Director Information Security

About the role

Indigo is seeking a senior leader to define and execute its enterprise information security strategy. The Director will safeguard the confidentiality, integrity, and availability of all information assets across retail, e‑commerce, and corporate environments.

Key responsibilities

• Develop and implement a comprehensive security strategy aligned with business objectives and risk tolerance.
• Lead Governance, Risk & Compliance (GRC), Security Architecture, and Security Operations functions.
• Partner with senior leaders to embed security‑by‑design principles into technology and store operations.
• Manage operational and capital budgets for security infrastructure and compliance initiatives.
• Establish a continuous IT risk assessment framework and drive remediation across the enterprise.
• Ensure 100% compliance with critical regulations and frameworks such as PCI‑DSS and PIPEDA through audits and control validations.
• Create, publish, and enforce data‑driven security policies, standards, and procedures.
• Oversee security awareness training and monitor key performance metrics (MTTD, MTTR, breach prevention).

Required profile

• Proven senior leadership experience in information security within a large, multi‑channel organization.
• Deep understanding of regulatory requirements (PCI‑DSS, PIPEDA) and industry best practices.
• Strong track record of building and managing GRC, security architecture, and security operations teams.
• Excellent communication skills to influence senior stakeholders and drive a security‑first culture.

Required skills

• PCI‑DSS compliance
• PIPEDA compliance
• Governance, Risk & Compliance (GRC) frameworks
• Security Architecture design
• Security Operations management
• Enterprise risk assessment
• Security awareness training programs