ABOUT INNOCAP

Innocap is the leading Dedicated Managed Account Platform (DMAP) globally, providing institutional allocators with a superior way to structure, access, and oversee their alternative investments. With over US$135 billion on the platform and more than 570 employees across the globe, we are transforming how allocators access and manage alternative investments. Powered by our people, processes and purpose‑built technology, Innocap is seeking forward‑thinking individuals to join us on our exciting journey. At Innocap, you won't just manage what’s here today. You’ll build what comes next. Here, careers are about building, not maintaining. We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry. At Innocap, your work makes a difference every day – and helps build what’s next for our clients, the industry, and your career. Because the future doesn’t build itself. We do.

ABOUT THE ROLE

As Innocap’s senior cybersecurity leader, the Global Head of Cybersecurity defines and executes the firm’s global cybersecurity strategy and operating model. Reporting to the Chief Technology Officer, this role safeguards the confidentiality, integrity, availability and resilience of Innocap’s information assets, technology platforms and critical business services while enabling the firm’s growth, innovation and client commitments. Operating at an enterprise level, the role advises executive leadership on cyber risk, establishes the firm’s security posture and risk‑based priorities,



and provides independent challenge and escalation on material cybersecurity matters. The Global Head leads a global team of employees, consultants and security partners and works closely with Technology, Risk, Compliance, Legal, Privacy, Internal Audit and business leaders to embed security by design across the organization.

Global Head of Cybersecurity responsibilities

- Own and continuously evolve the global cybersecurity strategy, target operating model, policies, standards and multi‑year roadmap, aligned with the firm’s business strategy, risk appetite and recognized frameworks such as SOC 2 and ISO/IEC 27001.
- Establish a consistent enterprise approach to identifying, assessing, prioritizing, treating and accepting cyber risk.
- Maintain a clear view of material risks, control gaps, threat exposure and remediation priorities, and integrate cyber risk into enterprise risk management.
- Provide concise, decision‑oriented reporting to executive leadership and relevant governance bodies on cyber risk, threat trends, incidents, control effectiveness, regulatory exposure, investment priorities and program performance.
- Escalate material risks and incidents promptly.
- Set security architecture principles and ensure security is embedded throughout the technology and product lifecycle, including Microsoft Azure, Microsoft 365, identity, networks, applications, data platforms, business intelligence,



software development, cloud services and artificial intelligence solutions.
- Lead the global security operations capability, including monitoring, threat intelligence, detection engineering, vulnerability management and incident response.
- Act as the executive escalation point for significant events and direct containment, investigation, recovery, root‑cause analysis and lessons learned.
- Strengthen organizational resilience by defining cyber crisis management, response and recovery capabilities; conducting exercises and simulations; and partnering with Technology and the business to validate recovery strategies for critical services and data.
- Oversee the security strategy for identity and access management, privileged access, data protection, encryption, information handling and zero‑trust principles.
- Ensure controls are proportionate to data sensitivity, business criticality and evolving threats.
- Own the cybersecurity components of the third‑party risk management lifecycle, including due diligence, risk tiering, contractual requirements, ongoing monitoring, issue remediation and incident coordination for critical vendors and cloud service providers.
- Build, develop and retain a high‑performing global cybersecurity team and partner ecosystem.
- Define explicit accountabilities, succession and capability plans; oversee budgets and vendors; and drive enterprise‑wide security awareness, role‑based learning and a strong culture of cyber accountability.

PRIMARY QUALIFICATIONS & SKILLS

University degree or equivalent relevant training in cybersecurity, computer science, information technology, engineering or a related field.

Typically 15+ years of progressi

📌 Global Head of Cyber Security (Toronto)
🏢 Innocap Investment Management
📍 Toronto