Director, Security Business Partner

Job description

Position Description:

CGI, a global leader in IT service outsourcing is seeking a Manager or Director of Security, internally referred to as a Business Unit, Security Business Partner (BUSBP), to support business units across the Canada. The BUSBP is a leadership position that is a direct report to the Vice President of Security for Canada Operations within the Office of the Chief Security Officer. The role will focus on all aspects of corporate security, from physical, cyber and information security disciplines. The BUSBP is the primary security point of contact to support the business unit in executing CGI security requirements within Canada, responsible for the overall security posture of the business unit and supporting and responding to client security related matters.

Opportunity to work in a converged security environment with exposure to diverse domains.
Membership in a cross-functional security team encompassing physical security, workforce protection, information security and Business Continuity Planning.
Responsible for the safety and well-being of members in the assigned Business Unit.

Your future duties and responsibilities:

The Business Unit Security Business Partner (BUSBP) manages the implementation of internal corporate policies, procedures, and standards within the Business Unit (BU).

Client Delivery Enablement
• Ensure implementation of the ESMF consistently across the BU delivery operations
• Support engagement delivery and client inquiries related to CGI Global Security (i.e. VIP and client meetings)
• Support client security reviews and audits in collaboration with all stakeholders
• Primary point of contact for CGI Global Security functions and client security matters within the BU

Business Development Enablement
• Review proposals/renewals for security risk and CGI Security Baseline compliance, and provide recommendations (i.e., security integration into BEMF)
• Support Global Security aspects of client presentations
• Support strategic collaborative opportunities with the business security practices and delivery centers
• Support CGI Merger and Acquisition program as needed.

Strategy and Framework Execution
• Communicate, train and enforce BU adherence to CGI Security Baseline for internal and shared (multi-client) environments
• Manage exceptions to the CGI Security Baseline within the BU
• Validate BU requirements are in alignment with Global Security initiatives in collaboration with all stakeholders
• Lead the security education, training and awareness programs within the BU in alignment with Global Security directives
• Support security certification and re-certification within the BU (e.g. ISO 27001) where applicable, consistent with ESMF

Security Management and Reporting
• Maintain and report on security metrics including quarterly scorecard
• Report on security risks at the BU level
• Oversee the management of security incidents including escalation to the SBU SBP and BU management as needed
• Lead the Security Risk Management process within the BU (i.e., analysis, mitigation and monitoring of identified risks)
• Participate and inform security audits and compliance activities within the BU
• Manage security vulnerability program and ensure remediation are deployed timely
• Validate the execution of third-party security risk assessments for the BU

Physical / Workforce Security and BCP
• Oversee the execution of physical security and workforce protection at the BU level
• Ensure that the BU develops, maintains and tests business continuity plans (BCP)
• Support global crisis management activities and work closely with the BU during crisis/ BCP situations
• Support insider threat management as requested
Government Security Programs (when applicable)
• Oversee personnel and security clearance program
• Manage special security agreements (e.g. defense, space, intelligence etc.)
• Oversee security operations in alignment with ESMF and manage conflicts between CGI and government scope

Required qualifications to be successful in this role:

• A minimum of 8+ years in an information security role.
• Ability to work independently in a high-stress, often fast paced environment. Within security, and especially during incident response, business hours often do not conform to standard and/or extend beyond the traditional eight-hour “work day”.
• Experience leading the security incident response.
• Experience with client contract (MSA/SOW) reviews based on best practices and company policy
• Expert understanding of risk management principles
• A results-focused approach to work which values service quality, economy and collaboration.
• Demonstrated judgment and the ability to adapt to a dynamic environment.
• Must be a self-motivating, and self-starter capable of operating with little to no supervision to be successful. Candidates that are reliant upon day to day oversight and/or instructions will not be successful in this environment.
• Must be comfortable with executive presentations and general interactions. Must be a proficient public speaker.
• Must be available to perform security functions during non-standard business hours when required.

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $125,000–$175,000. This role is an existing vacancy.

Skills:

·  Contract Management
·  English
·  Incident Management
·  Leadership

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

To learn more about accessibility at CGI, contact us via email . Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.