Chief Information Security Officer About the Organization

Canada Mortgage and Housing Corporation (CMHC) exists for a single reason: to make housing affordable for everyone in . We’re mobilizing the expertise and energy of governments, non-profits, lenders, developers, social entrepreneurs and co-ops to create the future of housing. At CMHC, we believe that everyone in Canada should have a place to call home.

CMHC has a long history of adapting to meet the needs of Canadians, and in recent years, we have made huge strides in modernizing our workforce and our culture so that we don’t just keep up with change – we drive it. Some exciting examples of this include our Technology and Business Transformation program, Future of Work program, and our Results-Only Work Environment™ (ROWE™).

Experience a Results-Only Work Environment™ (ROWE™)

At CMHC, we trust you to get the job done. We’ve shifted from managing people to managing work. Each employee is 100% autonomous and 100% accountable. You can choose where you need to be and when you need to be there to meet your objectives. You’re in control of your time and are trusted to make the right decisions.

Canada Mortgage and Housing Corporation 1 About the Role

We’re constantly evolving to build an inclusive housing system through research, design, innovation and partnerships. This position requires a visionary leader with sound knowledge of business management and security techniques and technologies covering the corporate infrastructure as well as the broader digital ecosystem. You will build and promote a strong culture of IT risk and security management, monitor and control deficiencies and compliance, and develop IT operating procedures and internal controls. You will have a strong enterprise-wide mindset that places IT security at the forefront of its strategy and operations and provide direction and oversight to service partners regarding IT security. You will take a strategic approach and consider industry best practice, the CMHC specific context as well as the external threat environment in order to make decisions and develop the appropriate investment and position in security. You will also make broad decisions in a context in which the negative impact of poor decisions could be significant for CMHC, leading to severe operational, financial and reputational impact. This will help us make housing affordable for everyone in Canada.

Specific responsibilities include:

• Supports CMHC’s three lines of defense, and is accountable for the model’s 1b responsibilities. Oversees IT security, including ongoing monitoring and intelligence gathering, identification and management of security events/incidents, leading security projects and planning, setting cyber security objectives, and ensuring that security training and communications are provided to CHMC staff and partners. • Ensures that the IT organization and its services are compliant with relevant regulatory, legal and policy requirements (including but not limited to OSFI requirements, ISO 27001 security framework and Government of Canada policies and internal controls). • Ensures that IT operates to consistent quality standards with minimal risk to the business and that opportunities to enhance security in services and processes are identified and actioned across all elements of the IT delivery life cycle, including projects. • Oversees the implementation of technical standards and manages IT controls fundamental to the security (including cyber security) and monitoring of the enterprise. • Leads strategic security planning, including prioritizing defense initiatives and providing oversight to the security management functions. • Establishes security management objectives and plans, including cyber security objectives. • Monitors security management trends and issues, including current and emerging technologies and threats. • Leads the response to identified security management events and incidents. • Interacts and engages with the Management Committee level of the organization in order to understand the environment and make the appropriate recommendations and decisions to protect the Corporation’s interests while ensuring that the business continues to operate effectively.

Canada Mortgage and Housing Corporation 2 About the Role (cont.)

Specific responsibilities include (cont.):

• Develops and communicates security management strategies and plans to executive team, staff, partners, customers and stakeholders. Oversees the analysis, design and deployment of infrastructure security procedures and practices that enhance the integrity and privacy of the organization’s IT. • Ensures that security management training and communications are provided to increase security awareness within CMHC and with partners. • Implements policies and standards consistent with the security management goals of CMHC. • Recommends and implements changes in security management policies and practices in accordance with changes in law, through business relationship managers, the Partner Relationship Management Lead and leadership functions. • Oversees the escalation of IT security weaknesses/threats to senior management and their mitigation in partnership with the associated division or partners. • Works with and provides direction and oversight to service providers / partners regarding security management.

Divisional Leadership and Management:

• Leads the Security division by determining the division’s goals, objectives and priorities, preparing operational and business plans, and developing related policies and standards. • Develops, maintains and enhances processes in their domains, and stays informed of industry leading practices and innovations and foresees their potential applications and implications for CMHC and its external clients. • Manages the division’s financial and human resources. • Directs, in collaboration with their teams, the operations of the division. • Establishes objectives, priorities and plans; identifies human resource requirements; approves the operational allocation of staff; and ensures adherence to corporate human resources, financial and IT policies and standards. • Provides direction and mentorship to assigned managers and team members, as appropriate, towards the effective resolution of various issues. • Oversees the development of a divisional IT Human Resources Plan to meet current and future business needs, including training and development initiatives. • Plans, controls and manages the financial resources for the division, which includes developing budget submissions, preparing cost-benefit analysis reports, administering salary and operating budgets, allocating and reallocating funds between budgets, conducting financial planning/forecasting for short and long-term planning purposes, and authorizing all division expenditures.

