Director, Security & IT Operations - Permanent - 19535

About The Opportunity

A well-reputed, global SaaS company in the Ottawa area is looking to add a Director, Security and IT Operations to their esteemed leadership group. Reporting to the CTO, you will function as their de facto Chief Information Security Officer (CISO) and designated Privacy Officer, in addition to leading the IT Operations function from a managerial and strategic perspective. You’ll lead a lean, high-performing team while actively executing high-impact work yourself, whether that means managing SOC2 compliance, auditing cloud spend, authoring security governance, or driving strategic direction of the IT infrastructure.

While this software company has an office presence in the National Capital Region, they boast a fully-remote work model and welcome candidates across Canada.

Duties

• Security Leadership (CISO): Rebuild and own our security program, including access control, vulnerability management, incident response, SOC2 compliance audits, and quarterly Board reporting
• Data Privacy Officer: Serve as Privacy Officer for Canadian jurisdictions, managing policies, privacy impact assessments, access requests, breach reporting, etc.
• Customer Trust & Sales Enablement: Lead enterprise security reviews and create a self-service Security FAQ knowledge base for Sales Engineers
• Vendor & FinOps Governance: Enforce vendor SLAs, optimize GCP/AWS cloud spend through rightsizing and commitments, and manage platform availability and disaster recovery
• IT Operations: Own availability, backups and disaster recovery, and change management for production systems, including our SQL Server databases. Partner with Engineering on production readiness for releases and infrastructure changes
• Team Leadership: Direct and mentor a lean platform team, setting priorities, operating rhythm, and team growth as the platform scales

About You

• 8+ years of experience in IT infrastructure and operations, DevSecOps or Security leadership, ideally within a scaling SaaS environment, and 3+ years of team leadership experience
• Proven Security Leadership: Hands-on experience building or scaling a security program, including direct ownership of SOC2 compliance
• Strong technical background within IT infrastructure and Windows environments, database administration (SQL Server), etc.
• Data Privacy Expertise: Working knowledge of regional or global data privacy regulations within Canada and the U.S.
• Production Cloud & FinOps Experience: Hands-on experience operating production infrastructure in GCP or AWS, with a proven track record of cloud cost reduction
• Board & Executive Presence: Comfort presenting risk posture and strategy to executive leadership and the Board
• Operator Mindset: A strong preference for active execution alongside strategic management
• Bonus: background in high-throughput communications systems, containerization tools (Docker, Kubernetes, etc.), IaC (Terraform, Ansible), CI/CD pipelines, etc.
• Bonus: Professional certifications in security, privacy, or cloud architecture (e.g., CISSP, CISM, CIPM, AWS or GCP cloud, etc.)

About the Job

• Competitive salary ranging from $160,000 to $200,000
• Generous vacation allotment
• Comprehensive benefits package

Please note that all candidates must be permitted to work in Canada to be considered for this opportunity.