Cybersecurity Lead
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Discovery is an Americas-focused precious metals company with a diversified portfolio. Our Mission is to deliver sustainable value for all stakeholders by operating in a safe and responsible manner and having a positive impact on local communities. Discovery has an experienced team, dedicated to being a highly profitable producer of precious metals that generates superior returns, delivers substantial social-economic benefits and meets the highest environmental standards.
Location:Corporate
Schedule:5x2
The Position
The Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments . The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).
Key Responsibilities
Cybersecurity Operations and Risk Management
Competitive total compensation package including:
This posting is for an existing vacancy at Discovery Mining.
We thank all candidates in advance. Please note, only those candidates selected for an interview will be contacted.
Discovery Mining welcomes applications from all qualified individuals, including, but not limited to women, persons with disabilities, visible minorities (racialized), aboriginal (Indigenous) persons and persons of any gender identity and sexual orientation. Discovery is committed to a positive, supportive, and inclusive environment.
Please note that we use artificial intelligence tools to screen applications and assess qualifications and selected candidates will be contacted by a human for an interview.
Location:Corporate
Schedule:5x2
The Position
The Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments . The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).
Key Responsibilities
Cybersecurity Operations and Risk Management
- Build, implement, and continuously improve cybersecurity policies, standards, and controls.
- Identify, assess, and mitigate cybersecurity risks across IT and OT environments.
- Protect sensitive business information and critical operational systems and mitigate cybersecurity risks.
- Manage security controls including identity and access management, network security, endpoint protection, vulnerability management, and encryption.
- Conduct security assessments and recommend remediation strategies to address identified vulnerabilities.
- Oversee the relationship with the MSSP and ensure effective monitoring and threat detection.
- Ensure the Company's infrastructure is equipped with the appropriate sensors, agents, and log sources, and that the relevant security data and metadata flow reliably from IT and OT environments to the MSSP's tooling platforms.
- Act as the escalation point for cybersecurity incidents and investigations.
- Lead incident response activities including investigation, containment, recovery, and post-incident reviews.
- Coordinate internal and external resources during cybersecurity incidents and ensure timely communication with stakeholders.
- Maintain incident response plans, recovery procedures, and cybersecurity support for business continuity initiatives.
- Oversee the security of industrial control systems, communications infrastructure, and OT environments, aligned to IEC 62443.
- Partner with Operations, Engineering, and OT teams to mitigate cyber risks affecting safety, productivity, and operational continuity.
- Evaluate cybersecurity risks associated with remote sites, field operations, third-party connections, and operational technologies.
- Maintain appropriate security controls and network segregation between IT and OT environments.
- Develop and maintain cybersecurity policies, standards, and controls aligned with industry best practices, regulatory requirements and recognized frameworks.
- Support audits, assessments, and remediation activities to ensure ongoing compliance and risk reduction.
- Monitor cybersecurity metrics and provide reporting on security posture, risks, and improvement initiatives.
- Contribute to business continuity and disaster recovery planning from a cybersecurity perspective.
- Maintain documentation related to cybersecurity controls, incidents, risk assessments, and compliance activities.
- Serve as the primary cybersecurity advisor to business, operational, and technology stakeholders.
- Collaborate with internal teams and external partners to support secure project delivery and technology implementations.
- Promote cybersecurity awareness and training across the organization.
- Support vendor and third-party security reviews and assessments.
- Stay informed on emerging cybersecurity threats, trends, and technologies and communicate relevant impacts to stakeholders.
- College diploma or university degree in Computer Science, Information Security, Information Technology, or a related field.
- Minimum 10 years of progressive cybersecurity experience, including experience building or significantly maturing a security program, with responsibility for security operations, risk management, incident response, and infrastructure security.
- Demonstrated ability to drive a security program: planning, prioritizing, coordinating internal staff and external partners, and communicating risk and progress to senior management.
- Strong understanding of cybersecurity frameworks, standards, and best practices, including the NIST Cybersecurity Framework (CSF) 2.0, IEC 62443, and MITRE ATT&CK.
