Director, Security & IT Operations - Permanent - 19535

Canada
Remote
Posted Oct 9, 2026
1 position

$160,000–$200,000 / year

Opens LinkedIn

Employment type: Full-time
Experience level: Lead · 10+ years
Posting language: English
Working hours: 40 hours per week
Location requirements: Country, Ottawa, Ontario, Canada
Seniority: Executive

Job summary

Lead the company’s security program as its de facto CISO and Privacy Officer, overseeing SOC 2 compliance, privacy matters, incident response, customer security reviews, and Board reporting. Direct IT and platform operations, including cloud cost and vendor governance, production availability, backups, disaster recovery, change management, and team development.

Job details

About The Opportunity A well-reputed, global SaaS company in the Ottawa area is looking to add a Director, Security and IT Operations to their esteemed leadership group. Reporting to the CTO, you will function as their de facto Chief Information Security Officer (CISO) and designated Privacy Officer, in addition to leading the IT Operations function from a managerial and strategic perspective. You’ll lead a lean, high-performing team while actively executing high-impact work yourself, whether that means managing SOC2 compliance, auditing cloud spend, authoring security governance, or driving strategic direction of the IT infrastructure. While this software company has an office presence in the National Capital Region, they boast a fully-remote work model and welcome candidates across Canada. Duties include but are not limited to: Security Leadership (CISO): Rebuild and own our security program, including access control, vulnerability management, incident response, SOC2 compliance audits, and quarterly Board reporting Data Privacy Officer: Serve as Privacy Officer for Canadian jurisdictions, managing policies, privacy impact assessments, access requests, breach reporting, etc. Customer Trust & Sales Enablement: Lead enterprise security reviews and create a self-service Security FAQ knowledge base for Sales Engineers Vendor & FinOps Governance: Enforce vendor SLAs, optimize GCP/AWS cloud spend through rightsizing and commitments, and manage platform availability and disaster recovery IT Operations: Own availability, backups and disaster recovery, and change management for production systems, including our SQL Server databases. Partner with Engineering on production readiness for releases and infrastructure changes Team Leadership: Direct and mentor a lean platform team, setting priorities, operating rhythm, and team growth as the platform scales About You The successful candidate will have the following: 8+ years of experience in IT infrastructure and operations, DevSecOps or Security leadership, ideally within a scaling SaaS environment, and 3+ years of team leadership experience Proven Security Leadership: Hands-on experience building or scaling a security program, including direct ownership of SOC2 compliance Strong technical background within IT infrastructure and Windows environments, database administration (SQL Server), etc. Data Privacy Expertise: Working knowledge of regional or global data privacy regulations within Canada and the U.S. Production Cloud & FinOps Experience: Hands-on experience operating production infrastructure in GCP or AWS, with a proven track record of cloud cost reduction Board & Executive Presence: Comfort presenting risk posture and strategy to executive leadership and the Board Operator Mindset: A strong preference for active execution alongside strategic management Bonus: background in high-throughput communications systems, containerization tools (Docker, Kubernetes, etc.), IaC (Terraform, Ansible), CI/CD pipelines, etc. Bonus: Professional certifications in security, privacy, or cloud architecture (e.g., CISSP, CISM, CIPM, AWS or GCP cloud, etc.) About the Job Our client is offering a competitive salary ranging from $160,000 to $200,000 in addition to a generous vacation allotment and a comprehensive benefits package. LROIT How To Apply Please apply by clicking the “Apply Now” button below and follow the instructions to submit your résumé. You can also apply by submitting your résumé directly to jkewin@lrostaffing.com. If you are already registered with us, please contact your Senior Recruiter. Please quote job 19535. LRO Staffing values fairness, confidentiality, and human judgment in every stage of our hiring process. We do not use automated or AI-driven screening tools to assess applications. Each submission is reviewed by an experienced recruiter to ensure a thoughtful and equitable evaluation of every candidate. Thank you for your interest in this role. One of our Recruiters will be in touch with you if your profile meets the requirements for the role and the expectations of our clients. Please note that all candidates must be permitted to work in Canada to be considered for this opportunity.

What you’ll do

Requirements

Requires 8+ years of experience in IT infrastructure and operations, DevSecOps, or security leadership, including 3+ years of team leadership and hands-on ownership of a security program and SOC 2 compliance. Candidates should bring strong infrastructure and Windows expertise, SQL Server administration, Canadian and U.S. privacy knowledge, production AWS or GCP experience, cloud cost optimization, and confidence presenting to executives and the Board.