Managing Director and Chief Information Security Officer

Ontario Teachers' Pension Plan • Toronto, ON

6d • Hybrid

About The Position

The Managing Director & Chief Information Security Officer (CISO) leads the evolution of an enterprise-wide cybersecurity and cyber resilience program—protecting the organization’s assets, data, operations, and reputation in an increasingly complex global threat landscape. This role sets the strategy, advances modern security capabilities, and enables secure innovation, including the responsible adoption of AI and emerging technologies.

Requirements

• 15+ years of progressive experience in cybersecurity, technology risk, or information security, including 7+ years in senior leadership roles
• Undergraduate degree required
• CISSP certification required
• Proven leadership of enterprise-scale cybersecurity programs and large transformation initiatives
• Executive-level stakeholder management experience, including advising Boards and senior leadership
• Deep expertise across cybersecurity domains (e.g., security operations, threat management, governance, resilience)
• Strong knowledge of cloud security, IAM, data protection, and control frameworks
• Advanced understanding of emerging technologies and risks, including AI, automation, and digital ecosystems
• Experience leading cyber incident response and recovery in complex, global environments
• Strong ability to communicate complex risks clearly to business leaders and influence decision-making
• Demonstrated success building and leading high-performing, inclusive teams
• Experience managing budgets, vendors, and strategic partnerships
• Experience supporting secure adoption and governance of emerging technologies, including AI-enabled capabilities

Nice To Haves

• additional certifications considered an asset

Responsibilities

• Act as the enterprise authority on cyber risk, ensuring risks are identified, prioritized, and clearly communicated
• Define and deliver the enterprise cybersecurity and resilience strategy aligned to business priorities
• Advise the Board and executive committees on cybersecurity risks and resilience strategies
• Evolve and modernize security capabilities in response to emerging threats and transformation initiatives
• Oversee core security domains including security operations, threat intelligence, IAM, cloud security, and data protection
• Establish and maintain governance frameworks, policies, standards, and controls
• Lead enterprise-wide cybersecurity awareness and culture initiatives
• Direct response to cybersecurity incidents, ensuring effective recovery and continuous improvement
• Enable secure adoption of cloud, digital platforms, automation, and AI technologies
• Provide oversight of AI security governance and emerging risk management (e.g., adversarial AI, data leakage)
• Build and maintain external partnerships with regulators, peers, and intelligence-sharing networks
• Lead and develop high-performing cybersecurity teams, including workforce and capability planning

Benefits

• Comprehensive employer paid benefits coverage
• Retirement income through a defined benefit pension plan
• The opportunity to invest back into the fund through our Deferred Incentive Program
• A flexible work environment combining in office collaboration and remote working
• Competitive time off
• Our Flexible Travel Program gives you the option to work abroad in another region/country for up to a month each year
• Employee discount programs including Edvantage and Perkopolis

What This Job Offers

• Job Type: Full-time
• Career Level: Executive