Director, Cybersecurity
Top Benefits
About the role
Position Purpose:
Influence, coordinate, and manage IO’s cybersecurity strategy and operations to protect organizational assets, systems, and confidential information. This role oversees the enterprise cyber risk and security program, manages vendor and third-party risk, and leads incident response and recovery efforts. The Director ensures compliance with security policies, drives continuous improvement, and provides critical communication and training across all levels of the organization.
What You Will Do:
- Protect IO assets, systems, and confidential information from cyber threats by monitoring compliance, managing audits, and leading incident response activities.
- Develop, implement, and continuously improve the enterprise cybersecurity roadmap, including policies, standards, and procedures aligned with best practices.
- Oversee managed security service providers and ensure effective security infrastructure, testing, and remediation of identified risks.
- Lead disaster recovery planning and business continuity processes, ensuring readiness for cyber incidents through tabletop exercises and updated protocols.
- Provide security communication, awareness, and training programs for employees at all levels, and deliver regular reporting to executives, audit committees, and the board.
- Assess and manage vendor, application, and third-party risks, establishing onboarding processes and contractual agreements to maintain security standards.
- Manage a team of cybersecurity professionals, providing leadership, coaching, and technical development to ensure alignment with organizational priorities.
- Monitor emerging threats and trends, recommending updates to tools, processes, and strategies to maintain a robust security posture.
- Own and manage the cybersecurity program budget, ensuring effective allocation of resources to mitigate risk and support strategic initiatives.
What We Are Looking For:
- Extensive experience in cybersecurity leadership roles, including managing security teams and programs in complex environments.
- Professional learnings and certifications such as CISSP (required), with additional credentials like ITIL, CCSP, or Security+ considered assets.
- Strong knowledge of frameworks and tools, including NIST, ethical hacking practices, identity and access management, and enterprise security awareness programs.
- Proven ability to develop and implement security policies, procedures, and SLAs, and to manage vendor relationships and third-party risk.
- Expertise in incident response, disaster recovery planning, and risk management, with the ability to lead through high-impact cyber events.
- Excellent communication and collaboration skills to engage executives, boards, and cross-functional teams on security matters.
- Technical proficiency in platforms such as Windows Server, Microsoft SQL Server, and Microsoft .NET, combined with experience in reporting, trend analysis, and change management.
What We Offer:
- Commitment to creating a diverse, equitable and inclusive culture that promotes a sense of belonging and represents and reflects the needs of the communities we serve.
- A defined contribution pension plan, where IO contributes the equivalent of 5% of a full-time employee’s annual salary, with an option for IO to match an additional 5% contribution made by the employee. IO also offers a Group Retirement Savings Plan and Group Tax Free Savings Account, designed to help IO colleagues plan and save for their future.
- A comprehensive package that covers health, dental, vision, out-of-country care, paramedical services, and more.
- A pregnancy and parental leave program that offers expecting, eligible employees a top-up to 95% of their annual base salary for 31 weeks, and our parental leave program offers eligible employees a top-up to 95% of their annual base salary for 15 weeks.
- Access to our $1000 Healthcare Spending Account to top up expenses not covered in the benefits program and a Lifestyle Account that expands the eligibility of health and wellness options and can include coverage for gym memberships and fitness equipment, nutrition counselling or financial planning.
- Support for professional development opportunities for all colleagues through a broad range of learning programs that include in-person and online training, leadership development, and support for colleagues’ well-being. IO will also cover the costs associated with up to two membership and license fees per year for eligible colleagues if directly related to the employee’s role.
- Access to a suite of virtual healthcare options to support non-urgent medical needs.
- A convenient, central location at 1 Dundas St West, easily accessible by public transit.
We offer a competitive hiring range of $128,000 to $173,200 (M3 level), pay will align with skills, knowledge and experience of the candidate.
This posting will close on January 12, 2026 at 11:59pm.
Interviews will occur on a rolling basis until the role is filled.
This posting is for a current active vacancy. We are actively recruiting to fill this position.
About Infrastructure Ontario
Infrastructure Ontario (IO) is a world class agency that creates value out of the public assets of the province, to build a connected and competitive Ontario. Everything we do is grounded in the idea that if we work with partners in both the public and private sectors, we can create value for taxpayers in ways that others can’t.
We are known for our execution. We bring a seamless “one-stop shop” perspective to turning government decisions into actions, through a range of contracting/commercial models. We take an enterprise-wide view to effectively provide leadership on assets and programs over their full lifecycle.
--
Infrastructure Ontario (IO) est un organisme de classe mondiale qui crée de la valeur à partir des biens publics de la province afin de bâtir un Ontario connecté et compétitif. Tout ce que nous faisons est fondé sur l’idée que si nous travaillons avec des partenaires des secteurs public et privé, nous pouvons créer de la valeur pour les contribuables d’une façon que d’autres ne peuvent pas faire.
Nous sommes connus pour notre exécution. Nous apportons une perspective intégrée de « guichet unique » pour transformer les décisions du gouvernement en actions, au moyen d’un éventail de modèles contractuels/commerciaux. Nous adoptons une vision à l’échelle de l’organisation afin de fournir un leadership efficace sur les actifs et les programmes tout au long de leur cycle de vie.
