Job Summary:

:

Position: Portfolio Director, IT & Data Security

Location: Flexible / Hybrid. Toronto Area preferred

Modaxo acquires, strengthens, and grows software and technology companies enabling the daily movement of people. Modaxo is wholly owned by Constellation Software Inc (‘CSI’), a publicly listed corporation on the Toronto Stock Exchange.

Position Overview:

An important role, arising due to growth, overseeing the IT and Data Security function in a substantial and varied global Portfolio of businesses, which continues to have an ambitious vision for both acquired and organic growth. Modaxo acquires multiple companies each year and never sells. As such, the breadth of responsibility continually expands.

Reporting directly to the Modaxo Global CFO and working closely with Modaxo Portfolio IT Leads as well as (initially) Volaris Chief Information Officer, the primary objectives of the role will be:

- Develop an IT & Data Security Strategy, in collaboration with Modaxo Portfolio IT Leads that allows Modaxo to scale in an autonomous manner, whilst ensuring it complies with CSI standards and governance framework

- Oversee Modaxo IT and Data Security programs, including but not limited to strategic matters such as establishing policies and then building controls to ensure compliance, setting standards as regards systems, auditing from time-to-time, and building a repository of best practices to be shared between the companies;

- Work with the Modaxo Portfolio IT Leads to ensure effective Due Diligence and Integration of a number of newly acquired businesses each year.

This role will be split between work from home, and regular presence in our Mississauga office. International travel will also be required from time to time, either to support an Acquisition project or to join one of our regular Summits, Academies, Leadership or other Personal Development events.

Duties & Responsibilities:

Responsibilities will include, but are not limited to the following:

- Overall responsibility for Modaxo IT & Data Security – with an important focus on cyber risk management.

- Review Modaxo’s current IT & Data Security compliance with Volaris’ Governance and Risk framework, and take the lead in oversight, compliance, control setting, and audit. Transition this to a separate Modaxo framework.

- Oversee Modaxo’s infrastructure and security architecture across more than 30+ geographies globally.

- Oversee the enterprise’s security awareness training program.





- Create and maintain the enterprise’s IT & Data Security documents (policies, standards, baselines, guidelines & procedures).

- Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.

- Provide assurance to the Board of Directors regarding adequacy of and compliance to the governance framework; as well as compliance to regulatory/contractual obligations.

- Leverage Modaxo combined purchasing power, without impacting the decentralized ethos of the business

- Support Modaxo Portfolio IT Leads to identify solutions to IT and Data Security issues found during due diligence and ensure plans are in place post-close to mitigate risks.

- Lead IT and Data Security due diligence on certain investments (typically once every 2 years)

- Champion adoption of Policies and Best Practices globally

- Undertake Modaxo-global projects and analysis as required by Modaxo Leadership team;

- Coordinate and oversee external consultants as required.

Education & Experience:

- Educated to Degree level or beyond in the field of computer science

- Minimum 10 year of IT & Data Security experience, including network and systems at an architect level (incl. enterprise-wide agreements).

- Hosting environment (Azure; AWS) architecture and supplier management experience.

- GRC implementation and usage;

- Strong project management skills coordinating multiple concurrent highly complex and high priority projects with considerable internal and external dependencies;

- Extensive experience in decentralised business models

- Extensive experience in enterprise infrastructure architecture design

- Experience in enterprise security architecture design

- Experience and knowledge of security frameworks – SCF, SANS20, ISO27001, NIST, etc.

- Experience and knowledge of security/privacy/regulatory standards – GDPR, PCI, HIPPA, etc.

- ISO/IEC 27001 implementation and auditing compliance experience an advantage





- Software industry experience an asset

- Experience in a global business, handling multiple stakeholders, time zones, and regulatory regimes an asset

- Able to travel up to 3-4 times per year, globally

Personal qualities

- Globally minded, understanding how to build partnerships across geographies

- Ability to maintain confidentiality and remain objective while working with sensitive and confidential materials;

- Exceptional communication skills; articulate and exudes passion

- Demonstrated track record of integrity, ethics and dependability

- Self-aware and open to feedback, whilst having sufficient courage to make independent decisions and work autonomously

- Must be willing to travel internationally as required (typically 3-4 times per annum).

Evolving Structure

This is an evolving role, triggered by the growth of Modaxo and encouragement from CSI/Volaris to become increasingly independent. Over time, we would expect to build out IT/Data Security function within Modaxo, potentially at either (or both) Global and/or Regional levels. Modaxo aspires to become an independent, listed entity and this role will play a part in preparing for that.

As we grow and continue to acquire, we regularly move into a new area – of geography, or of business, or of activity, or of regulation. The successful candidate will thrive on learning continuously, navigating ambiguity and exercising judgement to identify risks and then leverage knowledge, network and advisors to find a pragmatic solution. There will be support in this from Modaxo and other CSI teams, but the candidate needs to be proactive in seeking that support, as well as self-starting in building their own knowledge.

Ours is a dynamic, evolving environment. In a ‘typical’ year, it would be reasonable to expect multiple Acquisitions; probably including at least 1 in a current jurisdiction; plus an organic growth initiative into a new geography; plus a legal or management re-structure within one of our Regions. Layer on top of this the dynamic cyber-threat world we all live in and the changing legislative landscape globally and you quickly find a demanding and stimulating role.

The successful candidate will be able to build relationships and develop talent across both direct and ‘dotted line’ reporting structures and simultaneously be able to establish a cost-effective network of trusted external advisors globally.

Worker Type:

RegularNumber of Openings Available:

1

📌 Portfolio Director, IT & Data Security (Ontario)
🏢 Modaxo
📍 Ontario