Cyber Security Risk Director
Fidelity Canada
Job DescriptionYou will be working on a flexible hybrid schedule as part of Fidelity’s dynamic working arrangement.
The work location for this role is 483 Bay Street in Toronto until approximately late 2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.
Current work authorization for Canada is required for all openings.
Who We AreAt Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.
Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and expertly.
What You Will DoThe Cyber Security Risk Director is a leadership position responsible for leading the development of Fidelity Canada’s cyber security risk posture as part of the second line of defense. This role ensures that cyber security risks are effectively identified, assessed, mitigated, and monitored across Fidelity Canada (Fidelity Clearing Canada (FCC), Fidelity Investments Canada (FIC) and Fidelity Canada Institutional Management (FCIM)). The Director will be a certified subject matter expert in cyber security risk who provides strategic advisory support in the development and maintenance of a comprehensive cyber security risk framework and will work closely with key stakeholders to enhance the organization’s resilience against emerging threats.
The Director will collaborate with key stakeholders in Information Security, Enterprise Risk, Technology Risk, and other relevant functional stakeholders across Fidelity Canada, Fidelity International Limited (FIL) and Fidelity Management & Research Company (FMR) to ensure cohesive and effective cyber security risk management. This role is responsible for advancing and safeguarding Fidelity Canada’s reputation and operational effectiveness through the continuous enhancement of its cyber security risk posture.
Key responsibilities include:
Oversight and accountability of the cyber security risk framework and methodologies, conducting both planned and ad-hoc technical risk reviews, evaluating technology and business initiatives with cyber security implications
Represent Fidelity Canada on FIL cyber governance committees
Lead the development of Fidelity Canada’s Cyber Risk Oversight Program
Design, implement, and maintain a comprehensive cybersecurity risk oversight program supported by well-defined policies that align with enterprise risk appetite, regulatory requirements, and industry standards
Identify and assess cybersecurity risks and advise business units and Information Security stakeholders on risk issues to ensure awareness and accountability for cybersecurity risks.
Monitor external trends and evaluate potential impacts to business strategy;
provide documented analytical insights of the risk profile, while ensuring a sound operational control environment through establishment of effective internal controls.
Perform review and challenge of first line of defense cyber risk management processes (e.G. risk assessments, control evaluations, risk metrics, mitigation plans, risk acceptances etc.) and communicate risk opinions at various levels of management.
Advise on remediation strategies of any inconsistencies and gaps identified through independent assessments of key cybersecurity processes.
Provides second line of defense leadership and subject matter expertise during response to major cyber incidents including cyber-security related privacy events and coordinate second line of defense engagement and response.
Develop and provide regular reporting to senior management committees across Fidelity.
Responsible for ownership of relationships with external cyber security risk experts
Ensure all activities and deliverables achieve their timeliness, quality, and accuracy service levels.
What We Are Looking For:
Completed University Degree
7+ years of related work experience, in which a subset is practical experience in multiple areas of cyber risk and 5+ years of experience at the management level
Experience with developing and implementing cybersecurity risk oversight programs in the financial services sector, preferably in a 2nd or 3rd line of defense
Knowledge of current and evolving regulatory requirements, current trends in cyber threats/vulnerabilities
Advanced knowledge of cyber risk management best practices and how to implement them
Experience with risk frameworks and standards such as NIST CSF and ISO 27001
Experience in Cybersecurity risk consulting in the financial services sector, Cyber security audit or in a similar second line of defense role is an asset
Proficiency with the COBIT risk framework is considered advantageous
Professional Certifications in Cybersecurity, such as CRISC (ISACA), CISM (ISACA), CISA (ISACA), CISSP (ISC²), and CCSP (ISC²)
The Skills You Bring
Demonstrated leadership skills and ability to lead oversight activities across different teams
A keen sense of risk anticipation with attention to details and ability to challenge status quo
Ability to build relationships, influencing and negotiating across diverse stakeholders across the lines of defense, including senior management
Excellent written and oral communication skills
Understanding of systems architecture
Excellent analytical, organizational and project management skills.
Strong risk, process, and control validation and/or assessment skills
Some of the ways we’ll help you feel valued and supported as part of our team:
Flexible working arrangements - 100% remote, hybrid, and in office options
Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $6000 annually for mental health services and therapy
Parental leave top-up to 100% of your salary for a period of 25 weeks
Up to $650 for home office equipment
Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
Diversity and inclusion programs, including an active network of Employee Resource Groups
Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.
We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process as well as an AI screening tool that assists in screening and assessing applications. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.
Fidelity Canada is an equal opportunity employerFidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.
Accommodation during the application processFidelity Canada welcomes and encourages applications with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at View email address on ca.hrm.tc.
No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.
