At a Glance
- Tasks: Lead security policy development and manage risk assessments for innovative technologies.
- Company: Join Navacord, a forward-thinking company prioritizing security and compliance.
- Benefits: Enjoy health and dental benefits while shaping the future of information security.
- Other info: Be part of a dynamic team focused on continuous improvement and innovation.
- Why this job: Make a significant impact on security strategy and protect vital information.
- Qualifications: 8+ years in information security with strong governance and risk management experience.
The predicted salary is between 103275 - 126225 $ per year.
WHAT YOU’LL BE RESPONSIBLE FOR:
- Policy & Standards
- Develop, review, and maintain security policies, standards, and procedures aligned with industry frameworks (NIST, ISO 27001, CIS, SOC 2, etc.)
- Ensure policies stay current with regulatory, contractual, and business requirements
- Assess security controls, gaps, and risk for new technologies, projects, and initiatives
- Evaluate third-party/vendor security controls and manage vendor risk assessments
- Conduct enterprise and project-level risk assessments
- Serve as a security advisor to business and engineering teams on control design and risk trade-offs
- Create and manage exception registry
- Establish and maintain a risk register; track identified risks through remediation or acceptance
- Manage the security exception process, including intake, review, approval, and tracking
- Own risk reporting to leadership, risk committees, and the board as needed
- Audit & Compliance
- Serve as primary point of contact for internal and external security audits
- Respond to customer security questionnaires and due diligence requests
- Support certification and compliance efforts (SOC 2, ISO 27001, etc.)
- Contribute to and help build the organization's security strategy and roadmap
- Identify emerging risks and recommend program improvements
- Cyber Program Delivery Overview
- Contributing, tracking and monitoring delivery of key cyber programs aligned to Cyber strategy and roadmap.
- Ensure costs are captured and reported on a timely basis
- Assist on all cyber events as it pertains to investigation, coordinating, and reporting
WHAT YOU BRING TO THE ROLE:
- 8+ years in information security, with 3+ years in a governance, risk, or advisory leadership role
- Strong knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2, CIS Controls)
- Experience running risk registers, exception processes, and vendor risk programs
- Experience with audits and customer security due diligence
- Strong communication skills; able to translate technical risk for executive audiences
- Relevant certifications preferred (CISSP, CISM, CRISC)
WHAT WE OFFER:
- Health and Dental Benefits
- This is for a new role.
Director Information Security in Toronto employer: Navacord Inc.
Navacord is an exceptional employer that fosters a dynamic and collaborative work environment, perfect for those who thrive in fast-paced settings. With a strong emphasis on employee growth, we offer comprehensive health and dental benefits, an RRSP match program, and additional paid time off, ensuring our team members feel valued and supported. Located in a vibrant office space, our culture encourages creativity and initiative, making it an ideal place for professionals looking to make a meaningful impact while advancing their careers.
We think you need these skills to ace Director Information Security in Toronto
Security Policy Development
Risk Assessment
Vendor Risk Management
Audit and Compliance
Communication Skills
Knowledge of Security Frameworks (NIST CSF, ISO 27001, SOC 2, CIS Controls)
Exception Management
