Director of Cyber Security

Position Details Office of the Chief Information Officer - Executive Council Reporting to the Assistant Deputy Minister, Infrastructure & Cybersecurity, the Director of Cyber Security - Resilience & Assurance is a senior leadership role within the Cyber Security Office (CSO) of the OCIO. The position is responsible for leading and expanding the existing Communities of Action while providing strategic direction and oversight for the Government of Newfoundland and Labrador's proactive cybersecurity capabilities. These capabilities include threat intelligence, exposure management, cybersecurity awareness, and security validation. The role will build on existing Community of Action programs while establishing and enhancing the proactive cybersecurity functions outlined above. The Director works collaboratively across the Office of the Chief Information Officer, Government departments, public bodies, and external partners to strengthen Government's cybersecurity posture. The high-level responsibilities associated with this role include: Cybersecurity Awareness, Partnerships & Community Engagement Lead Government's cybersecurity awareness and engagement program by enhancing and delivering existing initiatives for the CSO Communities of Action, including education programs, phishing simulations, role-based training, executive awareness, and workforce resilience initiatives. The role also establishes strategic partnerships across Government and the broader public service through cybersecurity councils, communities of practice, outreach activities, and collaborative security events that strengthen knowledge sharing and promote cybersecurity as a shared responsibility. Threat Intelligence Lead Government's threat intelligence capability by establishing processes to identify, assess, analyze, and communicate emerging cyber threats and risks. This function provides actionable intelligence to Government and the Communities of Action to support strategic decision-making, inform cybersecurity priorities, validate defensive capabilities, and strengthen cyber resilience through ongoing assessment of the evolving threat landscape. Exposure Management & Security Validation Provide strategic leadership for Government's enterprise exposure management program through the continuous identification, assessment, prioritization, and reduction of cybersecurity risk across infrastructure, cloud services, applications, identity services, and third-party technologies. This role establishes modern vulnerability management, including offensive and defensive artificial intelligence capabilities, and security validation practices that measure the effectiveness of security controls, validate remediation efforts, and provide independent assurance of Government's cybersecurity posture. Cybersecurity Strategy & Continuous Improvement Work with Executive and Director teams across the OCIO to advance strategic cybersecurity initiatives and ensure the continuous evolution of Government's proactive cybersecurity capabilities across all layers of the OCIO technology environment. This includes capability roadmaps, maturity assessments, performance metrics, organizational improvement initiatives, and strategic planning. The Director identifies emerging trends, recommends future cybersecurity investments, and ensures proactive cybersecurity capabilities evolve in alignment with changing business priorities and the threat landscape. Leadership Provide leadership to a multidisciplinary team of cybersecurity professionals by fostering a collaborative, high-performing culture focused on mentorship, innovation, cross-functional knowledge sharing, and continuous professional development. The Director also promotes strong partnerships across the OCIO to ensure Government maintains an integrated, enterprise-wide cybersecurity capability. Screening Criteria Post-secondary education in Computer Science, Information Technology, Cybersecurity, Business or related discipline (equivalencies will be considered) Senior leadership experience in cybersecurity, information security or enterprise technology Experience developing cybersecurity strategy, governance or enterprise security programs Experience leading teams through organizational change Experience with stakeholder engagement Professional cybersecurity certification (e.g. CISSP, CISM, CRISC, GIAC) (asset) Assessment Criteria Knowledge of Technology Infrastructure areas Ability to collaborate with executive leadership and other stakeholders Ability to effectively prioritize Ability to manage multidisciplinary teams Ability to effectively exchange information Leadership skills Solutions-oriented Conditions of Employment Conditions of Offer Recent and satisfactory Criminal Records Certificate from local police Conditions of Acceptance Willing to work overtime (occasional) Information for Applicants For more information about this opportunity please contact, Shawn Edwards, Assistant Deputy Minister, Infrastructure and Cybersecurity at [email protected] or (709) 702-3950.

Lead the Government of Newfoundland and Labrador's proactive cybersecurity capabilities, including threat intelligence, exposure management, and security validation. Provide strategic direction and leadership to a multidisciplinary team to strengthen the overall cybersecurity posture across government departments.

Requires post-secondary education in Computer Science, IT, or a related field along with senior leadership experience in cybersecurity or enterprise technology. Professional certifications such as CISSP, CISM, or CRISC are considered an asset.

• LeadershipPreferred

Identified from the job description. Confirm important requirements above.

• Cybersecurity Strategy
• Threat Intelligence
• Exposure Management
• Security Validation
• Stakeholder Engagement
• Leadership
• Vulnerability Management
• Risk Assessment
• Cybersecurity Awareness
• Governance
• Organizational Change Management
• Strategic Planning
• Mentorship
• Performance Metrics
• Incident Response
• Cloud Security

• Security & Safety
• Technology
• Management & Leadership
• Government & Public Sector
• Data & Analytics

Minimum education

Professional degree

Minimum experience

10+ years

Apply by

Sep 23, 2026

Posting language

English

Working hours

40 hours per week

Seniority

Not Applicable