Team Lead Cyber Security

• Develop and manage delivery of comprehensive cyber security program plan for Rogers Bank
• Lead cyber security governance function for Rogers Bank, coordinating and managing multiple project initiatives, deadlines and deliverables with various stakeholders
• Collaborate and build effective working relationships with colleagues across technology and the business to achieve cyber security objectives
• Communicate compliance and information risks to stakeholders and leadership

• Maintain knowledge of the information security environment, including development of new attacks and threats
• Perform security and control assessments to identify key risks and gaps
• Provide recommendations and communicate mitigation strategies to key stakeholders based on regulatory requirements and industry best practices
• Identify and evaluate technology risks, internal controls to mitigate risks, and related opportunities for continuous control improvement
• Drive audit readiness and provide support for Cyber Security and Privacy audits
• Provide 1st line risk assessments (projects and vendors) as needed
• Develop strategic reporting view of compliance and information risk across key functions for leadership

• Work with key stakeholders to assess changes to regulatory requirements and standards to identify impacts to internal policies and standards
• Utilize technical writing skills to translate regulatory requirements into formal updates to security policies, standards, processes, and controls
• Collaborate with teams cross functionally to publish and socialize updates to policies and standards

• 5+ years of experience in information security, IT audit, or Security Governance, Risk, and Compliance (GRC)
• Working knowledge of technology risk and cybersecurity frameworks (e.g., OSFI, NIST, COBIT, ISF, ISO 27001/27005)
• Experience interpreting regulatory requirements and authoring security controls
• Experience developing and delivering program plans
• Understanding of the cybersecurity threat landscape, including emerging threats, tools, vendors, and best practices
• Demonstrated knowledge of key information security domains (e.g., access controls, vulnerability management, incident management, cloud security, third‑party risk management and governance)
• Strong analytical, research, writing, and communication skills, with ability to produce clear, concise reports and explain technical topics to business stakeholders
• Strong interpersonal and organizational skills, ability to lead initiatives independently, manage priorities under pressure, and collaborate effectively in fast‑paced environments

Rogers Communications