Assistant Vice President, Information Security in Toronto

We are hiring an Assistant Vice President, Information Security.

Reporting To: VP, Technology Governance, Risk and Performance

Full-Time/Part-Time: Full-time

Posting Date: September 21, 2026

Closing Date: October 26, 2026

Hours of Work: 8:30 a.m. - 5:00 p.m.

Grade: 20.4

Office Location: Toronto, ON - Great location! Steps away from the main public transit station.

The Offer: Highly competitive compensation package which includes base salary, bonus, benefits, and career advancement opportunities! Eligibility for benefits is dependent on the terms of employment.

The Opportunity: The Assistant Vice President, Information Security is First National’s enterprise cybersecurity leader within Product and Technology. The role sets cybersecurity direction, operates the Information Security function, improves cyber resilience, and enables secure delivery across applications, infrastructure, cloud, identity, data, integrations, and AI.

How you will contribute:

• Cybersecurity Strategy, Governance and Assurance: Define and execute the cybersecurity strategy and capability roadmap aligned to business priorities, technology modernization, risk appetite, client obligations, and the Product and Technology operating model. Serve as the senior cybersecurity authority within Product and Technology, advising executives and governance forums on material risk, incidents, exceptions, investment priorities, and security performance.
• Security Operations, Incident Response & Cyber Resilience: Lead security monitoring, managed detection and response, threat intelligence, incident response, and digital forensics coordination, with clear service levels and performance expectations for managed security providers.
• Security Engineering, Identity, Cloud and Application Security: Define practical security architecture standards, reusable patterns, Zero Trust principles, and minimum control requirements across cloud, infrastructure, networks, end user computing, applications, APIs, integrations, data platforms, and emerging technology.
• AI, Data, Third Party and Human Risk: Define cybersecurity guardrails for AI and automation, including identity, sensitive data handling, secrets, model and prompt attack risks, third party AI services, logging, monitoring, abuse protection, and secure integration patterns.
• Leadership and Operating Performance: Build and lead a high performing Information Security team with clear accountabilities, modern technical depth, succession coverage, and a culture of ownership, transparency, and collaboration.

Leadership and Industry Experience: Significant progressive experience in cybersecurity, information security, security engineering, or technology risk, typically including 12 or more years of relevant experience and several years leading multidisciplinary security teams or major enterprise security programs.

Technical, Assurance and Regulatory Depth: Strong practical knowledge of security operations, incident response, vulnerability management, identity and privileged access, cloud security, application and API security, DevSecOps, data protection, third party security, security architecture, cyber resilience, and software supply chain security.

Education, Communication and Judgment: Post-secondary degree or diploma in cybersecurity, computer science, engineering, technology, risk management, or a related discipline, or an equivalent combination of education and relevant experience. Professional certifications such as CISSP, CISM, CRISC, CISA, CCSP, or comparable credentials are preferred.

Relationships: Regular engagement with external auditors, assessors, regulators or supervisory authorities where applicable, client security teams, cybersecurity and technology vendors, managed security providers, strategic technology partners, consultants, and government or law enforcement authorities when authorized.

Working Environment and Physical Demands Analysis: Office environment, periods of high volume with tight timelines, long periods of stationary position/sitting, prolonged periods of repetitive movement (i.e., using a keyboard and mouse), long periods of time in viewing a computer screen.

Why join First National? Competitive Compensation, Comprehensive benefits program (i.e., Health Spending Account, Maternity and Parental Leave Top Up), Extensive training programs to set our employees up for success, Modern office environment conducive to collaboration, Supportive teamwork culture, Opportunities to give back to the communities and work through events focused on a variety of charities, Ongoing social events throughout the year.

The team you’ll join: Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.

First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation and any other category protected by law.