Cybersecurity Director

Job Type:

People are at the heart of our success. Our culture encourages collaboration, transparency, and accountability to generate value and achieve sustainable results. Being part of the team means committing to an environment where everyone’s impact truly matters.

At Agropur, every role directly contributes to key outcomes. Performance is measured by impact and value created—not by the number of actions taken.

The Cybersecurity Director is a leadership position responsible for developing and implementing comprehensive cybersecurity and information security strategies and programs across the organization. The incumbent is accountable for safeguarding the confidentiality, integrity, and availability of the organization’s information assets, systems, data, and networks.

Key responsibilities include managing day-to-day cybersecurity operations, leading a team of security professionals, overseeing the design and implementation of security controls, collaborating with various stakeholders, providing guidance to leadership and employees on security-related matters, and ensuring compliance with applicable laws, regulations, and industry best practices.

An environment that enables you to focus on what truly matters:

• Recognition of years of service for vacation calculation;
• Flexible remote work options;
• Flexible group insurance plan including telemedicine services;
• Employee assistance program;
• Opportunities to invest in yourself (career development, etc.);
• Annual bonus;
• Pension plan with company contributions;
• Salary scale 006: $138 900 to $173 600 (Base salary will be determined based on your academic background, experience, training, and skills related to the position.)

Your role in achieving results:

• Develop and implement an information security and cybersecurity strategy: Develop a comprehensive information security and cybersecurity strategy and architecture aligned with the organization's goals and objectives. Define and implement policies, procedures, controls, and guidelines to protect the organization’s information assets.
• Lead the Information Security and Cybersecurity Team: Manage a team of information security and cybersecurity professionals by providing leadership, coaching, support, and fostering a culture of security awareness. Ensure the team has the necessary resources to effectively carry out its responsibilities and achieve its objectives.
• Risk Management: Identify and assess potential security risks and vulnerabilities across the organization’s information systems, data, and networks. Develop and implement risk mitigation strategies and controls to minimize security incidents and breaches. Coordinate response efforts and recommend corrective actions. Provide risk-related guidance for IT projects, including the assessment and recommendation of technical controls.
• Security Operations: Oversee day-to-day security operations, including monitoring and incident response activities. Collaborate with internal teams and external vendors to detect, analyze, and respond promptly to security incidents. Develop and implement incident response plans.
• Compliance and Governance: Ensure compliance with applicable information security laws, regulations, and industry standards. Stay up to date on emerging threats and security technologies to continually adapt and strengthen the organization’s security posture.
• Security Awareness and Training: Promote a culture of security awareness among employees. Develop, maintain, and deliver training programs to educate employees on information security best practices, guidelines, policies, and procedures. Assess emerging cybersecurity threats and IT trends and develop effective security controls.
• Third-Party Security Management: Assess the security posture of third-party service providers. Develop and manage vendor relationships to ensure their security controls meet organizational requirements. Likewise, ensure the organization’s internal security standards align with industry best practices and customer expectations, including those of Agropur’s clients.
• Incident Response and Digital Forensics: Lead investigations into security incidents, perform forensic analyses, and oversee incident response activities. Coordinate with legal counsel, law enforcement agencies, and other relevant stakeholders as required.
• Security Audits and Assessments: Coordinate and participate in internal and external security audits and assessments. Work closely with auditors to ensure compliance with audit requirements and address any identified security gaps or deficiencies.
• Security Governance and Reporting: Define and report on information security metrics. Prepare and present regular reports to senior leadership and stakeholders regarding the organization’s security posture, incidents, and ongoing initiatives. Provide recommendations for continuous improvement based on industry trends and emerging threats.
• People Management Responsibilities.

What we are looking for to deliver these results:

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field required.
• An equivalent combination of education and/or experience may be considered.
• Minimum of ten (10) years of experience in the Information Technology industry required.
• Minimum of five (5) years of experience leading an Information Security team required.
• Experience in industrial/manufacturing environments is considered an asset.
• Bilingualism in French and English, both spoken and written, is required.
• Strong leadership skills, with the ability to develop and communicate program objectives, inspire and motivate staff, and maintain alignment with the organization’s strategy.
• Excellent verbal and written communication skills, including the ability to articulate and “sell” program goals and objectives to business stakeholders as well as technical leaders.
• Proven experience and strong influencing and negotiation skills in an environment where resources are highly competitive.
• Excellent analytical, strategic planning, and execution capabilities.
• Ability to develop and implement programs while balancing financial constraints and available resources.
• Experience with at least one project/program management methodology (e.g., PMBOK).
• Demonstrated experience managing large-scale, complex Information Security projects and programs.

A role for those who want to make a real impact and contribute to measurable and sustainable results.

Agropur welcomes people from all backgrounds and origins. We are proud to be an employer with a diverse community and are committed to providing a respectful and inclusive experience for all employees and applicants. We will work with candidates who request accommodation. Please note that an adequate knowledge of French is required for positions in Quebec. Agropur uses artificial intelligence technology to assist our recruiters in screening, assessing, or selecting applicants for this position.

In this text, the use of the masculine gender to designate persons is intended only to lighten the text.