Director, Cybersecurity
Top Benefits
About the role
Position Purpose:
Influence, coordinate, and manage IO’s cybersecurity strategy and operations to protect organizational assets, systems, and confidential information. This role oversees the enterprise cyber risk and security program, manages vendor and third-party risk, and leads incident response and recovery efforts. The Director ensures compliance with security policies, drives continuous improvement, and provides critical communication and training across all levels of the organization.
What You Will Do:
- Protect IO assets, systems, and confidential information from cyber threats by monitoring compliance, managing audits, and leading incident response activities.
- Develop, implement, and continuously improve the enterprise cybersecurity roadmap, including policies, standards, and procedures aligned with best practices.
- Oversee managed security service providers and ensure effective security infrastructure, testing, and remediation of identified risks.
- Lead disaster recovery planning and business continuity processes, ensuring readiness for cyber incidents through tabletop exercises and updated protocols.
- Provide security communication, awareness, and training programs for employees at all levels, and deliver regular reporting to executives, audit committees, and the board.
- Assess and manage vendor, application, and third-party risks, establishing onboarding processes and contractual agreements to maintain security standards.
- Manage a team of cybersecurity professionals, providing leadership, coaching, and technical development to ensure alignment with organizational priorities.
- Monitor emerging threats and trends, recommending updates to tools, processes, and strategies to maintain a robust security posture.
- Own and manage the cybersecurity program budget, ensuring effective allocation of resources to mitigate risk and support strategic initiatives.
What We Are Looking For:
- Extensive experience in cybersecurity leadership roles, including managing security teams and programs in complex environments.
- Professional learnings and certifications such as CISSP (required), with additional credentials like ITIL, CCSP, or Security+ considered assets.
- Strong knowledge of frameworks and tools, including NIST, ethical hacking practices, identity and access management, and enterprise security awareness programs.
- Proven ability to develop and implement security policies, procedures, and SLAs, and to manage vendor relationships and third-party risk.
- Expertise in incident response, disaster recovery planning, and risk management, with the ability to lead through high-impact cyber events.
- Excellent communication and collaboration skills to engage executives, boards, and cross-functional teams on security matters.
- Technical proficiency in platforms such as Windows Server, Microsoft SQL Server, and Microsoft .NET, combined with experience in reporting, trend analysis, and change management.
What We Offer:
- Commitment to creating a diverse, equitable and inclusive culture that promotes a sense of belonging and represents and reflects the needs of the communities we serve.
- A defined contribution pension plan, where IO contributes the equivalent of 5% of a full-time employee’s annual salary, with an option for IO to match an additional 5% contribution made by the employee. IO also offers a Group Retirement Savings Plan and Group Tax Free Savings Account, designed to help IO colleagues plan and save for their future.
- A comprehensive package that covers health, dental, vision, out-of-country care, paramedical services, and more.
- A pregnancy and parental leave program that offers expecting, eligible employees a top-up to 95% of their annual base salary for 31 weeks, and our parental leave program offers eligible employees a top-up to 95% of their annual base salary for 15 weeks.
- Access to our $1000 Healthcare Spending Account to top up expenses not covered in the benefits program and a Lifestyle Account that expands the eligibility of health and wellness options and can include coverage for gym memberships and fitness equipment, nutrition counselling or financial planning.
- Support for professional development opportunities for all colleagues through a broad range of learning programs that include in-person and online training, leadership development, and support for colleagues’ well-being. IO will also cover the costs associated with up to two membership and license fees per year for eligible colleagues if directly related to the employee’s role.
- Access to a suite of virtual healthcare options to support non-urgent medical needs.
- A convenient, central location at 1 Dundas St West, easily accessible by public transit.
We offer a competitive hiring range of $128,000 to $173,200 (M3 level), pay will align with skills, knowledge and experience of the candidate.
This posting will close on January 12, 2026 at 11:59pm.
Interviews will occur on a rolling basis until the role is filled.
This posting is for a current active vacancy. We are actively recruiting to fill this position.
About Infrastructure Ontario
Infrastructure Ontario (IO) is a world class agency that creates value out of the public assets of the province, to build a connected and competitive Ontario. Everything we do is grounded in the idea that if we work with partners in both the public and private sectors, we can create value for taxpayers in ways that others can’t.
We are known for our execution. We bring a seamless “one-stop shop” perspective to turning government decisions into actions, through a range of contracting/commercial models. We take an enterprise-wide view to effectively provide leadership on assets and programs over their full lifecycle.
--
Infrastructure Ontario (IO) est un organisme de classe mondiale qui crée de la valeur à partir des biens publics de la province afin de bâtir un Ontario connecté et compétitif. Tout ce que nous faisons est fondé sur l’idée que si nous travaillons avec des partenaires des secteurs public et privé, nous pouvons créer de la valeur pour les contribuables d’une façon que d’autres ne peuvent pas faire.
Nous sommes connus pour notre exécution. Nous apportons une perspective intégrée de « guichet unique » pour transformer les décisions du gouvernement en actions, au moyen d’un éventail de modèles contractuels/commerciaux. Nous adoptons une vision à l’échelle de l’organisation afin de fournir un leadership efficace sur les actifs et les programmes tout au long de leur cycle de vie.