Who We Are: Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives. Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With: The Product Security, Principal is accountable for representing the Information Security function across assigned product lines, platforms, or technology domains, acting as the forward-deployed CISO delegate and senior security authority for that scope.

This role is responsible for ensuring security functions are embedded across the full lifecycle of assigned products and services, from strategy and design through delivery, operation, assurance, and ongoing improvement.

The Product Security, Principal partners with multiple teams, including Product, Engineering & Operations, Delivery Excellence, InfoSec, Legal, Risk, Compliance, and Finance teams to provide risk-based direction, coordinate security outcomes, and ensure business decisions are informed by a complete view of security risk, required controls, security investment needs, regulatory, and contractual obligations.





The role leverages central InfoSec capabilities as needed, including Frontier AI, GRC, Cloud Security, Application Security, Vulnerability Management, Threat Intelligence, SOC, Incident Response, Identity, Security Architecture, and Third-Party Risk, while remaining accountable for the integrated security posture of the assigned product or domain.

What You Will Do:

Serve as the primary Information Security advisor and representative for assigned products and services.

Provide strategic security guidance to support business, technology, and operational decision-making.

Identify, assess, monitor, and elevate security risks, ensuring appropriate controls and risk treatment plans are in place.

Ensure compliance with security policies, regulatory requirements, industry standards, and contractual obligations.

Support audits, regulatory reviews, security assessments, and governance reporting activities.

Review and advise on security requirements for third‑party vendors, contracts, and external partnerships.

Lead security reviews of product architectures, design changes, and major initiatives to ensure secure‑by‑design principles are embedded throughout the product lifecycle.

Evaluate threat models, data flows, technology solutions, and third‑party integrations to identify and mitigate security risks.





Partner with security specialists and technology teams to develop and implement effective security strategies and controls.

Support security investment planning, budgeting, vendor management, and prioritization of security initiatives.

Provide guidance on remediation strategies, cost considerations, and security‑related business cases.

Ensure alignment with vulnerability management, monitoring, incident response, resilience, and recovery programs.

Provide leadership and risk‑based guidance during security incidents, investigations, and escalations.

Drive continuous improvement through lessons learned from incidents, audits, assessments, and emerging threats.

Act as a trusted advisor to business, technology, risk, legal, and operational stakeholders to enable secure business outcomes.

Coordinate security resources and influence cross‑functional teams to achieve security, compliance, and resilience objectives.

Promote security awareness and foster a strong security culture across product development, delivery, and operations.

What You Bring

10+ years of experience in cybersecurity, information security, AI for security, security architecture, governance, risk and compliance (GRC), cloud security, application security, security operations, or related disciplines.

Proven experience serving as a trusted security advisor, security lead, or product‑aligned security partner, influencing strategic security and risk decisions.

Solid knowledge of enterprise security risk management, including risk assessment, control design, risk treatment, exception management, and executive risk communication.

Deep understanding of security and compliance frameworks such as ISO 27001, NIST Cybersecur

📌 Product Security, Principal (Winnipeg)
🏢 Interac
📍 Winnipeg