This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director of IT Security based in Canada. This Director of IT Security role is a senior leadership opportunity focused on defining and executing a comprehensive cybersecurity strategy across a fast-moving, fully remote, international organization. You will be responsible for safeguarding enterprise systems, client data, and distributed infrastructure while ensuring security is embedded into every layer of business operations. The role combines strategic governance with hands-on oversight of risk management, incident response, and compliance programs such as SOC 2. You will work closely with executive leadership to translate security risks into clear business decisions while enabling continued innovation and growth. Acting as both a strategist and operator, you will mature the organization’s security posture, strengthen resilience against evolving threats, and build a strong security-first culture. This is a high-impact role where your leadership directly shapes enterprise trust, compliance readiness, and operational security at scale. \n

Accountabilities: Define and execute the enterprise cybersecurity strategy and roadmap aligned with business objectives and growth plans. Establish and maintain security governance frameworks, policies, standards, and procedures across the organization. Lead enterprise-wide risk assessments, threat modeling, and vulnerability management programs to identify and mitigate security risks. Oversee incident response planning, execution, tabletop exercises, and post-incident analysis to ensure operational readiness. Manage identity and access management, endpoint security, and privileged access controls across distributed systems. Drive compliance initiatives including SOC 2 and other relevant security frameworks, ensuring audit readiness and documentation accuracy. Conduct third-party vendor security assessments and ongoing risk monitoring of external partners and tools. Promote a security-first culture through awareness programs, training, and executive-level reporting on security posture and KPIs. Requirements: 7+ years of experience in cybersecurity, information security, or enterprise risk management. 3+ years of leadership experience managing or owning security programs in complex, distributed environments. Strong expertise in security frameworks such as SOC 2, ISO 27001, or NIST Cybersecurity Framework. Deep understanding of identity and access management, endpoint security, incident response, and vulnerability management. Experience working in cloud-first and SaaS environments (e.g., Google Workspace, Salesforce, Okta, NetSuite, or similar platforms). Proven ability to conduct risk assessments, threat modeling, and translate technical risks into business impact. Strong executive communication skills with experience presenting to senior leadership and stakeholders. Experience supporting remote or globally distributed teams in a security leadership capacity. Relevant certifications such as CISSP, CISM, or CRISC are strongly preferred. Benefits: Competitive salary ranging from approximately $165,000–$200,000 CAD depending on experience and location. Comprehensive health coverage including medical, dental, vision, life, and disability insurance. Strong employer contributions to dependent healthcare plans. Retirement savings plan with company match. Unlimited paid time off with structured minimum vacation support and additional company holidays. Mental health, wellness, and physical health support programs and subscriptions. Paid parental leave and family support benefits. Fully remote work environment with flexibility and work-from-home setup.

\n How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1