Manager, Physical Security (Information Security)

Manager, Physical Security (Information Security)

Thursday, October 24, 2024

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation or any other category protected by law.

First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at accessibility@firstnational.ca should you need an accommodation at any point in the recruitment process.

We are hiring a Manager, Physical Security (Information Security)!

Reporting To: Manager, Physical Security

Full-Time/Part-Time: Full-time

Posting Date: October 24, 2024

Closing Date: November 15, 2024

Hours of Work: 8:30 a.m. – 5:00 p.m.

Office Location: Toronto, ON

Great location! Steps away from the main public transit station.

What we offer:

Highly competitive compensation package which includes base salary, bonus, benefits, and career advancement opportunities! *Eligibility for benefits is dependent on the terms of employment

The Opportunity:

As a member of the Information Security department, reporting to the Senior Manager (GRC), Information Security, the Manager, Physical Security is responsible to design, implement, manage, and continually improve the Physical Security Program to identify risks and implement necessary controls consistently with the organization's Information Security policies and risk strategy to protect the confidentiality, integrity, and availability of information.

Minimum Skills Required:

• Knowledge of physical security standards and best practices.
• Manage Physical Security Projects and is considered one of the Subject Matter Experts in all facets of Physical Security.
• Review, measure, report and improve controls associated with physical security systems equipment including, but not limited to, Access Control, Intrusion Detection and Video Surveillance systems.
• Knowledge and understanding of current security and risk standards and best practices associated with physical and environmental security controls, particularly ISO 27001.
• Ability to communicate effectively.
• Ability to influence relevant stakeholders within the organization.

How you will contribute:

• Design, implement, manage and continually improve First National’s physical security program, by developing and maintaining physical security policies, standards, and procedures.
• Advise teams within First National in the design and implementation of effective physical security controls to protect First National’s data.
• As a member of the Physical Security Steering Committee, organize and schedule periodic meetings, document, and track action plans to completion.
• Perform periodic Physical Security Threat Risk assessments for all company locations and associated co-location data centers on a periodic basis.
• Develop a prioritized roadmap that outlines the steps and resources needed to remediate the observations to keep the risk within acceptable limits.
• Monitor and perform periodic physical security controls compliance checks to protect sensitive data.
• Monitor compliance of physical security controls associated with security equipment such as Access Control, Intrusion Detection and Video Surveillance systems, at First National sites and data centers.
• Perform periodic access reviews to monitor currency and compliance to principles such as least privilege and RBAC.
• Review regulatory, legal, or compliance requirements related to physical security.
• Support in the development of periodic reports and dashboards as necessary.
• Act as a key figure in the physical security incident response to track occurrence and resolution, with documentation and reporting.
• Orchestrate the physical security incident response process within the department, and work with key stakeholders within the department to respond, resolve and recover from the incident.

Compliance Management:

• Control monitoring and review of internal security risk assessments associated with the physical security program.
• Ensure compliance with relevant regulations and industry standards (specifically, ISO 27001).
• Develop, document, and assess measures, metrics, and internal controls.

The experience you need:

• Bachelor’s degree is required. Graduate degree preferred.
• A minimum of 5 years of prior Physical Security Management experience.
• Certified Protection Professional (CPP) preferred.
• Information Security designation or certification, such as ISO27001, or NIST CSF preferred.
• Foundational experience in developing and maintaining physical security policies, standards, processes, guidelines, procedures, and controls.

Skills and Attributes:

• A proven track record of planning and executing work efforts.
• Strong interpersonal communication, analysis, and writing skills.
• Intermediate presentation and MS Excel skills.
• Able to align management and leadership strategies when working on projects.
• Ability to manage relationships, resolve conflicts and constraints, ensure compliance with ethical and professional standards when managing projects.

Working Environment and Physical Demands Analysis:

• Periods of high volume with tight timelines.
• Long periods of stationary position/sitting.
• Prolonged periods of repetitive movement (i.e. using a keyboard and mouse).
• Long periods of time in viewing a computer screen.
• Multi-tasking may include speaking to customers on a telephone call while looking up information on a computer program.

Competitive Compensation:

• Comprehensive benefits program (i.e., Health Spending Account, Maternity and Parental Leave Top Up).
• Hybrid working environment [select if applicable].
• Extensive training programs to set our employees up for success.
• Modern office environment conducive to collaboration.
• Supportive teamwork culture.
• Opportunities to give back to the communities and work through events focused on a variety of charities.
• Ongoing social events throughout the year.

The team you’ll join:

Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.

First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.

We would like to thank all applicants for their interest in this existing vacancy, but only candidates selected for an interview will be contacted.