- Experience securing enterprise networks, cloud services, endpoints, and operational technology environments.
- Hands-on experience with security monitoring, vulnerability management, identity and access management, and incident response.
- Experience working with cybersecurity tools and technologies such as SIEM, endpoint protection, vulnerability scanning, and security monitoring platforms.
- Experience working with an MSSP or outsourced SOC, including telemetry and log-source onboarding, escalation workflows, and service management.
- Professional cybersecurity certifications such as CISSP, CISM, GICSP, or IEC 62443 are considered an asset.
- Strong analytical, problem-solving, and communication skills.
- Ability to operate independently while effectively collaborating with technical and business stakeholders.
- Experience supporting cybersecurity within Operational Technology (OT) and Industrial Control System (ICS) environments. Experience in the mining industry is considered a strong asset.
Competitive total compensation package including:
- Health, Dental, Life, AD&D, Disability, Healthcare and Wellness Spending Accounts, Virtual Care and Employee and Family Assistance Program;
- Company contributions and matching into a Defined Contribution Pension Plan; and
- Long Term Incentive Plan and Short Term Incentive Plan;
- Corporate head office located in downtown Toronto, Ontario with periodic travel to operating sites; and
- Attention to work issues in the evening or on weekends may be required.
This posting is for an existing vacancy at Discovery Mining.
We thank all candidates in advance. Please note, only those candidates selected for an interview will be contacted.
Discovery Mining welcomes applications from all qualified individuals, including, but not limited to women, persons with disabilities, visible minorities (racialized), aboriginal (Indigenous) persons and persons of any gender identity and sexual orientation. Discovery is committed to a positive, supportive, and inclusive environment.
Please note that we use artificial intelligence tools to screen applications and assess qualifications and selected candidates will be contacted by a human for an interview.
More about this job
Responsibilities
Own and continuously improve the company’s cybersecurity program, protecting corporate information systems, operational technology, and digital assets through security controls, risk management, monitoring, and incident response. Lead MSSP coordination, OT and mining infrastructure security, compliance and audit activities, stakeholder advising, and cybersecurity awareness.
Requirements
Requires a college diploma or university degree in computer science, information security, information technology, or a related field, plus at least 10 years of progressive cybersecurity experience. Candidates should have experience building security programs and securing enterprise, cloud, and OT/ICS environments, with knowledge of NIST CSF 2.0, IEC 62443, and MITRE ATT&CK; certifications such as CISSP, CISM, GICSP, or IEC 62443 are an asset.
Skills
- Cybersecurity Program Management
- Cybersecurity Risk Management
- Incident Response
- Security Operations
- Operational Technology Security
- Industrial Control Systems Security
- Identity and Access Management
- Network Security
- Endpoint Protection
- Vulnerability Management
- Security Monitoring
- SIEM
- MSSP Management
- NIST Cybersecurity Framework
- IEC 62443
- MITRE ATT&CK
Benefits
- Health Insurance
- Dental Insurance
- Life Insurance
- Accidental Death and Dismemberment Insurance
- Disability Insurance
- Healthcare and Wellness Spending Accounts
- Virtual Care
- Employee and Family Assistance Program
- Long-Term Incentive Plan
- Short-Term Incentive Plan
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
Keywords
- Cybersecurity
- Operational Technology
- Industrial Control Systems
- Mining Infrastructure
- NIST Cybersecurity Framework 2.0
- IEC 62443
- MITRE ATT&CK
- SIEM
- Endpoint Protection
- Vulnerability Scanning
- Identity and Access Management
- Network Security
- Encryption
- Security Monitoring
- Managed Security Service Provider
- Telemetry
- Log-Source Onboarding
- Incident Response
- Risk Management
- Business Continuity
- Disaster Recovery
- Security Audits
- CISSP
- CISM
- GICSP
- Cloud Security
- Third-Party Security Assessments
- Security Awareness Training
- Network Segmentation