Posted 17 days ago
Cybersecurity Lead
@ Discovery Mining Ltd
Toronto, Ontario
SIGNALS
Overview
Discovery Mining Ltd is hiring a full-time Cybersecurity Lead at its downtown Toronto corporate office, with periodic travel to operating sites. The role owns the company's cybersecurity program across IT and OT environments, including policy, risk management, incident response and oversight of the MSSP. The posting states a 5x2 schedule, with evening or weekend work possibly required, and lists health, dental, pension and incentive benefits.
Responsibilities:
- Build and continuously improve cybersecurity policies and controls
- Lead incident response, investigation and recovery
- Oversee the MSSP relationship and security monitoring
- Secure IT and OT and industrial control environments
- Advise business and operations stakeholders on cyber risk
Requirements summary:
- 10+ years progressive cybersecurity experience
- Experience building or maturing a security program
- Knowledge of NIST CSF 2.0, IEC 62443 and MITRE ATT&CK
- Experience with SIEM and MSSP or outsourced SOC
- OT and ICS security experience; mining is an asset
Tools & skills
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-10-27
- First seen by our source
- 2026-11-14
- Source record updated
- 2026-11-14
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Lead |
| Department | IT |
| Experience | 10+ years |
| Hours per week | 40 (estimated) |
| Schedule | day, evening |
| Travel | ground: minimal |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Encouraged to apply | Women, People with disabilities, Racialized people, Indigenous peoples, 2SLGBTQ+ |
| Education | College diploma (required), Bachelor’s degree (required) |
| Fields of study | Computer Science, Information Security, Information Technology |
| Perks mentioned | Retirement plan, Performance bonus, Wellness |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Discovery Mining Ltd
| Field | Value |
|---|---|
| Open jobs on Jobsy | 1 |
Job description
Discovery is an Americas-focused precious metals company with a diversified portfolio. Our Mission is to deliver sustainable value for all stakeholders by operating in a safe and responsible manner and having a positive impact on local communities. Discovery has an experienced team, dedicated to being a highly profitable producer of precious metals that generates superior returns, delivers substantial social-economic benefits and meets the highest environmental standards.
Location:Corporate
Schedule:5x2
The Position
The Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments . The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).
Key Responsibilities
Cybersecurity Operations and Risk Management
Competitive total compensation package including:
This posting is for an existing vacancy at Discovery Mining.
We thank all candidates in advance. Please note, only those candidates selected for an interview will be contacted.
Discovery Mining welcomes applications from all qualified individuals, including, but not limited to women, persons with disabilities, visible minorities (racialized), aboriginal (Indigenous) persons and persons of any gender identity and sexual orientation. Discovery is committed to a positive, supportive, and inclusive environment.
Please note that we use artificial intelligence tools to screen applications and assess qualifications and selected candidates will be contacted by a human for an interview.
Location:Corporate
Schedule:5x2
The Position
The Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments . The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).
Key Responsibilities
Cybersecurity Operations and Risk Management
- Build, implement, and continuously improve cybersecurity policies, standards, and controls.
- Identify, assess, and mitigate cybersecurity risks across IT and OT environments.
- Protect sensitive business information and critical operational systems and mitigate cybersecurity risks.
- Manage security controls including identity and access management, network security, endpoint protection, vulnerability management, and encryption.
- Conduct security assessments and recommend remediation strategies to address identified vulnerabilities.
- Oversee the relationship with the MSSP and ensure effective monitoring and threat detection.
- Ensure the Company's infrastructure is equipped with the appropriate sensors, agents, and log sources, and that the relevant security data and metadata flow reliably from IT and OT environments to the MSSP's tooling platforms.
- Act as the escalation point for cybersecurity incidents and investigations.
- Lead incident response activities including investigation, containment, recovery, and post-incident reviews.
- Coordinate internal and external resources during cybersecurity incidents and ensure timely communication with stakeholders.
- Maintain incident response plans, recovery procedures, and cybersecurity support for business continuity initiatives.
- Oversee the security of industrial control systems, communications infrastructure, and OT environments, aligned to IEC 62443.
- Partner with Operations, Engineering, and OT teams to mitigate cyber risks affecting safety, productivity, and operational continuity.
- Evaluate cybersecurity risks associated with remote sites, field operations, third-party connections, and operational technologies.
- Maintain appropriate security controls and network segregation between IT and OT environments.
- Develop and maintain cybersecurity policies, standards, and controls aligned with industry best practices, regulatory requirements and recognized frameworks.
- Support audits, assessments, and remediation activities to ensure ongoing compliance and risk reduction.
- Monitor cybersecurity metrics and provide reporting on security posture, risks, and improvement initiatives.
- Contribute to business continuity and disaster recovery planning from a cybersecurity perspective.
- Maintain documentation related to cybersecurity controls, incidents, risk assessments, and compliance activities.
- Serve as the primary cybersecurity advisor to business, operational, and technology stakeholders.
- Collaborate with internal teams and external partners to support secure project delivery and technology implementations.
- Promote cybersecurity awareness and training across the organization.
- Support vendor and third-party security reviews and assessments.
- Stay informed on emerging cybersecurity threats, trends, and technologies and communicate relevant impacts to stakeholders.
- College diploma or university degree in Computer Science, Information Security, Information Technology, or a related field.
- Minimum 10 years of progressive cybersecurity experience, including experience building or significantly maturing a security program, with responsibility for security operations, risk management, incident response, and infrastructure security.
- Demonstrated ability to drive a security program: planning, prioritizing, coordinating internal staff and external partners, and communicating risk and progress to senior management.
- Strong understanding of cybersecurity frameworks, standards, and best practices, including the NIST Cybersecurity Framework (CSF) 2.0, IEC 62443, and MITRE ATT&CK.
- Experience securing enterprise networks, cloud services, endpoints, and operational technology environments.
- Hands-on experience with security monitoring, vulnerability management, identity and access management, and incident response.
- Experience working with cybersecurity tools and technologies such as SIEM, endpoint protection, vulnerability scanning, and security monitoring platforms.
- Experience working with an MSSP or outsourced SOC, including telemetry and log-source onboarding, escalation workflows, and service management.
- Professional cybersecurity certifications such as CISSP, CISM, GICSP, or IEC 62443 are considered an asset.
- Strong analytical, problem-solving, and communication skills.
- Ability to operate independently while effectively collaborating with technical and business stakeholders.
- Experience supporting cybersecurity within Operational Technology (OT) and Industrial Control System (ICS) environments. Experience in the mining industry is considered a strong asset.
Competitive total compensation package including:
- Health, Dental, Life, AD&D, Disability, Healthcare and Wellness Spending Accounts, Virtual Care and Employee and Family Assistance Program;
- Company contributions and matching into a Defined Contribution Pension Plan; and
- Long Term Incentive Plan and Short Term Incentive Plan;
- Corporate head office located in downtown Toronto, Ontario with periodic travel to operating sites; and
- Attention to work issues in the evening or on weekends may be required.
This posting is for an existing vacancy at Discovery Mining.
We thank all candidates in advance. Please note, only those candidates selected for an interview will be contacted.
Discovery Mining welcomes applications from all qualified individuals, including, but not limited to women, persons with disabilities, visible minorities (racialized), aboriginal (Indigenous) persons and persons of any gender identity and sexual orientation. Discovery is committed to a positive, supportive, and inclusive environment.
Please note that we use artificial intelligence tools to screen applications and assess qualifications and selected candidates will be contacted by a human for an interview.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.