---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Manager, Information Security
Location: Toronto, Ontario, Canada
Type: Permanent P/T
Closing Date: 2007-09-09
Manager, Information Security Awareness
Business Unit Description:
Enterprise and Information Security provides bank-wide guidance on Information
Security strategies, programs, policies, standards and technology tools.
Purpose of Job:
The Information Security Governance team is a dynamic and diverse team,
responsible for developing Enterprise Information Security Governance
(policies, standards, operational directives, and processes) as well as an
Enterprise – Wide Security Awareness Program.
The Manager, Information Security Awareness will design and implement a
Security Awareness Program, which must focus on awareness training for all
audiences throughout the organization. In addition, other activities, such as
poster campaigns and intranet sites will be in scope.
Major Activities:
• Create, lead, and manage an enterprise-wide Security Awareness Program.
• Manage and mentor one direct report.
• Effectively manage (on time and on budget) security awareness projects.
• Work with the business and IT to rollout security awareness projects.
• Develop creative and effective security awareness materials for the
organization at large. Materials include posters, classroom training, online
training, Intranet Site, presentations, screensavers, and video webcasts.
• Co-ordinate external training providers for in house training to CIBC
staff.
Knowledge/Skill Requirements:
Subject Matter Expert:
• Creativity – Ability to develop unique, creative, and professional
security awareness materials, initiatives, and projects.
• Influencing--Ability to impact decisions within and outside own
organization.
• Communication – Ability to work with numerous stakeholders to
develop, negotiate, and implement the security awareness program.
Extensive Work Experience:
• Information Security Knowledge & Experience -- Solid knowledge of and
working experience as an information security professional.
• Information Security Awareness Knowledge & Experience – Solid
knowledge of and working experience in Information Security Awareness.
• Interpersonal Relationships--Knowledge of approaches, tools and
techniques for working with individuals and groups in a constructive and
collaborative manner.
• Written Communications--Ability to produce a variety of business
documents that demonstrate command of language, clarity of thought and
orderliness of presentation.
• Presentations--Ability to present information to groups with the
appropriate degree of formality.
• Oral Communications--Ability to express oneself and communicate with
others verbally; recognizing that verbal communication is more than just
language - it includes tone, style and structure.
• Facilitation--Ability to design and facilitate a group process, elicit
contributions from group members, stimulate a focused group discussion, and
achieve a desired outcome.
Qualifications:
JOB REQUIREMENTS
---------------------------------------------------
• University degree in Computer Science, Business or related field.
• 5-8 years related experience, with a demonstrated progression through
IT into Information Security.
• Possession of a CISSP. The CISM, HISP & CISA designations are
desirable and would be advantageous.
• Previous experience in delivering Information Security Awareness
programs and can demonstrate a strong background in developing Information
Security policies, practices and standards, is required.
• Can demonstrate the capability in developing creative solutions,
collateral materials and presentations to targeted audiences.
• Demonstrated success in delivering presentations and programs to
C-Level management
• Project management
• Budget management
• People management
Contacts:
• All levels within the organization.
Job Complexities/Challenges:
• Managing complex projects.
• Gaining buy-in and support from business and technology groups as well
as external service providers.
• Working on projects that have high visibility within the organization
and must be executed flawlessly.
Attributes:
• Creativity
• Accountability
• Teamwork & Partnering
• Building Trust
• Impact & Influence
• Communication
• Relationship Building
CONTACT
---------------------------------------------------
CIBC
Laurie Morris
laurie.morris@cibc.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
