Vice President, Security & IT Operations

Lassonde Industries Inc.; Rougemont (NC); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Group insurance plan

Pension plan with employer contribt ut

Telemedicine

Employee & family assistance programs

Wellness programs

Job summary

Lassonde Industries Inc. seeks a senior executive to lead North American Security and IT Operations reporting to the CIO. You will unify Canadian and US teams, tools and processes into one operating model with a single service desk and security posture across our plants and offices.

Responsibilities include defining strategy, governance and roadmap, managing budgets and vendors, and driving cybersecurity, resilience and technology modernization while partnering with the Executive Leadership Team.

Qualifications

• Bachelor’s degree in a relevant discipline; MBA/ MSc preferred.
• CISSP, CISM or equivalent security certification preferred.

Responsibilities

• Define NA cybersecurity and IT ops strategy and multi-year roadmap.
• Unify Canadian and US teams under one operating model and service desk.
• Recruit, develop and lead a cross-functional team across infra, network, cloud, and security.
• Manage budgets, vendor strategy and SOC/incidence response partners.
• Provide trusted counsel on cybersecurity and risk to executives and board.

Skills

Cybersecurity leadership

IT operations management

Strategic planning

Vendor management

Education

Bachelor's degree in computer science, engineering, or related field

MBA or MSc preferred

Tools

ITSM platform

Cloud platforms

Job description

Reporting to the Chief Information Officer, the Vice President, Security and IT Operations is responsible for establishing and leading Lassonde’s North American shared services function for infrastructure, IT operations, end-user support and cybersecurity. The incumbent will unify Canadian and US teams, tools and processes into one operating model, with one service desk, one set of service levels and one security posture across our 19 plants and offices.

This is a foundational executive role responsible for defining the strategy, operating model and governance required to support business growth, manufacturing modernization and enterprise technology transformation, while strengthening cybersecurity, operational resilience and risk management, while serving as a strategic partner to the Executive Leadership Team and business leaders. The successful candidate will also provide trusted counsel on cybersecurity, operational resilience and technology risk to the Audit Committee, the Board and our insurers.

Job advantages

• A competitive salary with opportunities for advancement and career development.
• Access to a group insurance plan & a pension plan with employer contributions.
• Telemedicine & employee and family assistance programs.
• Recognition & wellness programs for employees.

Key activities

Strategy And Stakeholder Engagement

• Define the North American cybersecurity and IT operations strategy and multi-year roadmap in collaboration with the CIO.
• Partner with functional leaders to understand their priorities and offer secure, practical solutions.
• Own a single cybersecurity scorecard, and report on cyber risk, maturity and program progress.
• Own the cyber insurance relationship, including renewals and the evidence underwriters require, and respond to customer security assessments.

Operating Model And Leadership

• Stand up one North American Security and IT Operations shared services function: charter, operating model, RACI, service catalogue and KPIs.
• Bring the Canadian and US teams together under one leadership, one way of working and one set of standards.
• Recruit, develop and lead a team across infrastructure, network, cloud, IT service management, end-user support, security operations and identity.
• Manage the function’s budget, vendor strategy and sourcing model, including managed services, security operations centre (SOC) and incident response partners, and consolidate contracts and tools across Canada and the US.

Infrastructure, Cloud And IT Operations

• Own the North American infrastructure estate across plants, distribution centres and offices.
• Define and execute the infrastructure roadmap to ensure the modernization, harmonization and evolution of the organization’s technology capabilities.
• Ensure plant connectivity and infrastructure deliver the availability manufacturing requires, and are ready for plant digitalization, IoT and AI workloads.
• Manage capacity, performance, lifecycle and cost, including cloud consumption and FinOps practices.
• Run one North American service desk on one ITSM platform to ensure efficient and consistent service.
• Establish ITIL-based incident, problems, change, request and asset management, with monitoring, automation and AI-assisted.
• Deliver a consistent employee technology experience across North America.
• Publish service levels the business can hold IT to, and report performance on a regular scorecard.
• Provide 24/7 support coverage for manufacturing operations.
• Organize field and site support to deliver reliable, responsive service across all locations and support the adoption of new tools and technologies throughout the organization, with service available in both English and French.

Cybersecurity, Operational Technology Security & Operational Resilience

• Lead the security program, continuously assessing maturity, establishing a realistic target state, and strengthening the organization’s security posture.
• Lead identity and access management, the 24/7 managed security operations centre (SOC), vulnerability and patch management, and security awareness for all employees.
• Embed secure-by-design practices in transformation programs, cloud adoption and AI initiatives, and use AI for defence within the company’s AI governance.
• Lead the OT cybersecurity program across our plants in partnership with Manufacturing and Operations: asset inventory, IT/OT network segmentation, OT monitoring and aligned controls.
• Lead IT/OT network segmentation initiatives that enable plant digitalization, connected technologies and manufacturing modernization while protecting production uptime and operational safety.
• Secure third-party and vendor remote access to plant networks.
• Strengthen the organization’s resilience to limit the impact of cyber incidents and preserve operational continuity across all manufacturing sites.
• Own one North American incident response model, including playbooks, out-of-band communications and crisis coordination with stakeholders.
• Run recurring tabletop exercises with executives and teams, and drive their recommendations to completion.

Risk, Compliance And Trust

• Lead cybersecurity and data protection components of regulatory obligation and compliance requirements in collaboration with key stakeholders.
• Lead, in partnership with Legal, Privacy, Finance and Internal Audit, the cybersecurity and data protection aspects of the organization’s regulatory and compliance obligations, including IT general controls for financial reporting.
• Manage third-party and supplier security risk and emerging threats, including AI-enabled fraud.
• Ensure audit readiness and provide clear, reliable evidence for internal and external audits.

Required Training And Experience

• Bachelor’s degree in a relevant discipline (computer science, engineering, information security or related field); an advanced degree (MBA, MSc or equivalent) is preferred.
• CISSP, CISM or equivalent security certification preferred.