Cyber Security Risk Director
Fidelity Canada
Job Description
You will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement.
The work location for this role is 483 Bay Street in Toronto until approximately late 2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.
Current work authorization for Canada is required for all openings.
Who We Are
At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.
Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and expertly.
What You Will Do
The Cyber Security Risk Director is a leadership position responsible for leading the development of Fidelity Canada’s cyber security risk posture as part of the second line of defense. This role ensures that cyber security risks are effectively identified, assessed, mitigated, and monitored across Fidelity Canada (Fidelity Clearing Canada (FCC), Fidelity Investments Canada (FIC) and Fidelity Canada Institutional Management (FCIM)). The Director will be a certified subject matter expert in cyber security risk who provides strategic advisory support in the development and maintenance of a comprehensive cyber security risk framework and will work closely with key stakeholders to enhance the organization’s resilience against emerging threats.
The Director will collaborate with key stakeholders in Information Security, Enterprise Risk, Technology Risk, and other relevant functional stakeholders across Fidelity Canada, Fidelity International Limited (FIL) and Fidelity Management & Research Company (FMR) to ensure cohesive and effective cyber security risk management. This role is responsible for advancing and safeguarding Fidelity Canada’s reputation and operational effectiveness through the continuous enhancement of its cyber security risk posture.
Key responsibilities include:
- Oversight and accountability of the cyber security risk framework and methodologies, conducting both planned and ad-hoc technical risk reviews, evaluating technology and business initiatives with cyber security implications
- Represent Fidelity Canada on FIL cyber governance committees
- Lead the development of Fidelity Canada’s Cyber Risk Oversight Program
- Design, implement, and maintain a comprehensive cybersecurity risk oversight program supported by well-defined policies that align with enterprise risk appetite, regulatory requirements, and industry standards
- Identify and assess cybersecurity risks and advise business units and Information Security stakeholders on risk issues to ensure awareness and accountability for cybersecurity risks.
- Monitor external trends and evaluate potential impacts to business strategy; provide documented analytical insights of the risk profile, while ensuring a sound operational control environment through establishment of effective internal controls.
- Perform review and challenge of first line of defense cyber risk management processes (e.g. risk assessments, control evaluations, risk metrics, mitigation plans, risk acceptances etc.) and communicate risk opinions at various levels of management.
- Advise on remediation strategies of any inconsistencies and gaps identified through independent assessments of key cybersecurity processes.
- Provides second line of defense leadership and subject matter expertise during response to major cyber incidents including cyber-security related privacy events and coordinate second line of defense engagement and response.
- Develop and provide regular reporting to senior management committees across Fidelity.
- Responsible for ownership of relationships with external cyber security risk experts
- Ensure all activities and deliverables achieve their timeliness, quality, and accuracy service levels.
What We Are Looking For:
- Completed University Degree
- 7+ years of related work experience, in which a subset is practical experience in multiple areas of cyber risk and 5+ years of experience at the management level
- Experience with developing and implementing cybersecurity risk oversight programs in the financial services sector, preferably in a 2nd or 3rd line of defense
- Knowledge of current and evolving regulatory requirements, current trends in cyber threats/vulnerabilities
- Advanced knowledge of cyber risk management best practices and how to implement them
- Experience with risk frameworks and standards such as NIST CSF and ISO 27001
- Experience in Cybersecurity risk consulting in the financial services sector, Cyber security audit or in a similar second line of defense role is an asset
- Proficiency with the COBIT risk framework is considered advantageous
- Professional Certifications in Cybersecurity, such as CRISC (ISACA), CISM (ISACA), CISA (ISACA), CISSP (ISC²), and CCSP (ISC²)
The Skills You Bring
- Demonstrated leadership skills and ability to lead oversight activities across different teams
- A keen sense of risk anticipation with attention to details and ability to challenge status quo
- Ability to build relationships, influencing and negotiating across diverse stakeholders across the lines of defense, including senior management
- Excellent written and oral communication skills
- Understanding of systems architecture
- Excellent analytical, organizational and project management skills.
- Strong risk, process, and control validation and/or assessment skills
Some of the ways we’ll help you feel valued and supported as part of our team:
- Flexible working arrangements - 100% remote, hybrid, and in office options
- Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
- Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $6000 annually for mental health services and therapy
- Parental leave top-up to 100% of your salary for a period of 25 weeks
- Up to $650 for home office equipment
- Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
- Diversity and inclusion programs, including an active network of Employee Resource Groups
- Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.
We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process as well as an AI screening tool that assists in screening and assessing applications. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.
Fidelity Canada is an equal opportunity employer
Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.
Accommodation during the application process
Fidelity Canada welcomes and encourages applications with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at View email address on publisher.sourcingsquare.com.
No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.
