Director Cybersecurity Operations

Range:
125,600.00 - 188,400.00 CAD
Job Description:

Director Cybersecurity Operations

GAME ON - OLG needs you

We've said GAME ON, and we mean it - OLG is rapidly transforming its organization to better serve Ontarians by delivering great gaming experiences through our digital, retail lottery, and land-based gaming channels. Over the course of fiscal 2022-23, OLG delivered a record $2.5 billion in net profit to the Province of Ontario. OLG is now expanding our horizons even further, with a new strategic direction, to become a world class gaming entertainment leader with a globally admired digital platform.

We are ready to take this game to the next level and need a passionate Director Cybersecurity Operations to Security Operations Center (SOC) team, driving strategy and execution across Detection, Protection, Response, and Recovery. As the SOC leader, this role ensures effective incident management, safeguarding critical assets, and strengthening our proactive security posture to swiftly detect, respond to, and recover from threats.

YOUR ROLE IN THE GAME

Reporting to the VP Cyber & Information Security Officer, you will be empowered to:

• Lead and mature the Incident Detection and Response discipline across people, technology, and process to ensure the confidentiality, integrity, and availability of OLG and partners' information
• Manage a team of Cybersecurity Incident Response Team and MSSP resources and increase efficiency of the IDR function using automation technologies (SOAR)
• Oversee the development and continual improvement of Security Operational procedures
• Contribute expert opinion to escalation activities resulting from cybersecurity events.
• Promote continuous improvement of the Security Operations Centre through regular self-assessment activities, development and enhancement of tools and processes and feedback gathered from OLG management, cross-functional teams and third parties to ensure security programs and initiatives remain current and pertinent to OLG
• Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems and conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources
• Owns and oversee the management of OLG's Cybersecurity Incident Detection and Response program to ensure security related incidents are identified, contained, and eradicated, providing expertise for recovery and ensure lessons learned are captured for continuous improvement of the program
• Oversee and direct the utilization of other cybersecurity Extended Detection & Response (XDR) technologies and processes to ensure OLG maintains a mature cybersecurity program including antimalware technologies, IPS/IDS, SIEM, Secure Web Gateways, and others as required.
• Deep expertise in incident detection, response frameworks, and security operations, with a strong emphasis on automation, SOAR, and MSSP collaboration.
• Manages a team of technically expert security staff using a continuous improvement cycle. Leads and provides overall direction to the Security staff, including defining team member roles, responsibilities, and expectations; provides timely coaching and performance feedback, ensuring a cohesive operational unit with optimum use of team skills
• Promote continuous improvement of the program through regular self-assessment activities, development and enhancement of tools and processes and feedback gathered from OLG management, cross-functional teams and third parties to ensure security programs and initiatives remain current and pertinent to OLG.
• Other duties as required to maintain a robust and responsive security program as directed.

WHAT YOU NEED TO PLAY

Work Experience: Minimum eight (8) years' experience in Cybersecurity/Information Security or related field within a large to medium sized Technology environment; Minimum of six (6) years' progressive experience threat hunter, penetration tester, red team/incident responder, or security operations analyst. Minimum of five (5) years' experience in managing teams, either in a managerial or supervisory role Minimum of five (5) years' experience with regulatory compliance and information security management frameworks (such as International Organization for Standardization [ISO] 27000, COBIT, National Institute of Standards and Technology [NIST] 800)

Knowledge and Education: Post-secondary degree, preferably in an information systems discipline, or an equivalent combination of education, training and experience Advanced Certification in Security (CISSP), Risk Management (CRISC) and/or Certified Information Security Manager (CISM) and/or other security certifications Knowledge of information technology environments, including information cybersecurity, encryption methods and privacy-based solutions Knowledge and experience with current and emerging principles and practices of information and systems security required to safeguard enterprise business operations Knowledge of firewalls, intrusion detection systems, intrusion prevention systems, security information and event management (SIEM) systems, security orchestration, automation, and response (SOAR) platforms, and other security tools and technologies Familiar with security automation tools and techniques, and be able to effectively automate security tasks and improve the efficiency of the SOC.

