Director, Information Security

About the role

Indigo is seeking a senior leader to define and execute its enterprise information security strategy. The Director, Information Security will be responsible for protecting the confidentiality, integrity and availability of the company’s data across retail stores, e‑commerce platforms and corporate systems.

Key responsibilities

• Develop and implement a comprehensive information security strategy aligned with business objectives and risk tolerance.
• Lead Governance, Risk & Compliance (GRC), security architecture and security operations functions.
• Establish continuous IT risk assessment processes for retail, online and corporate environments.
• Ensure 100 % compliance with critical regulatory frameworks such as PCI‑DSS and PIPEDA through audits and control validation.
• Manage operational and capital budgets for security infrastructure and compliance initiatives.
• Drive enterprise‑wide security awareness training and monitor key performance metrics (MTTD, MTTR, breach prevention).

Required profile

• Proven experience in leading information security programs at an enterprise level.
• Strong understanding of retail and e‑commerce technology landscapes.
• Demonstrated ability to work cross‑functionally with senior leaders to embed security‑by‑design.
• Excellent analytical and risk‑management skills.

Required skills

• PCI‑DSS compliance
• PIPEDA compliance
• Governance, Risk & Compliance (GRC) frameworks
• Security Architecture
• Security Operations