Cybersecurity Lead

Discovery is an Americas-focused precious metals company with a diversified portfolio. Our Mission is to deliver sustainable value for all stakeholders by operating in a safe and responsible manner and having a positive impact on local communities. Discovery has an experienced team, dedicated to being a highly profitable producer of precious metals that generates superior returns, delivers substantial social-economic benefits and meets the highest environmental standards.
LocationCorporate
Schedule5x2
The PositionThe Cybersecurity Lead is responsible for protecting the Company's information systems, operational technology (OT) environments, and digital assets from cyber threats. This role owns and drives the Company’s cybersecurity program, including building the plan, owning security design and tooling decisions, and leading its execution and continuous improvement, ensuring that appropriate security controls, risk management practices, and incident response capabilities are in place across corporate and operational environments. The position serves as the Company's cybersecurity subject matter expert and works closely with internal stakeholders, external partners, and the Company's Managed Security Service Provider (MSSP).
Key ResponsibilitiesCybersecurity Operations and Risk Management
Build, implement, and continuously improve cybersecurity policies, standards, and controls.
Identify, assess, and mitigate cybersecurity risks across IT and OT environments.
Protect sensitive business information and critical operational systems and mitigate cybersecurity risks.
Manage security controls including identity and access management, network security, endpoint protection, vulnerability management, and encryption.
Conduct security assessments and recommend remediation strategies to address identified vulnerabilities.
Incident Response and Security Monitoring
Oversee the relationship with the MSSP and ensure effective monitoring and threat detection.
Ensure the Company's infrastructure is equipped with the appropriate sensors, agents, and log sources, and that the relevant security data and metadata flow reliably from IT and OT environments to the MSSP's tooling platforms.
Act as the escalation point for cybersecurity incidents and investigations.
Lead incident response activities including investigation, containment, recovery, and post-incident reviews.
Coordinate internal and external resources during cybersecurity incidents and ensure timely communication with stakeholders.
Maintain incident response plans, recovery procedures, and cybersecurity support for business continuity initiatives.
Operational Technology (OT) and Mining Infrastructure Security
Oversee the security of industrial control systems, communications infrastructure, and OT environments, aligned to IEC 62443.
Partner with Operations, Engineering, and OT teams to mitigate cyber risks affecting safety, productivity, and operational continuity.
Evaluate cybersecurity risks associated with remote sites, field operations, third-party connections, and operational technologies.
Maintain appropriate security controls and network segregation between IT and OT environments.
Compliance, Governance, and Audit
Develop and maintain cybersecurity policies, standards, and controls aligned with industry best practices, regulatory requirements and recognized frameworks.
Support audits, assessments, and remediation activities to ensure ongoing compliance and risk reduction.
Monitor cybersecurity metrics and provide reporting on security posture, risks, and improvement initiatives.
Contribute to business continuity and disaster recovery planning from a cybersecurity perspective.
Maintain documentation related to cybersecurity controls, incidents, risk assessments, and compliance activities.
Stakeholder Engagement and Security Awareness
Serve as the primary cybersecurity advisor to business, operational, and technology stakeholders.
Collaborate with internal teams and external partners to support secure project delivery and technology implementations.
Promote cybersecurity awareness and training across the organization.
Support vendor and third-party security reviews and assessments.
Stay informed on emerging cybersecurity threats, trends, and technologies and communicate relevant impacts to stakeholders.
Skills And Qualifications
College diploma or university degree in Computer Science, Information Security, Information Technology, or a related field.
Minimum 10 years of progressive cybersecurity experience, including experience building or significantly maturing a security program, with responsibility for security operations, risk management, incident response, and infrastructure security.
Demonstrated ability to drive a security program: planning, prioritizing, coordinating internal staff and external partners, and communicating risk and progress to senior management.
Strong understanding of cybersecurity frameworks, standards, and best practices, including the NIST Cybersecurity Framework (CSF) 2.0, IEC 62443, and MITRE ATT&CK.
Experience securing enterprise networks, cloud services, endpoints, and operational technology environments.
Hands-on experience with security monitoring, vulnerability management, identity and access management, and incident response.
Experience working with cybersecurity tools and technologies such as SIEM, endpoint protection, vulnerability scanning, and security monitoring platforms.
Experience working with an MSSP or outsourced SOC, including telemetry and log-source onboarding, escalation workflows, and service management.
Professional cybersecurity certifications such as CISSP, CISM, GICSP, or IEC 62443 are considered an asset.
Strong analytical, problem-solving, and communication skills.
Ability to operate independently while effectively collaborating with technical and business stakeholders.
Experience supporting cybersecurity within Operational Technology (OT) and Industrial Control System (ICS) environments. Experience in the mining industry is considered a strong asset.
Compensation And BenefitsCompetitive total compensation package including:
Health, Dental, Life, AD&D, Disability, Healthcare and Wellness Spending Accounts, Virtual Care and Employee and Family Assistance Program;
Company contributions and matching into a Defined Contribution Pension Plan;
and
Long Term Incentive Plan and Short Term Incentive Plan;
Workplace Conditions
Corporate head office located in downtown Toronto, Ontario with periodic travel to operating sites;
and
Attention to work issues in the evening or on weekends may be required.
Additional InformationThis posting is for an existing vacancy at Discovery Mining.
We thank all candidates in advance. Please note, only those candidates selected for an interview will be contacted.
Discovery Mining welcomes applications from all qualified individuals, including, but not limited to women, persons with disabilities, visible minorities (racialized), aboriginal (Indigenous) persons and persons of any gender identity and sexual orientation. Discovery is committed to a positive, supportive, and inclusive environment.
Please note that we use artificial intelligence tools to screen applications and assess qualifications and selected candidates will be contacted by a human for an interview.
#J-18808-Ljbffr