Senior Manager Government Security (Hybrid Canada Kitchener Office)

Job Description

Hybrid position based out of Kitchener Office in Canada.

The Government Security Program Manager is responsible for the security of Oracles information systems personnel and facilities for all Government of Canada Programmes and shall be the principal security liaison between Oracle and our Government customers. This position is responsible for the management and oversight of compliance with the Public Services and Pocurement Canada (PSPC) Contract Security Program (CSP) and other classified Government program security requirements.

Prior experience as an appointed Company Security Officer or in an equivalent senior security role within Government or a Defence Industry Prime is essential.

This is a senior position capable of working closely with government and industry security counterparts programme management teams and executives to ensure successful execution of Oracle programme security activities.

The successful applicant will report directly to the Senior Director of International Government Security and will act as the principal security adviser to the Oracle Canada Executive Leadership team and the Oracle Canada Key Senior Official (KSO).

Responsibilities

• Develop enforce and maintain security policies and procedures for information systems in accordance with customer and corporate standards.

• Manage the security authorisation process to includesupporting system owners with accreditation and compliance reviews.

• Monitor and manage security controls such as firewalls access controls data encryption and system hardening.

• Develop and maintain security and project risk registers. Conduct risk assessment and management to include conducting vulnerability assessments and developing risk mitigation strategies.

• Incident response to include investigations stakeholder communication and reporting.

• Manage and maintain government sponsored personnel security clearances for Oracle personnel to include:

• Initial processing

  • Briefings

  • Annual Trainings

  • Management of reinvestigations and continuous vetting requirements

  • Debriefings

• Monitor secure facility and information system compliance against government accreditation standards.

• Conduct internal assurance audits and inspections; manage preparations for and be the principal point of contact during all security audits by external government and customer security authorities.

• Establish and maintain a comprehensive security awareness and training programme; develop and deliver security briefings specifically tailored to the unique requirements of the program.

• Assist with administering Oracles Insider Threat Awareness Program.

• Provide classification management support to programs to include preparation and coordination of Program Classification Guides. Assist in the review of media and documents for classified information.

• Oversee visitor and access control program.

• Oversee access to classified and sensitive projects establishing enhanced security controls and maintaining the need-to-know principle. Undertake programme inductions for required employees.

• Manage classified asset lifecycle to include creation documentation storage transfer and destruction in accordance with Government regulations.

• Support cross border collaboration and contribute to corporate best practices.

• Maintain and administer information management plans for classified infrastructure.

• Establish and maintain key stakeholder relationships with Government Security Authorities Regulatory Bodies and other industry partners.

Position Requirements

Must be fluent in English and at least have a working knowledge of French.

Prior experience in a senior security management role such as a PSPC Contract Security Program appointed Company Security Officer InformationSystem Security Manager or equivalent and atleast 5 years experience in the following areas:

• Extensive knowledge of the PSPC Contract Security Program and associated controls

• Substantial demonstrable experience of implementing and maintaining Contract Security Program controls within a heavily regulated or classified operating environment.

• Possess in-depth knowledge of other applicable security and risk-management standards including but not limited to ISO 27001 ISO 31000 and NIST 800-53 as well as their application within a Government or Defence Industry environment.

• Possess in-depth knowledge of Information Systems Security.