CWB

, we strive to build value for the people who choose us every day: our people, our clients and our investors. We do this by holding true to the values that guide us. We put people first and build relationships with intention. We seek out and embrace new ideas, knowing that better is always possible. We believe that how we do things is as important as what we do. And we harness the power of inclusion. Our culture is who we are and how we show up - as individuals and as a team - to accomplish our strategy.

Senior AVP, Information Security

Everyday flexibility. Hybrid work environments. Collaborative connection.

It’s a new world, and we’re learning to embrace it! People are changing the way they work and connect, so we’re changing too. Join a team that lets you impact the future, grow to your fullest potential, be your authentic self, and connect with clients and colleagues in meaningful ways.

CWB is a bank build for business owners

Canadian Western Bank (CWB) is the only full-service bank in Canada with a strategic focus to meet the unique financial needs of businesses and their owners. Our teams take a relationship-based approach to deliver a uniquely proactive client experience through highly personalized service, specialized expertise, customized solutions, and faster response times. We provide full-service business and personal banking, nation-wide specialized financing in targeted industries, comprehensive wealth management offerings, and trust services.

Inclusion has power.

Labels don’t matter here. But your perspective does.

Bring you. All of you. Feminist. Ally. Outdoor enthusiast. Indigenous elder. Storyteller. Artist. Landscape photographer. Animal rights activist. Student.

All applicants are welcome, and we expressly encourage applicants to apply who identify as women, persons with visible and invisible disabilities (including physical, mental, sensory, learning impairment, etc.), Indigenous Peoples (including First Nations, Metis and Inuit), LGBTQ2S+ and/or racialized persons. At CWB we believe that inclusion has power, and we’re always looking for unique perspectives to add to our teams. We have a culture that thrives on idea-sharing, collaboration, respect, caring and camaraderie. If you have a voice to add to the conversation, we’d love you to apply. All applicants are considered as part of an equitable and fair selection process.

The opportunity

Reporting to the SVP, CISO & IT Governance, the Senior AVP, Information Security is a senior leader within the Information Services department that works across CWB business lines, partner companies and corporate office departments to ensure the overall security of CWB’s information assets. This role will manage risk, compliance, and continually optimize our Information Security program in a highly regulated industry and environment. The successful incumbent will work closely with the CISO to develop, implement, and maintain a comprehensive information security strategy for the organization that aligns sound risk management practices with the establishment of effective controls that safeguards CWB information assets while enabling the organization to achieve its strategic objectives. This role is also responsible for directing and overseeing the development and implementation of Information Security programs, assessing and monitoring the effectiveness of Information Security capabilities and related programs to reduce overall risk exposure.

Key deliverables

Strategy Management

Development and execution of the IT Security Program strategic vision and roadmap.
Act as the principal aide to the CISO to coordinate activities in support of cybersecurity priorities, including the development of the Information Security Office (ISO) strategic roadmaps.
Assist the CISO in defining current and future ISO organizational structures, ensuring capability requirements are understood in alignment with the ISO strategic roadmap and support expectations of the business.
Monitor ongoing alignment with the ISO strategic roadmap, providing detailed reporting of progress, and strategies for addressing risks that may impact delivery to established timelines.
Quantify the benefits of ISO initiatives and the return on investment as defined in the ISO strategic roadmap.
Develop and implement a comprehensive set of security metrics to clearly articulate CWBs current security posture and identify trends, patterns, and opportunities for operational adjustment or amendment to the existing control environment.
Partner with the Office of the CIO to ensure key strategic elements of the Information Security roadmap are incorporated into the broader Information Security strategic plan and provide timely CISO metrics for inclusion in broader CIO reporting.
Stay current with the latest developments in information security and ensure that the organization is compliant with relevant laws, regulations, and industry standards.

Financial Management

Assist the CISO in the development and ongoing management of the Information Security budget, ensuring adequate resource allocation and the successful delivery of planned initiatives.
Collaborate with procurement teams, and liaise with vendor partners, to ensure that security products and services are procured within budget constraints.
Prepares detailed operating and financial reports in support of providing insight into, and alignment with, budgetary expectations.
Identify opportunities to reduce ongoing operational expense through efficiency gains and service consolidation.

Development and Sustainment of Key Security Programs

Data Protection

Responsible for the development, implementation, and support of an enterprise-wide Data Protection Program including the creation of a multi-year strategic roadmap.
Develop, implement, and establish data protection policies and procedures to ensure the confidentiality, integrity, and availability of CWB data.
Work with key stakeholders across the organization to understand and identify how sensitive data is being consumed so as to ensure appropriate safeguards are in place to protect it.
Collaborate with Legal and Regulatory Compliance teams to ensure that data protection policies and procedures comply with applicable laws and regulations.