Canada Mortgage and Housing Corporation 3 Qualifications

• Undergraduate degree in management information systems, information security, information technology, information systems management or related field or discipline. • Minimum of thirteen years of relevant experience in security management positions with increasing responsibilities. • Minimum of five years of demonstrated experience managing staff. • Demonstrated experience leading and communicating security management strategies for a large organization. • Demonstrated experience identifying IT vulnerabilities and devising solutions for risk improvement. • Demonstrated experience developing, implementing and evaluating security management standards and procedures in multiple platforms. • Knowledge of current trends and best practices in threat and risk assessment and vulnerability assessment. • Knowledge of redundancy and disaster recovery practices. • Superior written and oral communication skills. Ability to deliver a persuasive, clear presentation of ideas that will convince others and gain acceptance of proposals in a variety of settings and styles to a variety of stakeholders (senior management in particular) • Related certifications, such as Global Information Assurance Certification (GIAC), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional (CIPP), Certified Information Systems Auditor (CISA) or System Administration, Networking and Security (SANS) would be considered an asset.

Canada Mortgage and Housing Corporation 4 About the City Ottawa

The City of Ottawa is one of the top 20 cities in the world for quality of living, and the best place to live in Canada, according to Mercer and MoneySense. As the capital of Canada, it is located four hours west of , and just two hours east of . The city houses its own international airport as well as a two VIA rail stations, both of which are accessible by public transportation and by car. It has a population of just under 1 million people, making it one of the largest cities in Canada. About 37% of the Ottawa population is bilingual making it the largest city in Canada with co-official languages (English and French).

Ottawa is the hub for political activity and education in Ontario, home of Canada’s Parliament Buildings as well as four post- secondary institutions – the University of Ottawa (the largest French/English bilingual university in the world), Carleton University, St. Paul’s University College, and Algonquin College. Ottawa schools reflect the diversity of the population. The four school boards – English public, French public, English Roman Catholic and French Roman Catholic – provide many options, including French immersion programs. There are also several private and boarding schools available.

With a state-of-the-art National Arts Centre, over ten museums, and a multitude of historical buildings, Ottawa is the nucleus for art and culture within Canada. The city contains Little Italy and China Town and attracts multiple festivals and concerts throughout the year. During winter, the City also boasts the world’s largest outdoor skating rink, the Rideau Canal Skateway, a UNESCO World Heritage Site which spans 7.8-kilometres and runs through the heart of downtown Ottawa. Across the bridge and fifteen minutes away is also one of Canada’s largest conservation parks, Gatineau Park, featuring unique plants and wildlife, beautiful heritage sites, and an array of trails and facilities for hiking and other outdoor activities.

Canada Mortgage and Housing Corporation 5 About the City Montreal

Montreal is the most populous municipality in the Canadian province of and the second-most populous municipality in Canada as a whole. Previously called Ville-Marie, or “City of Mary”, it is named after , the triple-peaked hill in the heart of the city. The city is centred on the , which took its name from the same source as the city, and a few much smaller peripheral islands, the largest of which is Île Bizard. It has a distinct four-season continental climate with warm to hot summers and cold, snowy winters.

Montreal is the second-largest French-speaking city in the world after Paris. While the city’s official language is French, Montreal is easy to navigate for both English and French speakers. Meeting new people is a great way to expand your knowledge of a second (or third!) language. Over 59% of the population able to speak both English and French making bilingualism a part of Montreal’s strong cultural tradition and adds to the inspiring atmosphere of art, music, literature and innovative technology. From a history of cutting-edge architecture to icons like Leonard Cohen and Mordecai Richler, to storied and the legendary Schwartz’s Deli, the city thrives on art, culture and history. Montreal is known for its festivals which run one after another all summer long, but festival season never really ends, in this city there is always something to celebrate!

Historically the commercial capital of Canada, Montreal is an important centre of commerce, aerospace, transport, finance, pharmaceuticals, technology, design, education, art, culture, tourism, food, fashion, gaming, film and world affairs. It is a truly unique city – safe and clean, vibrant and diverse, with new things to discover around every corner. It’s easy to see why Lonely Planet chose Montreal as the second happiest place in the world and Economist Intelligence Unit. as the 12th most liveable city in the world. With four major universities and 12 smaller colleges located on the island – Montreal is an exciting place to live.

Canada Mortgage and Housing Corporation 6 To Apply

For more details or to further explore this leadership opportunity, please contact:

Philippe Burton • Partner Mike Eagar • Consultant Leaders International Leaders International CIBC Tower, 1155 Rene-Levesque Blvd. West 1 Rideau Street, Suite 700 Suite 2630, Montreal, Quebec H3B 4S5 Ottawa, ON K1N 8S7 Telephone : 514 864-5459 ext. 303 Telephone : 613-788-8255 ext. 102 [email protected] [email protected]

Frédérick K. P. Ranger • Researcher Leaders International CIBC Tower, 1155 Rene-Levesque Blvd. West Suite 2630, Montreal, Quebec H3B 4S5 Telephone : 514 864-5459 ext. 312 [email protected]

Leaders International specializes in the recruitment of Board of Directors, leadership succession and executive level positions. Our global network, Penrhyn International, is a world leader in the executive recruitment industry, with more than 47 offices in over 25 countries on 5 continents.

Canada Mortgage and Housing Corporation 7