Job ID #32264: Chief Information Security Officer (CISO) and Director, IT Infrastructure

Contribute to the City of Hamilton, one of Canada’s largest cities - home to a diverse and strong economy, an active and inclusive community, a robust cultural and dining scene, hundreds of kilometers of hiking trails and natural beauty just minutes from the downtown core, and so much more. Join our diverse team of talented and ambitious staff who embody our values of sensational service, courageous change, steadfast integrity, collective ownership and being engaged empowered employees. Help us achieve our vision of being the best place to raise a child and age successfully. #BeTheReason

Job ID #32264: Chief Information Security Officer (CISO) and Director, IT Infrastructure

Union: Non-Union

Job Description ID #: 7753

Close date: Interested applicants please submit your application online at www.hamilton.ca/city-council/jobs-city by 4:00 p.m. on October 14, 2026.

Vacancy type: This posting is for an existing vacancy

Internal applicants should apply with your work e-mail address . External applicants are considered only after the internal posting process has been completed. Only applicants chosen for an interview will be contacted.

SUMMARY OF DUTIES

Reporting to the Chief Information Officer (CIO), the Chief Information Security Officer (CISO) & Director, IT Infrastructure will be responsible for implementing and running the enterprise cybersecurity and technology infrastructure program.

The CISO & Director, IT Infrastructure is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets, technologies, and infrastructure are adequately protected. This includes oversight of the City's data center, network infrastructure, and telephony and related infrastructure across approximately 180 sites.

The CISO will lead efforts to secure the organization’s information and IT assets by developing and implementing strategies to mitigate risks, ensure operational stability, manage security incidents, and ensure compliance with relevant policies and regulations.

The CISO will ensure that the business complies with all relevant IT security regulations and standards when acquiring new technology. This involves understanding the legal and regulatory landscape, assessing the technology's security features, and ensuring it meets the required compliance criteria.

The CISO will lead the IT Cybersecurity, Infrastructure Teams consisting of approximately 45 staff members.

GENERAL DUTIES

STRATEGY & PLANNING

Lead and provide strategic direction to achieve business goals by articulating standards, prioritizing technology initiatives and coordinating the evaluation, deployment, and management of current and future security and infrastructure technologies.

Participate in the development and implementation of IT strategies in collaboration with the IT Management team. Provide advice and recommendations to the Senior Management team on strategic infrastructure and security architectures and best practices to ensure the integrity of the City environment.

Develop and communicate security and technology plans and directions to senior management team, staff, partners, customers and stakeholders. Collaborate with the appropriate departments to develop and maintain a security technology plan that supports organization risk assessment needs.

Direct development, execution and updating of cyber incident response and assist with technology business continuity planning and execution.

Design and develop enterprise security standards, architecture, security technology evaluation and implementation.

Review proposed infrastructure and application projects and solutions for compliance to defined City security and technology policies, procedures and standards.

Perform corporate cultural analysis and develop change strategies that are flexible and adaptive in collaboration with the IT Management Team to support effective adoption of new applications, technologies and related processes.

Conduct research and provide recommendations on security products, services, protocols, and standards in support of all infrastructure procurement and development efforts. Provide insight into emerging security technologies, trends and changes in the IT landscape. Identify and validate those security technologies that are right for the City and develop the best strategy for adoption and implementation. Maintain current knowledge of security industry trends and emerging technologies in anticipation of new business processes and system alterations.

Establish and manage delivery of quality service through the establishment and monitoring of Key Performance Indicators (KPI).

Devise strategies and make recommendations for enterprise information/data and solution architectures that meet the City’s security objectives and goals, working in collaboration with City senior management team.

Coordinate with the IT Management Team to effectively and efficiently utilize IT resources – including personnel and equipment – across the IT organization.

Manage and maintain strategic relationships with the corporate departmental leadership - across the City with a view to sustained insight into City business strategies and directions and the provision of advice and guidance on opportunities for managing risk by complying with the City’s security and infrastructure policies and procedures.

Oversee the support, management and administration of contracts for spending on services and products related to managed security hardware and applications. This includes overseeing the preparation and execution of requests for proposals (RFPs), bid proposals, contracts, and other documentation for security applications and hardware. Negotiates enterprise wide contracts with software and service providers as required and liaise with City vendors for prompt rectification of any security problems or emergencies. This will require the definition and facilitation of communication between the City and its providers in order to deliver products and services according to plan and within budget.

Participate in the evaluation, installation, configuration and deployment of new applications, systems software, products, and/or enhancements to existing applications to ensure compliance with the City’s security policies.

Oversee the delivery of IT cyber and infrastructure related projects using standard project management practices and methods.

ACQUISITION & DEPLOYMENT

Assess and communicate risks associated with technology-related investments and purchases. Provide recommendations to mitigate the risks including identification of alternative solutions.

Develop business case justifications and cost/benefit analyses for technology spending and initiatives.

Define requirements for new technology implementations and communicate them to key business stakeholders.

Review hardware and software acquisition and maintenance contracts and pursue master agreements to capitalize on economies of scale.

Define and communicate corporate procedures, policies, and standards for the organization for acquiring, implementing, and operating new network systems, equipment, software, and other technologies.

Approve and prioritize projects and the project portfolio as they relate to the selection, acquisition, development, and installation of major information systems in collaboration with the IT Management Team.

Collaborate on the preparation of RFPs, bid proposals, contracts, scope of work reports, and other documentation for infrastructure projects and associated efforts with the Manager, Infrastructure & Operations.

Review the planned purchase of technology equipment and supplies for architecture compliance and that they meet operational requirements of the business.

OPERATIONAL MANAGEMENT

Design and direct the governance activities associated with ensuring compliance with the enterprise architecture.

Plan, develop and deploy security measures in collaboration with infrastru