Why Work at Fidelity?
We are proud to be recipients of the following:
Awards
- Canada's Top 100 Employers
- Greater Toronto’s Top Employers
- Canada's Top Family-Friendly Employers
- Canada's Top Employers for Young People
- Great Place To Work Certified
- Best Workplaces for Inclusion
- Best Workplaces for Mental Wellness
- Best Workplaces for Today's Youth
- Best Workplaces for Women
- Best Workplaces in Financial Services & Insurance
- Best Workplaces in Ontario
- Best Workplaces with Most Trusted Executive Teams
- LinkedIn Top Companies in Canada
- Human Resource Director (HRD) - Best Place To Work
- HRD - 5-Star Benefit Program
- HRD - 5-Star Diversity & Inclusion Employer
Designations
- Canadian Compassionate Companies – Certified
- Benefits Canada's Workplace Benefits Award - Future of Work Strategy
- TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
- Canadian HR Reporter's Most Innovative HR Team
- Lead cyber security transformation efforts at EQ and shape the future of banking in Canada. This hybrid role emphasizes strategic planning, program governance, and stakeholder collaboration. As the Director of Cyber Program & Transformation, you will oversee critical cyber...Suggested
- ...Fidelity Canada seeks a Cyber Security Risk Director to lead the development and oversight of the organization’s cyber risk posture. The role partners with Information Security, Enterprise Risk, and Technology Risk across Fidelity Canada and FIL to strengthen resilience....SuggestedRemote workFlexible hours
- ...Bank. Who we are looking for: As Manager, Enterprise Risk Management (AI, Cyber) for Rogers Bank, this position provides independent second... ...with Hiring Manager, a final round virtual interview with Director of the team. Best of luck! To protect our people,...SuggestedFull timeContract workBank staffFlexible hoursShift work
- ...Responsible for shaping enterprise security strategy, driving Zero Trust adoption, and leading... ...and technology leaders to deliver secure, scalable solutions. A company in the property... ...including AI-enabled platforms, as part of vendor risk and technology intake processes....SuggestedLong term contract
- ...next big opportunity. We can’t wait to get to know you! The Work This role is responsible for overseeing the delivery of cyber security outcomes and driving enterprise-wide changes in meeting the Organization’s cyber security strategic objectives. This role is...SuggestedHourly payPermanent employmentFull timeInternshipWork at office
- ...knowledge of LLMs, AI agents, agentic workflows, tool calling, and AI security frameworks. Familiarity across advanced domain areas like... ...engineering and research teams to identify product limitations, technical risks, security concerns, and integration requirements. Drive clear...Internship
- Join TD as a Lead Cyber Risk Assessor, focusing on evaluating third-party cybersecurity risks while creating a strong risk culture. Drive security solutions that protect vital organizational assets. This role requires over ten years of experience in third-party cyber risk assessments...
$140k - $260k per year
...coaching -- Lead complex business decisions, mitigate enterprise risk, and influence senior leaders in a high-impact role where your... ...activities, including regulatory compliance, policy governance, security incident response, and process improvement initiatives. Working across...Permanent employmentContract workFlexible hours$150k - $170k per year
...Position: Manager of Cyber Security Location: Toronto, Ontario – Onsite five days per week Structure: Full-time, permanent Compensation... ..., incident response, vulnerability management, governance, risk and compliance. Key Responsibilities: Execute...Permanent employmentFull timeInternship- ...sensitive data against an evolving landscape of cyber threats. You will be a primary driver and... ...Conditional Access Policies to guarantee secure authentication to all Microsoft 365 cloud... ...security posture Conduct technical risk assessments and deliver strategic recommendations...Work at office
- ...next big opportunity. We can’t wait to get to know you! The Work This role is responsible for overseeing the delivery of cyber security outcomes and driving enterprise‑wide changes in meeting the Organization’s cyber security strategic objectives. This role is responsible...Hourly payPermanent employmentFull timeInternshipWork at office
- ...next big opportunity. We can’t wait to get to know you! The Work This role is responsible for overseeing the delivery of cyber security outcomes and driving enterprise-wide changes in meeting the Organization’s cyber security strategic objectives. This role is...Full time
- ...Job Description Position Title: EMT L1 Cyber Security Analyst – Grade 5 Job Summary As a Cyber Security Analyst, you will be... ...consistently improve operational effectiveness and reduce cyber risk. • Mentoring opportunities with Incident Responders allow for...Full time
$70 - $90 per hour
...Contract Compensation: $70–$90/hour Location: Remote Role Responsibilities Analyze and review content for security vulnerabilities with a focus on pattern recognition and classification in an AI context. Apply expertise in systems...Full timeContract workSummer workRemote workFlexible hours$183k - $225.52k per year
...today! What will you be doing? World Wide Technology, Inc. (WWT) is seeking a highly driven and experienced Cyber Sales Specialist to join our dynamic Security Sales team. In this role, you will collaborate closely with cross-functional teams to develop and execute...Long term contractFull timeTemporary workInternshipRemote workFlexible hoursShift work- ...looking for a new opportunity? Or just checking the market? Well you might just be in the right place! We're looking for a Director, Enterprise Risk to join our Legal team. You will be reporting to the Assistant General Counsel & Head of Litigation and Enterprise Risk. The...Full timeFlexible hours
- ...The Work The Senior Analyst - Cyber Threat Modeling and Risk supports the Threat Modeling and Risk... ...identification, assessment, and tracking of cyber security risks across technology. The role... ...in the design lifecycle, enabling secure and resilient technology solutions while...Hourly payPermanent employmentFull timeWork at office
- ...Canada Life in Toronto is seeking a Director, Fraud Management to lead first-line fraud risk standards, governance and accountability across the business, ensuring robust prevention, detection and response to fraud events. You will work with fraud operations, product, digital...