Critical Skills:

• Compliance Mindset: Deep understanding of industry and government regulations (PCI, AGCO, FIPPA), internal controls, and cybersecurity standards and frameworks (NIST, ISO27001, SOC2, MITRE ATT&CK) Ability to interpret policies, enforce compliance, and align security operations with legal and regulatory requirements.
• Relationship Management: Build collaborative and effective business and key stakeholder relationships to gain commitment to action through consultation and consideration of impacts for mutually beneficial outcomes.
• Negotiation and Influence: ability to negotiate and influence effectively while being open to perspectives and maintaining strong relationships
• Strategic Thinker: As an analytical, strong strategic and critical thinker, ability to ability to delve into unique challenges and find creative solutions
• Decision Mindset: Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one and an ability to effectively influence others to modify their opinions, plans or behaviors

Collaboration & Fun: inclusive and collaborative work style while creating fun and excitement in our work creating a culture of continuous self and team development and learning.

Integrity and Trust: do what's right and operate with transparency and openness

Licenses, Registrations, Certificates:

AGCO Category 1 Gaming Assistant Registration (Initiated at offer stage - employment is conditional upon obtaining and maintaining this license)

PERKS OF JOINING OUR TEAM

• Part of a Bigger Picture: socially responsible company that gives back all its profits to the province and people of Ontario
• Flexible Work Environment: to help balance both work and life
• You Matter: family friendly work practices and hybrid work
• Freedom to Innovate: supports new and better ways to be successful
• Be your Authentic Self: environment that values diversity as a source of strength
• Learning Galore: 24-7 access to robust online learning programs
• Public Service Pension Plan: participate in a major defined benefit pension plan sponsored by the Government of Ontario
• Variable Pay Program: performance-based incentives to share in our success (Permanent OLG Employees Only)

Learn about OLG - GAME ON!

OLG's purpose is to contribute to a better Ontario by delivering great entertainment experiences for our customers. We are a multi-billion-dollar organization with a wide array of business lines including, lottery, land-based casinos, digital lottery and casino, horseracing, and charitable gaming. OLG is amidst a massive transformation focusing on being customer obsessed and bringing our digital business to a whole new level.

The key to our success is our people. Our culture will be grounded in true, positive partnerships that embrace trust, clarity, and openness in all that we do. We are supporting and empowering employees and teams across the organization through greater accountability, leadership development and growth opportunities. OLG is embracing more flexible work options and family friendly work practices including hybrid work.

Equity, diversity, and inclusion are essential elements of our culture and cornerstones of the Five Truths that OLGers Live by. At OLG, our employees have the space to be themselves and use their perspectives and skills to benefit the people and the Province of Ontario.

While we are re-shaping and growing our business, we are unwavering when it comes to living our purpose, and ensuring our business delivers meaningful benefits for the people of Ontario. OLG's net profits are reinvested back into the province, contributing to the quality of life for Ontarians.

To learn more about OLG go to our website at www.olg.ca

We look forward to hearing from you, interested applicants please apply online by April 29, 2025.

OLG is an equal opportunity employer. We are committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act. Please contact Human Resources at careers@olg.ca if you require accommodation at any time throughout the hire process.

We thank you for your interest in this opportunity; however only those individuals selected for an interview will be contacted.

#LI-Hybrid

Personal information is collected by the Ontario Lottery & Gaming Corporation (OLG) and/or its third party service provider(s) under the authority of the Ontario Lottery and Gaming Corporation Act, 1999, SO 1999, c 12, Sch L and the Employment Standards Act, 2000, S.O. 2000, c. 41 (as amended) and will be used for the purpose of determining qualifications for employment with OLG and for recruitment modernization initiatives. The information will be managed in accordance with all applicable laws, OLG's Protection of Privacy Policy (the Policy) and related policies and procedures. For any questions about this collection, please contact careers@olg.ca, 800-70 Foster Drive, Sault Ste. Marie, ON, P6A 6V2.