Why Work at Fidelity?We are proud to be recipients of the following:
Awards
Canada's Top 100 Employers
Greater Toronto’s Top Employers
Canada's Top Family-Friendly Employers
Canada's Top Employers for Young People
Great Place To Work Certified
Best Workplaces for Inclusion
Best Workplaces for Mental Wellness
Best Workplaces for Today's Youth
Best Workplaces for Women
Best Workplaces in Financial Services & Insurance
Best Workplaces in Ontario
Best Workplaces with Most Trusted Executive Teams
LinkedIn Top Companies in Canada
Human Resource Director (HRD) - Best Place To Work
HRD - 5-Star Benefit Program
HRD - 5-Star Diversity & Inclusion Employer
Designations
Canadian Compassionate Companies – Certified
Benefits Canada's Workplace Benefits Award - Future of Work Strategy
TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
Canadian HR Reporter's Most Innovative HR Team
#J-18808-Ljbffr
The work location for this role is 483 Bay Street in Toronto until approximately late 2026, when the work location will change to the new Mississauga office at 3 Robert Speck Parkway.
Current work authorization for Canada is required for all openings.
Who We AreAt Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.
Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and expertly.
What You Will DoThe Cyber Security Risk Director is a leadership position responsible for leading the development of Fidelity Canada’s cyber security risk posture as part of the second line of defense. This role ensures that cyber security risks are effectively identified, assessed, mitigated, and monitored across Fidelity Canada (Fidelity Clearing Canada (FCC), Fidelity Investments Canada (FIC) and Fidelity Canada Institutional Management (FCIM)). The Director will be a certified subject matter expert in cyber security risk who provides strategic advisory support in the development and maintenance of a comprehensive cyber security risk framework and will work closely with key stakeholders to enhance the organization’s resilience against emerging threats.
The Director will collaborate with key stakeholders in Information Security, Enterprise Risk, Technology Risk, and other relevant functional stakeholders across Fidelity Canada, Fidelity International Limited (FIL) and Fidelity Management & Research Company (FMR) to ensure cohesive and effective cyber security risk management. This role is responsible for advancing and safeguarding Fidelity Canada’s reputation and operational effectiveness through the continuous enhancement of its cyber security risk posture.
Key responsibilities include:
Oversight and accountability of the cyber security risk framework and methodologies, conducting both planned and ad-hoc technical risk reviews, evaluating technology and business initiatives with cyber security implications
Represent Fidelity Canada on FIL cyber governance committees
Lead the development of Fidelity Canada’s Cyber Risk Oversight Program
Design, implement, and maintain a comprehensive cybersecurity risk oversight program supported by well-defined policies that align with enterprise risk appetite, regulatory requirements, and industry standards
Identify and assess cybersecurity risks and advise business units and Information Security stakeholders on risk issues to ensure awareness and accountability for cybersecurity risks.
Monitor external trends and evaluate potential impacts to business strategy;
provide documented analytical insights of the risk profile, while ensuring a sound operational control environment through establishment of effective internal controls.
Perform review and challenge of first line of defense cyber risk management processes (e.G. risk assessments, control evaluations, risk metrics, mitigation plans, risk acceptances etc.) and communicate risk opinions at various levels of management.
Advise on remediation strategies of any inconsistencies and gaps identified through independent assessments of key cybersecurity processes.
Provides second line of defense leadership and subject matter expertise during response to major cyber incidents including cyber-security related privacy events and coordinate second line of defense engagement and response.
Develop and provide regular reporting to senior management committees across Fidelity.
Responsible for ownership of relationships with external cyber security risk experts
Ensure all activities and deliverables achieve their timeliness, quality, and accuracy service levels.
What We Are Looking For:
Completed University Degree
7+ years of related work experience, in which a subset is practical experience in multiple areas of cyber risk and 5+ years of experience at the management level
Experience with developing and implementing cybersecurity risk oversight programs in the financial services sector, preferably in a 2nd or 3rd line of defense
Knowledge of current and evolving regulatory requirements, current trends in cyber threats/vulnerabilities
Advanced knowledge of cyber risk management best practices and how to implement them
Experience with risk frameworks and standards such as NIST CSF and ISO 27001
Experience in Cybersecurity risk consulting in the financial services sector, Cyber security audit or in a similar second line of defense role is an asset
Proficiency with the COBIT risk framework is considered advantageous
Professional Certifications in Cybersecurity, such as CRISC (ISACA), CISM (ISACA), CISA (ISACA), CISSP (ISC²), and CCSP (ISC²)
The Skills You Bring
Demonstrated leadership skills and ability to lead oversight activities across different teams
A keen sense of risk anticipation with attention to details and ability to challenge status quo
Ability to build relationships, influencing and negotiating across diverse stakeholders across the lines of defense, including senior management
Excellent written and oral communication skills
Understanding of systems architecture
Excellent analytical, organizational and project management skills.
Strong risk, process, and control validation and/or assessment skills
Some of the ways we’ll help you feel valued and supported as part of our team:
Flexible working arrangements - 100% remote, hybrid, and in office options
Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $6000 annually for mental health services and therapy
Parental leave top-up to 100% of your salary for a period of 25 weeks
Up to $650 for home office equipment
Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
Diversity and inclusion programs, including an active network of Employee Resource Groups
Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.
We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process as well as an AI screening tool that assists in screening and assessing applications. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.
Fidelity Canada is an equal opportunity employerFidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.
