Lead, Cyber Security

Position Summary

The Cybersecurity Lead is responsible for shaping and advancing De Havilland's cybersecurity program across enterprise IT and operational technology environments. This role combines enterprise security architecture, operational security leadership, governance, risk management, and hands-on engineering to improve cyber resilience and reduce business risk.

The Cybersecurity Lead provides technical and functional direction to cybersecurity analysts, specialists, architects, and service partners. The role coordinates work, mentors team members, sets technical standards, and supports capability growth, while formal people-management activities remain with the accountable manager.

Working closely with IT leadership, infrastructure, engineering, operations, and business stakeholders, the Cybersecurity Lead translates risk into practical, secure, and resilient technology outcomes aligned with DHC's business priorities.

Key Responsibilities

Cybersecurity Strategy and Program Leadership

Develop and execute DHC's cybersecurity roadmap, priorities, and maturity plan in alignment with business objectives and risk tolerance.

Act as a trusted cybersecurity advisor to IT leadership and key business stakeholders, translating technical risk into business impact and recommended action.

Contribute to IT strategy, investment planning, business cases, budgets, and technology roadmaps.

Lead cybersecurity governance discussions and contribute to enterprise architecture, risk, and audit forums.

Define meaningful cybersecurity metrics and provide regular, actionable reporting on posture, risks, progress, and priorities.

Technical Leadership and Architecture

Define and maintain secure, scalable, and resilient security architectures across cloud, hybrid, network, endpoint, identity, application, and OT environments.

Embed secure-by-design requirements into infrastructure, cloud, application, data, and operational technology initiatives.

Establish and enforce security standards for configuration, segmentation, access control, and technical controls, aligned with NIST CSF, ISO 27001, and IEC 62443 where applicable.

Provide hands-on leadership for the implementation, configuration, integration, and continual optimization of cybersecurity technologies.

Evaluate emerging technologies and recommend practical capabilities that strengthen DHC's defense-in-depth strategy.

Security Operations and Resilience

Provide technical direction for threat detection and response, vulnerability management, identity security, endpoint security, network security, and security monitoring services.

Lead significant security incidents, escalations, containment decisions, post-incident reviews, and corrective-action follow-through.

Advance the use and optimization of Microsoft Defender, Sentinel, Entra ID, XDR, SIEM, MFA, conditional access, and related security capabilities.

Establish and monitor service measures including detection and response performance, vulnerability remediation, operational SLAs, and cybersecurity maturity targets.

Lead or support tabletop exercises, BCP/DR testing, and other resilience activities to validate readiness.

Governance Risk Compliance and Third Party Security

Maintain cybersecurity policies, standards, procedures, and control frameworks that support regulatory, contractual, audit, and internal governance requirements.

Lead cybersecurity risk assessments, risk treatment planning, and ongoing tracking of material risks and exceptions.

Coordinate third-party and supply-chain cybersecurity assessments with procurement, legal, finance, and business owners.

Support clear evidence collection and remediation planning for internal and external audits.

Operational Technology Security

Lead the design and evolution of cybersecurity controls for OT and industrial environments, with an emphasis on safe IT and OT convergence.

Partner with engineering and operations teams to protect critical manufacturing systems, industrial assets, connectivity, and data exchange.

Apply risk-based OT security practices aligned with IEC 62443, NIST CSF, and DHC operational requirements.

Functional Leadership and Capability Growth

Provide day-to-day technical guidance, work prioritization, coaching, and mentorship to cybersecurity team members and relevant IT resources.

Help define role expectations, operating procedures, skills development priorities, and practical career-growth opportunities for cybersecurity staff.

Coordinate cybersecurity capacity, service intake, and delivery with the accountable people manager and IT leadership.

Build a security-first culture through clear standards, constructive partnership, knowledge sharing, and visible accountability.

Manage cybersecurity vendors and service partners to ensure services, contracts, and outcomes support DHC's priorities.

Qualifications

Experience

8-10+ years of progressive cybersecurity, infrastructure, or security engineering experience, including experience leading complex cross-functional initiatives.

Demonstrated expertise in hybrid cloud environments, preferably Azure, and the Microsoft security ecosystem including Defender, Sentinel, Arctic Wolf and Entra ID.

Strong background in security architecture, incident response, vulnerability management, identity security, risk management, and resilience planning.

Experience working with OT, industrial, manufacturing, or other critical operational environments is strongly preferred.

Experience providing technical leadership, mentoring, or functional coordination for cybersecurity resources and external service partners.

Education and Certifications

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related discipline; an equivalent combination of education and experience will be considered.

Relevant advanced security certification such as CISSP, GSEC, GCIH, CCNP Security, or comparable credential is preferred.

IEC 62443, NIST Cybersecurity Framework, cloud security, or OT-security certifications are assets.

Core Competencies

Strategic, practical thinker who can convert technical risk into clear business decisions and executable plans.

Strong technical judgment, written and verbal communication, stakeholder engagement, and collaboration skills.

Ability to lead calmly and decisively during incidents, ambiguity, and competing business priorities.

High accountability, sound judgment, continuous-learning mindset, and commitment to improving security outcomes.