Manager, Physical Security (Information Security)

Manager, Physical Security (Information Security)

Friday, December 6, 2024

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation or any other category protected by law.

First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at accessibility@firstnational.ca should you need an accommodation at any point in the recruitment process.

We are hiring a Manager, Physical Security (Information Security)!

Reporting To:

Manager, Physical Security

Full-Time/Part- Time:

Full-time

Posting Date:

December 6, 2024

Closing Date:

December 20, 2024

Hours of Work:

8:30 a.m. – 5:00 p.m.

Office Location:

Toronto, ON

Great location! Steps away from the main public transit station.

The Opportunity:

As a member of the Information Security department, reporting to the Senior Manager (GRC), Information Security, the Manager, Physical Security is responsible for designing, implementing, managing, and continually improving the Physical Security Program to identify risks and implement necessary controls consistent with the organization's Information Security policies and risk strategy to protect the confidentiality, integrity, and availability of information.

Minimum Skills Required:

• Knowledge of physical security standards and best practices.
• Manage Physical Security Projects and is considered one of the Subject Matter Experts in all facets of Physical Security.
• Review, measure, report, and improve controls associated with physical security systems equipment including, but not limited to, Access Control, Intrusion Detection, and Video Surveillance systems.
• Knowledge and understanding of current security and risk standards and best practices associated with physical and environmental security controls, particularly ISO 27001.
• Ability to communicate effectively.
• Ability to influence relevant stakeholders within the organization.

How you will contribute:

• Design, implement, manage, and continually improve First National’s physical security program, by developing and maintaining physical security policies, standards, and procedures.
• Advise teams within First National in the design and implementation of effective physical security controls to protect First National’s data.
• Organize and schedule periodic meetings for the Physical Security Steering Committee, document, and track action plans to completion.
• Perform periodic Physical Security Threat Risk assessments for all company locations and associated co-location data centers.
• Develop a prioritized roadmap that outlines the steps and resources needed to remediate observations to keep risk within acceptable limits.
• Monitor and perform periodic physical security controls compliance checks to protect sensitive data.
• Monitor compliance of physical security controls associated with security equipment at First National sites and data centers.
• Perform periodic access reviews to monitor currency and compliance with principles such as least privilege and RBAC.
• Review regulatory, legal, or compliance requirements related to physical security.
• Support in the development of periodic reports and dashboards as necessary.
• Act as a key figure in the physical security incident response to track occurrences and resolutions, with documentation and reporting.
• Orchestrate the physical security incident response process within the department, and work with key stakeholders to respond, resolve, and recover from incidents.

Compliance Management:

• Control monitoring and review of internal security risk assessments associated with the physical security program.
• Ensure compliance with relevant regulations and industry standards (specifically, ISO 27001).
• Develop, document, and assess measures, metrics, and internal controls.

The experience you need:

• Bachelor’s degree is required. Graduate degree preferred.
• A minimum of 5 years of prior Physical Security Management experience.
• Certified Protection Professional (CPP) preferred.
• Information Security designation or certification, such as ISO27001, or NIST CSF preferred.
• Foundational experience in developing and maintaining physical security policies, standards, processes, guidelines, procedures, and controls.

Skills and Attributes:

• A proven track record of planning and executing work efforts.
• Strong interpersonal communication, analysis, and writing skills.
• Intermediate presentation and MS Excel skills.
• Able to align management and leadership strategies when working on projects.
• Ability to manage relationships, resolve conflicts and constraints, ensure compliance with ethical and professional standards when managing projects.

Working Environment and Physical Demands:

• Periods of high volume with tight timelines.
• Long periods of stationary position/sitting.
• Prolonged periods of repetitive movement (i.e. using a keyboard and mouse).
• Long periods of time in viewing a computer screen.
• Multi-tasking may include speaking to customers on a telephone call while looking up information on a computer program.

The team you’ll join:

Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.

First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.

We would like to thank all applicants for their interest in this existing vacancy, but only candidates selected for an interview will be contacted.