Salary Range: $143,969-$206,956/year. The starting salary for this position would be determined with consideration of the successful candidate’s relevant education and experience, and would be in alignment with the provincial compensation reference plan. Salary will be prorated accordingly for part time roles.

Job Summary:

In accordance with the Purpose, Vision, Values and Coast Salish Teachings, and strategic directions of PHSA, safety, including both patient and employee safety, is a priority and a responsibility shared by everyone at PHSA. As such, the requirement to continuously improve quality and safety is inherent in all aspects of this position.

The Provincial Health Services Authority (PHSA) plans, manages, and evaluates selected specialty and province-wide health care services across BC, working with the geographic health authorities to deliver technology solutions that improve the health of people living in BC. PHSA embodies values that reflect a commitment to excellence.  

Reporting to the Senior Executive Director, Security for Provincial Digital and Health Information Systems (PDHIS), the Director acts as an interface between senior executive leadership and governance-based activities, and the tactical work of technology-focused analysts, engineers, and managers delivering security services to PHSA, Vancouver Coastal Health (VCH), Providence Health Care (PHC), Fraser Health Authority (FHA), in addition to security services made available to other regional health organizations.

The Director provides reporting to the Senior Executive Director, Vancouver Coastal Health Authority, PHSA, and Providence Health Care (VPP) risk management programs and PDHIS technology leads. The Director develops and implements long-term and short-term security strategies, policy developments, and operational requirements, including evaluation of services and capabilities, in relation to security strategies.  The Director collaborates with other provincial security leaders within BC, and represents PHSA, VCH, and PHC Cyber Security operations on provincial security committees, enabling a consistent and strategic approach to applying security controls in support of to enable the overall strategic directions and organizational goals.

The Director manages the definition, supervision, and sustainment of a wide variety of security strategies; makes critical decisions based on many competing factors and views of vested parties; proactively engages and provides direction or advice; and leads a team of professional experts in the delivery of services and advice. The Director is accountable for developing and managing an operating budget, allocating and monitoring resources, as well as all portfolio staff including hiring, termination, and performance management.  

The Director oversees their team’s operations for the entire VPP and Fraser Health Authorities, and for certain systems on behalf of the Ministry of Health (MoH) and services sector wide. This large and complex mandate requires an experienced Cyber Security professional to lead fast-paced teams of professionals and manage executive reporting.

 

Duties/Accountabilities:

• Negotiates and facilities consensus both internally across PDHIS and PHSA and externally including VCH, PHC, regional Health Organizations, MoH, as well as vendors, suppliers, and contractors, thereby managing the intersections of a complex mandate with various on-going initiatives.
• Implements and leads the effective tactical execution of the entire team’s strategic and capability roadmap, in consultation with organizational leadership.  
• Promotes effective relationships across VPP organizations, FHA, and various internal and external groups and partner organizations including the MoH and other regional health authorities, by engaging vested parties.
• Partners with other business and Cyber Security leaders to direct PHSA’s strategy, ensure directional alignment and drive continual improvement.
• Develops and maintains the vision and service plan that supports the goals and strategies of PHSA, and other partner organizations served.
• Oversees the team’s operations and cyber risk reporting mandates to key vested parties.
• Administers the team’s delivery of periodic security audits to provide assurance for the security of systems and data.
• Develops and manages the operating budget, allocates resources, and supports the annual capital planning process. Monitors budget performance, planning and adjusting operations-and/or-staffing to meet projections and annual targets, approves expenditures and prepares summaries for fiscal reporting.  
• Oversees and approves budget for direct reports.
• Manages and advances Cyber Security standards and policies to ensure continual effectiveness and alignment with relevant and emerging best practices.
• Ensures effective programs are in place to deliver and maintain a high level of security awareness among staff at all levels.
• Executes periodic security audits to provide assurance for the security of systems and data and ensures that the risks associated with security audit findings are adequately tracked from identification through remediation.
  
  

Qualifications:

• A level of education, training, and experience equivalent to a Master’s degree in Computing Science or related discipline and at least ten (10) years of recent, progressive experience in information security management roles.
• Excellent communication skills including the ability to facilitate, negotiate, and persuade others.
• Ability to respond to vested parties' needs supported by an acute awareness of actions' impact.
• Demonstrated ability to problem-solve with a global perspective in order to incorporate the organization’s systems and strategies when developing viable solutions to problems.
• Hold a valid CISSP, CISM or similar certification.
• Be results-oriented with highly developed leadership skills.
• Ability to supervise, lead and mentor staff.
• Ability to establish courses of action for self and others that are results oriented.
• Commitment to the value of continuous learning.
• Ability to deal effectively with all levels of staff.
• Ability to manage a technically complex and fast-changing environment.
• Working knowledge of security frameworks such as NIST and CIS.
• Experience leading Cyber Security functions within a large and complex organization; relevant domains may include security operations, threat intelligence and monitoring, vulnerability management, governance and risk, compliance, security assessment and advisory, or security architecture.
• Experience leading or performing Cyber Security assessments and familiarity with formal audit processes.