Product Security, Principal

Product Security Principal
Location : Canada, Hybrid (on-site requirements to be confirmed)
Language: Excellent written and verbal communication skills in English
Background Check Requirement : Criminal record, identity, public safety, employment, education, credit and social media checks may be required. Security clearance eligibility may also apply.

About the Opportunity

Are you a strategic cybersecurity leader who thrives at the intersection of technology, risk and business innovation? An established organization in Canada's financial technology sector is seeking a Product Security Principal to help protect critical digital products and services that Canadians rely on every day. In this influential role, you'll serve as a senior security authority, partnering with Product, Engineering, Operations, Legal, Risk and Compliance teams to embed security throughout the product lifecycle. You'll balance innovation with protection, helping teams make confident, risk-informed decisions.

What's In It for You

• A flexible hybrid work environment that supports work-life balance
• Comprehensive employer-paid benefits, generous vacation and wellness days
• A competitive employer-funded RRSP program and parental leave top-up
• Opportunities to influence enterprise security strategy and collaborate with innovative technology teams
• An inclusive, purpose-driven culture that values professional growth and collaboration

Your Responsibilities

• You’ll serve as a trusted security advisor, guiding product strategy, architecture and operational decisions.
• You’ll lead security risk assessments, threat modelling and secure-by-design reviews across products and platforms.
• You’ll oversee security governance, regulatory compliance, audits, third-party risk and remediation planning.
• You’ll partner with technical specialists to strengthen cloud, application, identity and infrastructure security.
• You’ll guide incident response, vulnerability management, resilience and continuous improvement initiatives.
• You’ll influence security investments, budgets and priorities while communicating risks to senior stakeholders.

Skills and Qualifications

• 10+ years of cybersecurity experience spanning security architecture, AI for security, GRC, cloud, application or operational security.
• Strong knowledge of ISO 27001, NIST CSF, PCI DSS, privacy regulations, audit practices and enterprise risk management.
• Hands-on familiarity with AWS, Azure, APIs, distributed systems, containers and hybrid infrastructure.
• Expertise in Secure SDLC, DevSecOps, threat modelling, security testing, vulnerability management and incident response.
• Understanding of zero trust, least privilege, encryption, resilience, third-party risk and security investment planning.
• Exceptional communication, judgment and stakeholder influence, with CISSP, CCSP, CISM, CRISC or CCISO certification considered an asset.

Note from the Hiring Manager

"We’re looking for someone who can see the bigger picture, connect security with business priorities and build trusted relationships across teams. You’ll have the opportunity to make a meaningful impact while helping us innovate securely."

We appreciate the time and effort all applicants invest in their submissions. Please note that only candidates shortlisted for this role will be contacted directly. However, your profile will remain under consideration for future opportunities that align with your experience and career goals. All qualified applicants will receive fair consideration for employment. We welcome individuals of all backgrounds, experiences, and identities including those who identify as women, members of racialized groups, Indigenous Peoples, persons with disabilities, and 2SLGBTQIA+ communities. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions. Our human recruiters review all applications and always make the final hiring decision. On occasion, we also use AI-assisted tools to help review applications.