Director, Information Security

Indigo Books & Music•Toronto, ON

91d•CA$170,000 - CA$190,000

About The Position

Accountable for establishing and executing the enterprise information security strategy to guarantee the confidentiality, integrity, and availability of Indigo’s information assets. This role proactively manages enterprise technology risk, ensures strict compliance with regulatory and industry frameworks, and safeguards data through the leadership of Governance, Risk & Compliance (GRC), Security Architecture, and Security Operations.

Requirements

Bachelor's or master’s degree in computer science, Information Systems, or other related field with at least 15 years of Information Technology experience.
Minimum of 10 years’ experience working in a leadership position.
Strong experience working with frameworks and regulations (PCI, ISO, PIPEDA, GDPR, etc).
Strong understanding of network design, tiered and secure architectures.
Strategic thinker with analytical and problem-solving experience.
A strong ability to influence and discuss complex technology problems in business language.
Must be an excellent and polished communicator who may be called upon to create and present materials to the Executive Committee and the Board of Directors.
Fast-learner and multi-tasker with the ability to adjust their outlook and leadership style to respond to quickly changing business priorities.

Nice To Haves

A professional certification (or suitable compensating experience) in the audit (CISA, etc) or security field (CISSP or CISM for instance) considered an asset.

Responsibilities

Develop and implement a comprehensive enterprise information security strategy that aligns with Indigo's business objectives and risk tolerance.
Partner cross-functionally at the senior level to embed security-by-design principles into all foundational technology and retail store operations.
Set and manage operational and capital budgets to ensure the cost-effective execution of security infrastructure and compliance initiatives.
Establish and maintain a continuous IT risk assessment framework to identify, quantify, and mitigate cybersecurity risks across retail, e-commerce, and corporate environments.
Guarantee strict adherence to critical data protection regulations and industry frameworks (e.g., PCI-DSS, PIPEDA) through systematic control validations and comprehensive security audits.
Formulate, publish, and enforce data-driven information security policies, standards, and operational guidelines across the organization.
Embed secure-by-design principles, NIST framework methodologies, and threat modeling into the lifecycle of all cloud, network, and retail store systems.
Oversee the enforcement of Zero Trust architectures, privileged access management, and robust authentication mechanisms to protect all enterprise assets.
Direct 24/7 Security Operations Center (SOC) activities, utilizing threat intelligence and data analytics to proactively detect and analyze anomalous network behavior.
Execute systematic vulnerability scanning, penetration testing, and data-backed remediation prioritization to continuously reduce the organizational attack surface.
Lead the enterprise security incident response process, directing rapid containment strategies and conducting empirical root-cause analysis to prevent recurrence.
Implement measurable, enterprise-wide security awareness training and phishing simulations to cultivate a resilient, security-first workforce.
Assess and continuously monitor the cybersecurity posture of IT vendors, supply chain partners, and integrated platforms to ensure strict alignment with Indigo's risk tolerance.
Accountable for the overall engagement, productivity, turnover and bench strength of the team.
Supports the creation and maintenance of a talent succession plan.
Collaborate with others to drive flexible and iterative solutions, quickly and easily.
Share technical knowledge with others and actively seek to learn from those more knowledgeable than yourself.
Help others see the impacts of their efforts and proactively engage other functions to get input.
Encourage others to freely share their point of view and be open to feedback.
Understand and follow Indigo's core HR process - staffing, performance management, rewards, and development.
Ensures all team members are provided with clear performance objectives that are aligned with Indigo Functional and Departmental goals.
Has the ability to see the total organization with an integrated perspective.
Develops positive and productive peer relationships.
Model Indigo’s beliefs and convey a positive image in everything you do.
Understands/demonstrates in a manner that promotes, and is aligned with, Indigo's Mission, Vision, Beliefs.
As a leader, hold others accountable in maintaining the integrity of Indigo's culture.
Celebrate diversity of thought and have an open mindset.
Take an active role in fostering a culture of continual learning, taking risks without the fear of making mistakes.
Embrace, champion, and influence change through your team and/or the organization.