Director of IT & Security

Role overview

This senior leadership opportunity is for a Director of IT & Security in Canada. The role is part of a mission-led, education-oriented technology organization and combines strategic leadership with practical oversight across IT operations, cybersecurity, and compliance. You will shape the company’s security and technology direction, help keep systems dependable and scalable, and ensure the organization stays aligned with changing privacy and regulatory expectations.

You will work closely with executive stakeholders, technical teams, and external partners to define risk priorities, strengthen cloud security, improve incident response, and support continuity planning. The position also plays an important part in audit readiness, customer confidence, and the protection of user data.

Key responsibilities

• Direct IT operations planning and delivery, with ownership of infrastructure, systems, and network reliability in an agile setting while continuously improving service performance.
• Develop and maintain the organization’s cybersecurity and information security direction, including risk oversight, security architecture, and cloud control design.
• Maintain compliance with privacy and regulatory obligations such as PIPEDA, FERPA, COPPA, GDPR, and CCPA, including audit preparation and evidence collection.
• Run incident management processes end to end, from escalation and coordination through post-incident review and corrective action follow-up.
• Promote security awareness and work with engineering teams to build secure-by-design practices into the software delivery lifecycle.
• Handle relationships with internal partners and external auditors, and support security reviews, RFP responses, and customer diligence requests.
• Coach, guide, and evaluate the IT team, including mentoring, performance management, and growth planning.
• Lead infrastructure planning and improvement so that servers, systems, and networks remain secure, scalable, and aligned to business needs.

Requirements

• At least 10 years of experience across IT, infrastructure, or cybersecurity, including a minimum of 2 years leading people.
• Demonstrated success building and operating security and compliance programs such as SOC 2 and ISO 27001, including controls design and auditor coordination.
• Strong hands-on knowledge of IT infrastructure, networking, server environments, and cloud platforms.
• Solid understanding of cybersecurity fundamentals, web application security, vulnerability management, and incident response processes.
• Experience navigating regulatory and data privacy requirements in complex business environments.
• Strong project coordination and organizational ability, with comfort managing multiple competing priorities in a fast-moving setting.
• Excellent communication and stakeholder management skills, with the ability to explain technical risk in business terms.
• A degree in Computer Science, Engineering, or another related technical discipline.
• Preferred qualifications include certifications such as CISSP, CISM, CIPM, CCNA, or CCNP, plus experience in Agile environments.

Benefits

• Annual salary range of CAD 155,000 to CAD 175,000, depending on experience and expertise.
• Remote-first or hybrid flexibility within Canada, with Eastern Time Zone alignment required.
• Four weeks of vacation, plus additional paid time off and holiday periods.
• Employer-paid medical and dental coverage.
• Four-month parental leave top-up.
• Group RRSP with a 3% employer match.
• Support for professional growth, including learning and training opportunities.
• A collaborative, mission-driven environment centered on innovation and impact.

Additional information

This role is posted on behalf of a partner company that handles applications and all next steps directly. The partner employer manages the selection process, including interviews and assessments.

Data privacy and hiring process notice

Applications are reviewed through an AI-supported matching process designed to assess fit against the role’s core requirements. Shortlisted candidates are shared with the hiring company, and the final decision is made by the employer’s internal team.

By submitting an application, candidates acknowledge that personal data may be processed to evaluate candidacy and shared with the hiring employer under applicable data protection rules, including GDPR-related principles. Applicants may exercise rights such as access, correction, deletion, and objection as allowed by law.

AI tools may be used to support parts of the hiring workflow, such as reviewing applications, analyzing resumes, and checking for inconsistencies or verification signals. These tools assist recruiters but do not replace human judgment.