Senior Manager Government Security (Hybrid - Canada - Kitchener Office)
Oracle · Toronto, Canada · 4d ago
Job Description
Hybrid position based out of Kitchener Office in Canada.
The Government Security Program Manager is responsible for the security of Oracle’s information systems, personnel, and facilities for all Government of Canada Programmes and shall be the principal security liaison between Oracle and our Government customers. This position is responsible for the management and oversight of compliance with the Public Services and Pocurement Canada (PSPC) Contract Security Program (CSP) and other classified Government program security requirements.
Prior experience as an appointed Company Security Officer, or in an equivalent senior security role within Government or a Defence Industry Prime, is essential.
This is a senior position capable of working closely with government and industry security counterparts, programme management teams, and executives to ensure successful execution of Oracle programme security activities.
The successful applicant will report directly to the Senior Director of International Government Security, and will act as the principal security adviser to the Oracle Canada Executive Leadership team and the Oracle Canada Key Senior Official (KSO).
Responsibilities
Develop, enforce, and maintain security policies and procedures for information systems in accordance with customer and corporate standards.
Manage the security authorisation process to include supporting system owners with accreditation and compliance reviews.
Monitor and manage security controls such as firewalls, access controls, data encryption, and system hardening.
Develop and maintain security and project risk registers. Conduct risk assessment and management to include conducting vulnerability assessments and developing risk mitigation strategies.
Incident response to include investigations, stakeholder communication, and reporting.
Manage and maintain government sponsored personnel security clearances for Oracle personnel, to include:
Initial processing
Briefings
Annual Trainings
Management of reinvestigations and continuous vetting requirements
Debriefings
Monitor secure facility and information system compliance against government accreditation standards.
Conduct internal assurance audits and inspections; manage preparations for, and be the principal point of contact during all security audits by external government and customer security authorities.
Establish and maintain a comprehensive security awareness and training programme; develop and deliver security briefings specifically tailored to the unique requirements of the program.
Assist with administering Oracle’s Insider Threat Awareness Program.
Provide classification management support to programs to include preparation and coordination of Program Classification Guides. Assist in the review of media and documents for classified information.
Oversee visitor and access control program.
Oversee access to classified and sensitive projects, establishing enhanced security controls and maintaining the need-to-know principle. Undertake programme inductions for required employees.
Manage classified asset lifecycle, to include creation, documentation, storage, transfer and destruction in accordance with Government regulations.
Support cross border collaboration and contribute to corporate best practices.
Maintain and administer information management plans for classified infrastructure.
Establish and maintain key stakeholder relationships with Government Security Authorities, Regulatory Bodies and other industry partners.
Position Requirements
Must be fluent in English and at least have a working knowledge of French.
Prior experience in a senior security management role such as a PSPC Contract Security Program appointed Company Security Officer, Information System Security Manager or equivalent and at least 5 years’ experience in the following areas:
Extensive knowledge of the PSPC Contract Security Program and associated controls
Substantial, demonstrable experience of implementing and maintaining Contract Security Program controls within a heavily regulated or classified operating environment.
Possess in-depth knowledge of other applicable security and risk-management standards, including but not limited to ISO 27001, ISO 31000 and NIST 800-53, as well as their application within a Government or Defence Industry environment.
Possess in-depth knowledge of Information Systems Security.
Oracle uses Artificial Intelligence in our recruiting process. Read more about it in our Recruiting Privacy Policy.
Range and benefit information provided in this posting are specific to the stated locations only
CA: Hiring Range in CAD from: $81,700 to $131,700 per annum.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Vacancy Type - Replacement Position