Director of Information Security

Robert Half • Full-time • Greater Toronto Area, Canada, CA • C$ 150k - C$ 185k / year • 2d ago

About the Opportunity

Our client is seeking an accomplished cybersecurity leader to establish, mature, and continuously evolve their enterprise security program. This individual will be responsible for protecting critical business systems and information assets while ensuring security practices support broader business objectives.

Reporting to executive leadership, the successful candidate will lead governance, risk management, security operations, compliance programs, incident response, and security architecture initiatives across a complex enterprise environment. This role requires a strategic mindset along with hands on technical experience in the cybersecurity space.

What You'll Be Doing

Develop and execute the organization's information security roadmap and long-term cybersecurity strategy.
Lead enterprise-wide risk management and security governance programs.
Partner with business and technology stakeholders to embed security requirements into projects and operational processes.
Oversee compliance initiatives involving privacy, regulatory, and industry security standards.
Direct vulnerability management, threat monitoring, security investigations, and incident response activities.
Establish and maintain security policies, standards, and operational procedures.
Drive identity and access management initiatives, including privileged access controls and modern authentication practices.
Evaluate and manage third-party security risk across vendors and strategic partners.
Lead employee security awareness programs and promote a security-first culture.
Manage security budgets, resource planning, vendor relationships, and security investments.
Build, mentor, and develop a high-performing information security team.

What We're Looking For

15+ years of a combination of Technology and Cybersecurity experience.
5+ years of leadership experience managing security teams and enterprise initiatives.
Strong background in cybersecurity governance, risk management, compliance, and security operations.
Experience working with frameworks and regulatory requirements such as ISO 27001, NIST, PCI DSS, PIPEDA, GDPR, or similar standards.
Must have experience implementing GRC policies and procedures.
Solid understanding of enterprise infrastructure, cloud security, network architecture, and modern security controls.
Proven ability to communicate security risks and recommendations to executive and board-level stakeholders.
Strong relationship-building, leadership, and change-management skills.
CISSP, CISM, CISA, or similar certifications are considered assets.