Senior Manager Government Security; Hybrid

• KITCHENER, ON, Canada
• TORONTO, ON, Canada
• Canada
• Job Identification 346578
• Job Category Facilities
• Job Type Regular Employee
• Does this position require a security clearance? Yes
• Years 6 to 10+ years
• Applicants Less than 10 applicants
• Additional Info Visa / work permit sponsorship is not available for this position
• Applicants are required to read, write, and speak the following languages English

Hybrid position based out of Kitchener Office in Canada.

The Government Security Program Manager is responsible for the security of Oracle’s information systems, personnel, and facilities for all Government of Canada Programmes and shall be the principal security liaison between Oracle and our Government customers. This position is responsible for the management and oversight of compliance with the Public Services and Pocurement Canada (PSPC) Contract Security Program (CSP) and other classified Government program security requirements.

Prior experience as an appointed Company Security Officer, or in an equivalent senior security role within Government or a Defence Industry Prime, is essential.

This is a senior position capable of working closely with government and industry security counterparts, programme management teams, and executives to ensure successful execution of Oracle programme security activities.

The successful applicant will report directly to the Senior Director of International Government Security, and will act as the principal security adviser to the Oracle Canada Executive Leadership team and the Oracle Canada Key Senior Official (KSO).

• Develop, enforce, and maintain security policies and procedures for information systems in accordance with customer and corporate standards.
• Manage the security authorisation process to include supporting system owners with accreditation and compliance reviews.
• Monitor and manage security controls such as firewalls, access controls, data encryption, and system hardening.
• Develop and maintain security and project risk registers. Conduct risk assessment and management to include conducting vulnerability assessments and developing risk mitigation strategies.
• Incident response to include investigations, stakeholder communication, and reporting.
• Manage and maintain government sponsored personnel security clearances for Oracle personnel, to include:
  • Initial processing
  • Briefings
  • Annual Trainings
  • Management of reinvestigations and continuous vetting requirements
  • Debriefings
• Monitor secure facility and information system compliance against government accreditation standards.
• Conduct internal assurance audits and inspections; manage preparations for, and be the principal point of contact during all security audits by external government and customer security authorities.
• Establish and maintain a comprehensive security awareness and training programme; develop and deliver security briefings specifically tailored to the unique requirements of the program.
• Assist with administering Oracle’s Insider Threat Awareness Program.
• Provide classification management support to programs to include preparation and coordination of Program Classification Guides. Assist in the review of media and documents for classified information.
• Oversee visitor and access control program.
• Oversee access to classified and sensitive projects, establishing enhanced security controls and maintaining the need-to-know principle. Undertake programme inductions for required employees.
• Manage classified asset lifecycle, to include creation, documentation, storage, transfer and destruction in accordance with Government regulations.
• Support cross border collaboration and contribute to corporate best practices.
• Maintain and…