Director, Information Security

Director, Information Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Information Security based in Canada.

This is a senior cybersecurity leadership role responsible for strengthening an enterprise-wide capability to detect, investigate, contain, and prevent cyber threats. You will lead security operations, detection engineering, threat intelligence, cyber resilience, and incident response functions. The role combines strategic leadership with operational oversight, ensuring security teams, technologies, processes, and partners work effectively together. You will drive improvements in threat visibility, attacker dwell-time reduction, incident containment, and overall operational readiness. The position offers significant influence over security architecture, tooling, automation, response frameworks, and organizational resilience. You will work closely with IT and other stakeholders across cloud and on-premises environments while managing critical third-party security relationships. This opportunity is well suited to an experienced security leader who can build mature, measurable, and continuously improving cyber defense capabilities.

Accountabilities:

• Define and mature security operations frameworks, including runbooks, escalation models, operational procedures, and response standards.
• Build and lead security operations capabilities supporting continuous monitoring, investigation, triage, escalation, and incident response.
• Improve detection coverage and containment effectiveness through analytics, automation, orchestration, and modern security engineering practices.
• Collaborate with IT teams to develop secure integrations, logging pipelines, security baselines, and monitoring capabilities across on-premises and cloud environments.
• Oversee the security technology portfolio and establish roadmaps that continuously improve capability, coverage, and operational maturity.
• Guide security configuration standards, system hardening, patching strategies, and vulnerability prioritization.
• Plan and lead tabletop exercises, simulation drills, and other preparedness activities, incorporating lessons learned into security operations.
• Manage relationships with external security providers and ensure service levels, performance, quality, and contractual commitments are maintained.
• Oversee threat intelligence collection, enrichment, analysis, and operational application while maintaining visibility into the evolving threat landscape.
• Lead proactive threat-hunting, anomaly-detection, and adversary-simulation activities to identify and address potential threats.
• Oversee digital forensics, evidence handling, investigation activities, and post-incident reporting.
• Manage the incident response program, including response roles, escalation paths, communication frameworks, and incident coordination.
• Develop, maintain, and regularly test incident response playbooks covering emerging and ongoing cyber threats.
• Track security program maturity, key risk indicators, operational performance, and compliance progress.
• Develop dashboards, metrics, and executive-level reports that provide clear visibility into cybersecurity performance and risk.

Requirements:

• Bachelor's degree in Business Administration, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.
• 10+ years of professional cybersecurity experience, including at least 7 years leading incident response, security operations, and threat management programs.
• Extensive expertise with modern security operations technologies, including SIEM, SOAR, XDR/EDR, threat intelligence platforms, forensic tools, and cloud-native security monitoring solutions.
• Strong understanding of cybersecurity operations, threat detection, incident response, threat hunting, digital forensics, and cyber resilience.
• Demonstrated experience building and leading high-performing security teams and developing mature operational processes.
• Strong ability to establish security frameworks, procedures, escalation models, metrics, and continuous improvement programs.
• Experience working across cloud and on-premises environments, including security logging, integrations, hardening, monitoring, and vulnerability management.
• Excellent verbal and written communication skills, with the ability to communicate effectively with technical teams, business stakeholders, and senior leadership.
• Strong analytical, decision-making, problem-solving, and crisis-management capabilities.
• Ability to manage multiple priorities and third-party relationships while maintaining a strong focus on security outcomes.
• Certifications such as CISSP, CISM, CISA, and/or CRISC are preferred.
• Experience working in regulated industries is preferred.

Benefits:

• Competitive annual salary range of $210,000–$260,000.
• Full-time, experienced-level leadership opportunity.
• Opportunity to lead and mature enterprise-wide cybersecurity and cyber resilience capabilities.
• High-impact role with broad exposure across security operations, threat management, incident response, and technology.
• Collaborative environment focused on professional development, innovation, and problem solving.
• Flexibility designed to support personal and professional priorities.