Director, Information Security in Surrey

Kwantlen Polytechnic University (KPU) is Canada's only polytechnic university, proudly serving the South Fraser region for more than 40 years. With campuses in Surrey, Richmond, Langley, and Cloverdale, KPU is deeply connected to the communities it serves and to the diverse cultures, backgrounds, and lived experiences of its students. Through academic excellence, applied learning, innovation, and strong industry and community partnerships, KPU prepares students for meaningful futures. As an open-access university, KPU is powered by the people who live and work here. We believe every employee plays a meaningful role in supporting student learning and success. We are honoured to carry the name of the Kwantlen First Nation and are committed to equity, inclusion, reconciliation, and respectful relationships. As one of BC's Top Employers, KPU is dedicated to fostering a supportive, inclusive, and engaged workplace where employees feel valued, connected to purpose, and empowered to make an impact.

We are currently seeking a strategic and forward-thinking Director, Information Security to join our Information Technology (IT) team! This is an exciting opportunity to lead KPU's enterprise cybersecurity program and help shape the future of information security across a dynamic, multi-campus institution.

Job Overview: Reporting to the Chief Information Officer, this senior leadership role oversees a team responsible for information security technologies and incident management while providing strategic direction for the protection of the University's systems, data, and digital services. The Director is responsible for advancing KPU's cybersecurity strategy, policies, controls, and programs that safeguard the confidentiality, integrity, and availability of KPU's information assets. Working closely with IT leaders and academic departments across KPU, the Director translates organizational priorities and risk requirements into practical security strategies and technical solutions. This role balances security, innovation, agility, and operational effectiveness while leading initiatives that strengthen KPU's overall security posture.

Education And Experience: Bachelor's degree in information system; A minimum of seven years of IT experience, with five years in an information security role and at least two years in a supervisory capacity; Certified Information Systems Security Professional (CISSP) information security is preferred; Or an equivalent combination of education, training and experience.

Knowledge, Skills & Abilities: Proven expertise in identifying, assessing, and prioritizing information security risks. Implement risk mitigation measures and ensure compliance with relevant regulations and standards. Strong leadership persuasion abilities and experience working with the risk management team and a variety of diverse business units. Strong project management skills and experience in creating and managing complex project plans, including budgeting and resource allocation. Demonstrated experience working with security tools, technologies, mechanisms and policy to support and protect business information infrastructure in a large organization. An understanding of operating system internals and network protocols. Familiarity with the principles of cryptography and cryptanalysis. Knowledge and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans. Experience developing and maintaining policies, procedures, standards and guidelines using a consultative and inclusive approach. Experience with common information security management frameworks. Experience in application technology security testing (white box, black box and code review) and in system technology security testing (vulnerability scanning and penetration testing). Familiarity with applicable legal and regulatory requirements for post-secondary education in the Province of British Columbia. Proven ability to communicate security technical concepts to nontechnical people to enhance understanding and drive decisions that lead to positive outcomes. Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment of strategies. Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel and other internal and external University stakeholders.

Competencies: Leadership: KPU employees inspire, coach, mentor, and support students, employees and KPU as a whole in achieving objectives. Accountability: KPU employees demonstrate fiscal accountability and take ownership for their actions, decisions and results. Continuous Improvement: KPU employees take a creative approach to opportunities, exploring unique ways to create optimal value for the KPU community. Collaboration: KPU employees work in functional and cross-functional teams, coming together to solve complex issues and accomplish objectives that will benefit the KPU community.

Note to Applicants: Kwantlen Polytechnic University welcomes and encourages applications from equity-deserving groups and diverse experiences including, but not limited to, Indigenous people, racialized people, people with disabilities, and members of the 2S/LGBTQIA+ community. If there are any barriers that you are experiencing or an accommodation that we can provide to support you through the application process, please reach out to us at talentacquisition@kpu.ca. Kwantlen Polytechnic University is committed to protecting the safety and welfare of employees, students, and the general public, and upholding the reputation and integrity of the University. For this reason, final applicants will be asked to undergo a background check. We thank all applicants for their interest in employment with KPU. Only candidates who are legally eligible to work in Canada will be considered; only those selected for an interview will be contacted.