Director, Information Security in Surrey

We are currently seeking a strategic and forward-thinking individual to join our Information Technology (IT) team! This is an exciting opportunity to lead KPU's enterprise cybersecurity program and help shape the future of information security across a dynamic, multi-campus institution.

Reporting to the Chief Information Officer, this senior leadership role oversees a team responsible for information security technologies and incident management while providing strategic direction for the protection of the University's systems, data, and digital services. The Director is responsible for advancing KPU's cybersecurity strategy, policies, controls, and programs that safeguard the confidentiality, integrity, and availability of KPU's information assets.

Working closely with IT leaders and academic departments across KPU, the Director translates organizational priorities and risk requirements into practical security strategies and technical solutions. This role balances security, innovation, agility, and operational effectiveness while leading initiatives that strengthen KPU's overall security posture.

This is an exciting opportunity to lead impactful security projects, influence enterprise-wide decision-making, and help shape the future of cybersecurity at KPU. From advancing incident response capabilities and cyber resilience to implementing new technologies, processes, and best practices, the Director will play a critical role in helping KPU navigate a complex environment.

At KPU, you'll have the opportunity to make a meaningful impact while working in a collaborative, purpose-driven environment that values innovation, continuous learning, work-life balance, and employee well-being. If you're passionate about building strong security programs, leading high-performing teams, and driving meaningful change, we'd love to hear from you!

Education and Experience

• Bachelor’s degree in information systems;
• A minimum of seven years of IT experience, with five years in an information security role and at least two years in a supervisory capacity;
• Certified Information Systems Security Professional (CISSP) in information security is preferred;
• Or an equivalent combination of education, training, and experience.

Knowledge, Skills & Abilities

• Proven expertise in identifying, assessing, and prioritizing information security risks. Implement risk mitigation measures and ensure compliance with relevant regulations and standards.
• Strong leadership persuasion abilities and experience working with the risk management team and a variety of diverse business units.
• Strong project management skills and experience in creating and managing complex project plans, including budgeting and resource allocation.
• Demonstrated experience working with security tools, technologies, mechanisms, and policy to support and protect business information infrastructure in a large organization.
• An understanding of operating system internals and network protocols. Familiarity with the principles of cryptography and cryptanalysis.
• Knowledge and experience in developing and documenting security architecture and plans, including strategic, tactical, and project plans.
• Experience developing and maintaining policies, procedures, standards, and guidelines using a consultative and inclusive approach.
• Experience with common information security management frameworks.
• Experience in application technology security testing (white box, black box, and code review) and in system technology security testing (vulnerability scanning and penetration testing).
• Familiarity with applicable legal and regulatory requirements for post-secondary education in the Province of British Columbia.
• Proven ability to communicate security technical concepts to non-technical people to enhance understanding and drive decisions that lead to positive outcomes.
• Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment strategies.
• Excellent verbal, written, and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management, and business personnel and other internal and external University stakeholders.
• Ability to travel between campuses is required.

Competencies

• Leadership: KPU employees inspire, coach, mentor, and support students, employees, and KPU as a whole in achieving objectives.
• Accountability: KPU employees demonstrate fiscal accountability and take ownership for their actions, decisions, and results.
• Continuous Improvement: KPU employees take a creative approach to opportunities, exploring unique ways to create optimal value for the KPU community.
• Collaboration: KPU employees work in functional and cross-functional teams, coming together to solve complex issues and accomplish objectives that will benefit the KPU community.

Salary Information

The above compensation range is the span between the minimum and the maximum base salary for a position. Typically, initial salary placement is approximately halfway between the minimum and the maximum. This represents an employee that possesses full job knowledge, qualifications, and experience for the position. In the normal course, employees will be hired, transferred, or promoted between the minimum and approximately halfway of the salary range for a job with consideration given to internal equity.