About Canadian North
Canadian North is a vital air service provider for the Canadian Arctic and an industry-leading charter carrier. With a mission to make life better in the communities we serve, we provide reliable passenger and cargo services to 25 northern communities, connecting them with major southern hubs in Ottawa, Montreal, Calgary, Winnipeg, and Edmonton.
As a proudly 100 Inuit-owned airline, we are deeply committed to cultural inclusivity, community investment, and the well-being of northern communities. Canadian North strives to be a trusted partner for the North by contributing to prosperity, fostering community connections, and supporting innovation and teamwork.
We prioritize safety, reliability, and collaborative success in everything we do. Our customers choose us because they trust us to deliver essential services with care and consistency. At Canadian North, we offer more than just a job—we provide an opportunity to embark on an adventure while making a meaningful difference in the communities we serve.
Join us as we connect northern Canada with the world, delivering on our mission and building a workplace where people want to start and grow their careers.
About this position:
Reporting to: Director, Enterprise Technology Services & Cyber Security
*Non-Bargaining
DUTIES AND RESPONSIBILITIES:
Must be able to perform, but not be limited to, the following duties and responsibilities:
Governance:
- Defines the cybersecurity strategy, objectives, and roadmap and leads the delivery
- Develops and implements a cybersecurity governance framework and policies, standards, processes and procedures
- Organizes a cybersecurity governance committee and supports the Director, Enterprise Technology Services and Cybersecurity
- Reports cybersecurity performance and provide regular updates to all stakeholders
- Develops and delivers security awareness and training programs for employees, fostering a security-conscious culture in alignment with corporate goals
Risk Management:
- Develops and executes a comprehensive risk management program ensuing cybersecurity risks are identified, assessed and prioritized across the organization
- Monitors and reports on risk mitigation efforts, ensuring timely action
- Fosters a risk-aware culture and provide risk guidance to project teams
Compliance:
- Develops and maintains a compliance framework
- Ensures compliance with relevant cybersecurity frameworks, regulations, and standards (e.g., PCI-DSS, SOX, ISO 27001, NIST, etc.)
- Conducts compliance assessments and audits
- Liaises with external auditors and regulatory bodies
Program Management:
- Leads the planning, execution, and tracking of cybersecurity initiatives
- Manages the cybersecurity budget, resources, and timelines
- Coordinates with cross-functional teams to achieve project objectives
Security Operations:
- Oversees security operations and incident response team with tactical direction and leadership
- Ensures timely detection and response to security incidents
- Manages the deployment and maintenance of security technologies
- Develops and enforces policies, procedures, and operational guidelines
- Continuously improves security incident handling procedures and conducts tabletop exercises and simulated incident response drills to enhance team readiness
- Evaluates the effectiveness of operations and makes necessary improvements
SKILLS AND QUALIFICATIONS:
Include, but not limited to, the following minimum skills and qualifications:
- Bachelors degree in Cybersecurity, Information Technology, or equivalent experience;
- Relevant cybersecurity certification(s) e.g., CISSP, CISM, CRISC, CISA preferred;
- 7 years experience in cybersecurity with 2-3 years in managerial role;
- Strong technical knowledge and experience in cybersecurity;
- Strong knowledge of cybersecurity frameworks, regulations, and best practices;
- Demonstrated strategic thinker;
- Proven experience in risk management, compliance, and program management;
- Excellent leadership, communication, and problem-solving skill;
- Ability to work collaboratively with cross-functional teams;
- Strong analytical and decision-making abilities;
- Ability to communicate in Inuktitut or other Indigenous language considered an asset;
- Ability to obtain and retain an Airport Restricted Area Pass in accordance with the Airport Restricted Area Access Clearance Program regulated by Transport Canada.
Closing date: May 2, 2025
