Job Description

 

Hybrid position based out of Kitchener Office in Canada. 

 

The Government Security Program Manager is responsible for the security of Oracle’s information systems, personnel, and facilities for all Government of Canada Programmes and shall be the principal security liaison between Oracle and our Government customers.  This position is responsible for the management and oversight of compliance with the Public Services and Pocurement Canada (PSPC) Contract Security Program (CSP) and other classified Government program security requirements. 

 

Prior experience as an appointed Company Security Officer, or in an equivalent senior security role within Government or a Defence Industry Prime, is essential.

 

This is a senior position capable of working closely with government and industry security counterparts, programme management teams, and executives to ensure successful execution of Oracle programme security activities. 

 

The successful applicant will report directly to the Senior Director of International Government Security, and will act as the principal security adviser to the Oracle Canada Executive Leadership team and the Oracle Canada Key Senior Official (KSO).

Disclaimer:


Oracle uses Artificial Intelligence in our recruiting process. Read more about it in our Recruiting Privacy Policy.

Range and benefit information provided in this posting are specific to the stated locations only

CA: Hiring Range in CAD from: $81,700 to $131,700 per annum.


Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Vacancy Type - Replacement Position

Responsibilities

 

• Develop, enforce, and maintain security policies and procedures for information systems in accordance with customer and corporate standards.

• Manage the security authorisation process to include supporting system owners with accreditation and compliance reviews.

• Monitor and manage security controls such as firewalls, access controls, data encryption, and system hardening.

• Develop and maintain security and project risk registers.  Conduct risk assessment and management to include conducting vulnerability assessments and developing risk mitigation strategies.

• Incident response to include investigations, stakeholder communication, and reporting.

• Manage and maintain government sponsored personnel security clearances for Oracle personnel, to include:

  • Initial processing

    Briefings

    Annual Trainings

    Management of reinvestigations and continuous vetting requirements

    Debriefings

• Monitor secure facility and information system compliance against government accreditation standards.

• Conduct internal assurance audits and inspections; manage preparations for, and be the principal point of contact during all security audits by external government and customer security authorities.

• Establish and maintain a comprehensive security awareness and training programme; develop and deliver security briefings specifically tailored to the unique requirements of the program.

• Assist with administering Oracle’s Insider Threat Awareness Program.

• Provide classification management support to programs to include preparation and coordination of Program Classification Guides.  Assist in the review of media and documents for classified information.

• Oversee visitor and access control program.

• Oversee access to classified and sensitive projects, establishing enhanced security controls and maintaining the need-to-know principle.  Undertake programme inductions for required employees.

• Manage classified asset lifecycle, to include creation, documentation, storage, transfer and destruction in accordance with Government regulations.

• Support cross border collaboration and contribute to corporate best practices.

• Maintain and administer information management plans for classified infrastructure.

• Establish and maintain key stakeholder relationships with Government Security Authorities, Regulatory Bodies and other industry partners.

 

Position Requirements

 

Must be fluent in English and at least have a working knowledge of French.  

 

Prior experience in a senior security management role such as a PSPC Contract Security Program appointed Company Security Officer, Information System Security Manager or equivalent and at least 5 years’ experience in the following areas:

• Extensive knowledge of the PSPC Contract Security Program and associated controls 

• Substantial, demonstrable experience of implementing and maintaining Contract Security Program controls within a heavily regulated or classified operating environment.

• Possess in-depth knowledge of other applicable security and risk-management standards, including but not limited to ISO 27001, ISO 31000 and NIST 800-53, as well as their application within a Government or Defence Industry environment.

• Possess in-depth knowledge of Information Systems Security.

• Demonstrable experience of the implementation and administration of security processes and procedures.
• Establishing and administering classified material control programs, including transfer, transmission, reproduction, destruction, and accountability.
• Extensive experience of managing security incidents, including carrying out internal investigations into security violations and non-compliances and undertaking root cause analysis to establish and remediate security vulnberabilities.
• Administering government sponsored personnel security clearances.
• Management of a government accredited secure facility.
• Delivering security awareness trainings and compliance programs.
• Must hold Canadian Top Secret or Enhanced Top Secret Security Clearance.

Required Education/Skills:

• Bachelor’s (or equivalent) with 5+ years of security experience in support of sensitive host-nation government programmes within Defense Industry.
• Must possess a high level of understanding of government security related policies, procedures, and initiatives.
• Ability to apply the foregoing knowledge of government security requirements in a complex multi-level secure environment to ensure programme compliance.
• Ability to work independently to identify, assess & resolve unique security situations to facilitate contract performance within the bounds of security.
• Highly proficient written and verbal communications skills with emphasis on clear, credible and concise presentation of complex information.
• Must have a professional demeanor, good people skills, ability to communicate effectively, and be able to perform in a dynamic, high-tempo environment.