- ...are and what they contribute. To learn more about CIBC, please visit CIBC.com What you'll be doing As a Director with the Corporate and Private Credit Risk team, you will report to the Senior Director, Trading Credit Risk (TCR), and manage a portfolio of non-Bank Financial...Long term contractWork at officeRemote work2 days per week3 days per week
- Drive the risk management strategy for a multi-billion-dollar nuclear project in Kincardine, Ontario, with Turner & Townsend. Shape critical... ...governance using advanced risk analysis techniques. As the Risk Director, you will lead the overall risk management function right from...Relocation
- ...RBC is seeking a Principal Engineer in Cyber Technology Operations SRE to drive security automation, operations strategy, and scalable controls. You will partner... ..., Docker, and CI/CD, plus collaboration across risk, regulators, and technology owners to move securely at...
$175k - $190k per year
...celebrate your contributions. The Job: Director, Governance, Risk and Compliance (GRC) We’re seeking a... ...MFSG’s cybersecurity governance, cyber risk management, compliance, and data... ...practical, risk-based governance and security controls What You’ll Bring to the Table...Temporary workWork at officeRemote work- ...visit CIBC.com What you’ll be doing The Risk Data Management Office plays an important... ..., and effective governance. As Senior Director, Risk Data Strategy, you’ll lead the vision... ...pipelines, cloud platforms, integration patterns, security, resiliency, and data controls. Bring...Long term contractTemporary workWork at officeRemote work2 days per week3 days per week
- ...list since 2021. The Work This role is responsible for the Designing, planning and executing the bank’s Cyber Resilience Testing and offensive security program, commonly referred to as “red team exercises”. This role develops and manages processes that identify continuous...Hourly payPermanent employmentFull timeWork at office
$145k - $181k per year
...Location: Toronto Address: 100 Queens Quay East Toronto, Ontario M5E 1V3 Canada Job Title: Director, Global Regulatory Compliance, Risk & Compliance Canada Goose isn't like anything else. We've built something great, something special - an iconic lifestyle...- ...in markets around the world. Job Description Join one of Canada's most significant nuclear infrastructure programs. As Risk Director, you will establish and lead the risk management function for a multi-billion-dollar nuclear project from programme inception...Full timeRelocationVisa sponsorshipRelocation packageFlexible hours
- ...RBC is seeking a Director of Counterparty Credit Risk Analytics to lead model design, development, and validation for the bank's CCR across derivatives and SFTs. You will guide methods, ensure regulatory alignment, and drive governance through internal validation and benchmarking...
- ...International Banking team at Scotiabank, specializing in Client Risk Management and AML strategy. This hybrid role blends compliance oversight... ...with strong relationship management in diverse markets. As the Director of Client Risk Management, you will navigate complex AML/ATF...Local area
- ...Canada Goose is seeking a Director of Global Regulatory Compliance to lead our comprehensive global compliance program. You will partner across... ..., and operational domains. The role emphasizes strategic risk management, enterprise-wide policies, and coordination with senior...
- ...Job Description Join one of Canada's most significant nuclear infrastructure programs. As Risk Director, you will establish and lead the risk management function for a multi-billion-dollar nuclear project from programme inception through delivery. Working alongside executive...RelocationVisa sponsorshipRelocation packageFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Security Risk Director. Be the first to apply!
- ciso Toronto, ON
- chief information security officer ciso Toronto, ON
- operational risk manager Toronto, ON
- senior manager risk management Toronto, ON
- group risk manager Toronto, ON
- credit risk Toronto, ON
- risk and insurance manager Toronto, ON
- cyber security Toronto, ON
- cyber security intern Toronto, ON
- remote cyber security Toronto, ON
