groups; 2SLGBTQIA+ communities; trans and nonbinary individuals; and people living with disabilities.

Ontario Health is an accessible employer, and we offer accommodation in all aspects of employment, including the recruitment process. If you require a disability related accommodation in order to participate in the recruitment process, please email [e-mail] and a member of the team will connect with you within 48 hours.

Ontario Health is the provincial agency responsible for ensuring Ontarians receive high-quality health care services where and when they need them. Since it was established in June 2019, Ontario Health has brought together the strengths of many existing health care organizations to work together to build a better health care system for all Ontarians. Building on the expertise and knowledge of our people, we are committed to applying the best of what we collectively do, and in partnership with others, to transform the health system and improve the quality and delivery of care for patients, families, and health care providers.