Identity and Access Management

Responsible for the development, implementation, and support of an enterprise-wide Identity and Access Management Program, inclusive of workforce and client identities, and the creation of a multi-year strategic roadmap.
Develop, implement, and establish identity and access management policies and procedures to ensure the trusted oversight of authorized access to CWB resources.
Working with key stakeholders across CWB, establish an enterprise-wide governance program for the purpose of ensuring access to CWB information assets is only permitted to those who require it.

Security Awareness

Responsible for the development, implementation, and support of a comprehensive, enterprise-wide Security Awareness Program, including the creation of a multi-year strategic roadmap.
Working with key stakeholders across CWB, elevate the understanding of key security risks and the expectations CWB has of its employees.

Information Security Risk Management

Accountable for the development, implementation, and ongoing management of a comprehensive security risk and governance framework to ensure that CWB’s information security program is aligned with established risk tolerances, regulatory obligations, and the overall business strategy.
Accountable for the development, implementation, and support of a comprehensive third-party risk management program from the perspective of information security, and in support of the broader enterprise Third Party Risk Management Program.
Maintain a framework that allows for flexible adherence to regulatory requirements as it applies to platform technologies.
Develop and maintain a risk matrix of potential threats to the enterprises existing platform and data.
Works to ensure that information security requirements are included in contracts by liaising with compliance and procurement departments.
Provides clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Leadership

Lead and manage the team in their deliverables and guide them in managing their performance by providing appropriate feedback and counseling.
Define and communicate the vision and goals and the benefits in achieving the strategy and can effectively mentor others to acquire this competency.
Contribute to the development of employees through identifying appropriate learning and development needs.

Core knowledge requirements

Education

Bachelor’s degree in computer science, information systems, information security, or a related field
Relevant industry certifications, such as CISSP, CISM, or CRISC, are preferred.

Professional Experience

10+ years of progressively responsible and diversified experience, in the financial services, technology and / or security industries.
10+ years experience in leading and managing a diverse team of information security professionals.
Experience in the development of short, medium, and long-term strategic plans with demonstrated alignment to broader organizational strategic objectives.
Experience in developing and implementing information security programs and frameworks that comply with regulatory requirements as well as business continuity and disaster recovery programs.
Thorough understanding of financial services regulatory requirements.
Proven ability to lead the management of financial plans and with a focus on achieving efficiencies in cost to the organization.
Experience in the management of large scale, enterprise initiatives with a budget in excess of $1MM.
Experience creating or maturing staff development programs, within or outside cybersecurity.
Experience in project leadership involving cross-functional teams and outside consultants.

Personal Competencies

Innovative thought leader adept at building consensus within a complex, high growth organization while integrating solutions, people, and processes.

Excellent relationship management and influencing skills combined with the ability to align key stakeholders (including executive leadership) towards a common goal, drive results, and facilitate change.
An innovative thought leader adept at building consensus within a complex, high growth organization while integrating solutions, people, and processes.
Proactive, agile, and strategic mindset
Strong leadership qualities, including a calm demeanor, especially under pressure with the ability to successfully manage, and motivate large, and diverse, complex teams of security professionals.

Ability to articulate clear and concise messaging to executive leadership.

Strong business and financial acumen

Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.

Strong conflict resolution skills with the ability to diffuse challenging situations and find common ground.

Excellent communication skills (verbal, written and presentation) between technical, non-technical & Executive level team members. Able to synthesize and explain complex technology terms, in an easily understood, authoritative, and actionable manner.

Change your career trajectory with CWB. Apply today.

Why work with us?

The overwhelming majority of our employees say CWB is a Great Place to Work®

We’re different from the big banks in the way we engage our employees - caring, responsive, and armed with an obsession for growing talent. Our reputation is powered by a people first culture that ensures our employees be and feel heard, promotes inclusivity and diverse viewpoints, and inspires collaboration and innovation.

Our employees love CWB. You’ll love it here too.

Find your

why

at www.CWBcareers.com

As an equitable employer, CWB Financial Group is committed to providing a safe and

inclusive environment

where a diverse workforce thrives. You are welcomed and encouraged to bring your whole self to work. Dignity, respect and equality are non-negotiables. If you require

accommodation

during any part of the recruitment or selection process, please reach out.

Closing Date:

Position closes at 12:01am on the close date identified below.

07/12/2023

CWB Financial Group

New Jobs

Sr. Governance, Risk and Compliance Analyst (job is located in Edmonton, AB)

SAVP, Information Security