Chief Information Security Officer

Job title: Chief Information Security Officer

Job description: Description :

Munich Re New Ventures (MRNV), the strategic corporate venture capital group of Munich Re, is seeking a Chief Information Security Officer (CISO) for our Parachute digital insurance offerings and the GroupHEALTH Family of Companies (GHFoC).

Reporting to the President & CEO, MRNV – as the CISO, you will serve as the process owner of all activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information in compliance with the organization’s information security policies. You will be responsible for establishing and maintaining an organization-wide information security management program to ensure that information assets are adequately protected.

Please note that this is not a GroupHEALTH position. As the CISO you will be employed by MRNV.

Munich Re, through its subsidiary, Munich Re New Ventures, Inc has acquired Group Health Group Holdings, Inc. You can read more about this exciting development .

THE ROLE:

This opportunity encompasses a variety of security and governance practices and responsibilities, including but not limited to the following:

• Contributing to the design and approval of the Parachute and GHFoC comprehensive security strategy. The strategy will account for the end-to-end lifecycle of information security operations, including evaluating the IT threat landscape, devising policy and controls to reduce risk, leading auditing and compliance initiatives.
• Bringing on board key stakeholders within the organization, securing the necessary funding and resources, and establishing necessary partnerships with external vendors and security experts.
• Managing information security initiatives and employees across the organization to ensure smooth transition toward security-aware and risk-free business practices.
• Ensuring that the organization adapts to evolving compliance regulations.
• Developing the requirements for all interested parties and coordinating with the data protection initiatives in compliance with these requirements as per the enforceable regulations.
• Owning the business continuity plans for Parachute and oversight of said plans for GHFoC.
• Champion comprehensive data governance concepts and frameworks.
• Contributing to technical projects including validating system design and architecting layers of security.
• Developing, implementing, and monitoring a strategic, comprehensive enterprise information security and IT risk management program.
• Developing and enhancing an information security management framework and providing leadership to the enterprise’s information security organization.
• Working directly with the business units to facilitate risk assessment and risk management processes.
• Partnering with business stakeholders across the company to raise awareness of risk management concerns.
• Assisting with the overall business technology planning, providing a current knowledge and future vision of technology and systems; enabling a framework for risk-free and scalable business operations.

QUALIFICATIONS:

First and foremost, you comprehend the security challenges in the current and future state of business operations and demonstrate the necessary leadership to fortify an organization with the right tools, skills, resources, relationships, and capabilities against growing information security risks.

In addition, we are looking for the following qualifications:

• 10+ years of leadership/management experience in a combination of risk management, information security, and IT roles.
• Degree in Business Administration or a technology-related function.
• Professional security management certification
• Knowledge of common information security management frameworks.
• Specific experience in Agile software development or other best in class development practices.
• Strong experience with Cloud computing/Elastic computing across virtualized environments is required.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Excellent written and verbal communication skills.
• High level of personal integrity.
• Familiarity with Microsoft Power Platform is an asset, but not mandatory.
• Familiarity with the General Data Protection Regulation (GDPR) is an asset, but not mandatory.

ABOUT US:

Munich Re’s track record as one of the world’s leading reinsurance companies is based on a solid capital foundation, in-depth risk expertise and market know-how. Our data, our technology, and our teams place us in a unique position to lead the change to redefine the nature and impact of reinsurance for the future. We’re investing strategically in our world class talent, offering our employees a diverse and challenging work environment which promotes professional development, innovation, and passion – and rewards high performance.

Please note that only candidates who are selected for interview will be contacted directly. We thank all candidates for their interest.

Munich Re Canada is committed to providing a work environment that is inclusive and free of employment barriers and discrimination. Accommodations will be made for qualified applicants with a disability throughout the recruitment process. If you receive a request for an interview and you have a disability which will require an accommodation to support your participation, please consult with Human Resources or contact as soon as practical so that suitable accommodations can be arranged.

Company: GroupHEALTH Benefit Solutions

Expected salary:

Location: Toronto, ON

Job date: Sat, 22 May 2021 06:56:55 GMT