Director of IT Security

About the role

This senior leadership position is responsible for defining and executing a comprehensive cybersecurity strategy for a fully remote, international organization based in Canada. You will safeguard enterprise systems, client data, and distributed infrastructure while embedding security into every business layer.

Key responsibilities

• Define and implement the enterprise cybersecurity roadmap aligned with business growth.
• Establish security governance, policies, standards, and procedures.
• Lead risk assessments, threat modeling, and vulnerability management programs.
• Oversee incident response planning, tabletop exercises, and post‑incident analysis.
• Manage identity and access management, endpoint security, and privileged access controls.
• Drive compliance initiatives such as SOC 2, ISO 27001, and NIST, ensuring audit readiness.
• Conduct third‑party vendor security assessments and ongoing risk monitoring.
• Promote a security‑first culture through awareness programs and executive reporting.

Required profile

• 7+ years of experience in cybersecurity, information security, or enterprise risk management.
• 3+ years of leadership experience managing security programs in complex, distributed environments.
• Proven ability to translate technical risks into business impact for senior leadership.
• Strong executive communication and stakeholder management skills.

Required skills

• SOC 2, ISO 27001, NIST Cybersecurity Framework
• Identity and Access Management (IAM)
• Endpoint Security
• Incident Response
• Vulnerability Management
• Risk Assessment and Threat Modeling
• Cloud‑first SaaS platforms: Google Workspace, Salesforce, Okta, NetSuite