WHAT YOU’LL BE RESPONSIBLE FOR:Policy & StandardsDevelop, review, and maintain security policies, standards, and procedures aligned with industry frameworks (NIST, ISO 27001, CIS, SOC 2, etc.)Ensure policies stay current with regulatory, contractual, and business requirementsAssess security controls, gaps, and risk for new technologies, projects, and initiativesEvaluate third-party/vendor security controls and manage vendor risk assessmentsConduct enterprise and project-level risk assessmentsServe as a security advisor to business and engineering teams on control design and risk trade-offsCreate and manage exception registryEstablish and maintain a risk register; track identified risks through remediation or acceptanceManage the security exception process, including intake, review, approval, and trackingOwn risk reporting to leadership, risk committees, and the board as neededAudit & ComplianceServe as primary point of contact for internal and external security auditsRespond to customer security questionnaires and due diligence requestsSupport certification and compliance efforts (SOC 2, ISO 27001,



etc.)Contribute to and help build the organization's security strategy and roadmapIdentify emerging risks and recommend program improvementsCyber Program Delivery OverviewContributing, tracking and monitoring delivery of key cyber programs aligned to Cyber strategy and roadmap.Ensure costs are captured and reported on a timely basisAssist on all cyber events as it pertains to investigation, coordinating, and reportingWHAT YOU BRING TO THE ROLE:8+ years in information security, with 3+ years in a governance, risk, or advisory leadership roleStrong knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2, CIS Controls)Experience running risk registers, exception processes, and vendor risk programsExperience with audits and customer security due diligenceStrong communication skills; able to translate technical risk for executive audiencesRelevant certifications preferred (CISSP, CISM, CRISC)WHAT WE OFFER:Health and Dental BenefitsThis is for a recent role.Navacord DOES NOT utilize artificial intelligence in the screening, assessment, or selection of applicants for this position#J-18808-Ljbffr

📌 Director Information Security (Toronto)
🏢 Navacord
📍 Toronto