Director Information Security

About the role

Indigo is seeking a senior leader to define and execute its enterprise information security strategy. The Director will protect the confidentiality, integrity, and availability of all information assets across retail, e‑commerce, and corporate environments.

Key responsibilities

• Develop and implement a comprehensive information security strategy aligned with business objectives and risk tolerance.
• Partner with senior leaders to embed security‑by‑design principles into technology platforms and store operations.
• Manage operational and capital budgets for security infrastructure and compliance initiatives.
• Establish a continuous IT risk assessment framework to identify, quantify, and mitigate cyber risks.
• Ensure 100% compliance with critical regulations and industry frameworks such as PCI‑DSS and PIPEDA through audits and control validations.
• Create, publish, and enforce data‑driven security policies, standards, and procedures.

Required profile

• Proven senior‑level experience leading information security, GRC, and security operations in a large, multi‑channel organization.
• Strong track record of influencing cross‑functional teams and senior executives.
• Deep understanding of regulatory requirements and best‑practice frameworks.
• Excellent analytical and communication skills with a data‑driven mindset.

Required skills

• Security Architecture
• Security Operations
• Governance, Risk & Compliance (GRC)