Accommodation during the application processFidelity Canada welcomes and encourages applications with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at View email address on ca.hrm.tc.
No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.
Why Work at Fidelity?We are proud to be recipients of the following:
Awards
Canada's Top 100 Employers
Greater Toronto’s Top Employers
Canada's Top Family-Friendly Employers
Canada's Top Employers for Young People
Great Place To Work Certified
Best Workplaces for Inclusion
Best Workplaces for Mental Wellness
Best Workplaces for Today's Youth
Best Workplaces for Women
Best Workplaces in Financial Services & Insurance
Best Workplaces in Ontario
Best Workplaces with Most Trusted Executive Teams
LinkedIn Top Companies in Canada
Human Resource Director (HRD) - Best Place To Work
HRD - 5-Star Benefit Program
HRD - 5-Star Diversity & Inclusion Employer
Designations
Canadian Compassionate Companies – Certified
Benefits Canada's Workplace Benefits Award - Future of Work Strategy
TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
Canadian HR Reporter's Most Innovative HR Team
#J-18808-Ljbffr
Vacancy posted 40 minutes ago
Similar jobs that could be interesting for youBased on the Cyber Security Risk Director in Winnipeg, MB vacancy
- ...BeachHead Inc. is seeking a Communications Specialist with a cybersecurity focus to support the creation of communications materials for a security-focused team within a major financial client project. The role emphasizes translating complex security concepts into accessible...Suggested
- Lead enterprise cyber risk governance and compliance as a Director in a hybrid Toronto role, working downtown two to three days weekly.This permanent, full-time... ...: 10+ years in cybersecurity, information security, technology risk, or related disciplines5+ years of direct...SuggestedPermanent employmentFull time
- Select how often (in days) to receive an alert:Title: Senior Manager, Cyber Security and IT Risk Requisition ID: 270013 Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.The Senior Manager, Cyber Security & IT Risk is...Suggested
- ...BeachHead Inc. is seeking a CyberSecurity Risk Analyst to evaluate supplier security controls, negotiate security obligations, and support third-party risk frameworks within the procurement team. The role involves working with a top financial client to strengthen risk posture...Suggested
- ...Canada Life is seeking a Senior IT Business Systems Analyst to join the Information Security and Technology Risk portfolio. The role focuses on delivering security-centric technology solutions, maturing risk capabilities, and partnering with business units to enhance customer...Suggested
- 87307# Cyber Risk Management SpecialistMontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise... ...* Contribute to the continuous improvement of the information security risk management framework; * Develop and maintain methodologies...Permanent employmentWork at office
- ...threat hunting, malware analysis, forensic investigation, and containment procedures. Experience conducting vulnerability assessments, risk analysis, remediation tracking, and reporting. Understanding of authentication, authorization, MFA, SSO, PAM, and identity governance....
- ...engineering, project management, and supply chain), plan and manage security activities within the development lifecycle, and much more. We... ...Conducting Cybersecurity context and Cybersecurity Risk Analysis Defining Cybersecurity Architecture and requirement allocation...For subcontractor
- We are seeking a Senior Manager, Security Governance, Risk, and Compliance (GRC) to lead enterprise-wide security initiatives that ensure alignment with business goals, regulatory requirements, and industry best practices.Location : Toronto, ON (Hybrid – in-office collaboration...Work at officeRemote workFlexible hours
- ...Technology to implement and manage cryptographic infrastructure that secures the Firm’s most sensitive data and transactions. In the... ...protocols such as KMIP and PKCS#11. Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal...
- ...Description Overview We are seeking a Cyber Security expert to join our growing team and working... ...candidate will provide security and risk oversight in the specialized field of cybersecurity... ..., through design and delivery of a secure infrastructure. Role Alignment: Connect...Work at officeFlexible hours
$140k - $190k per year
...by protecting what matters most. The Cyber Security Architect is responsible for defining, designing... ..., Cyber Security, Engineering, Risk, and delivery teams to ensure security is... ...Depth, network isolation, least privilege, secure administration, and privileged‑access controls...Temporary workInternshipFlexible hours- ...receive an alert: Position Summary: Reporting to the Director, Cyber Security & Infrastructure , the Senior Manager, Cyber Security... ...measures, and regular progress reviews to deliver measurable risk reduction and operational improvements. Oversee and continuously...Local areaRemote workFlexible hours
- ...environments. This role combines enterprise security architecture, operational security leadership, governance, risk management, and hands‑on engineering to improve cyber resilience and reduce business risk... ...translates risk into practical, secure, and resilient technology outcomes...Worldwide
- Shape cyber risk and compliance across IT systems in Kimberley, using security governance expertise and leadership to protect organizational operations.The Information Security Manager will maintain security controls, policies, and procedures while guiding the organization’s...
- ...assessment, and continuous monitoring Develop, review, and maintain security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in... ...systems for security events and support incident response and risk mitigation activities Assess security impacts of system changes...Long term contractContract workTemporary work
- ...Fidelity Canada seeks a Cyber Security Risk Director to lead the development and oversight of the organization’s cyber risk posture. The role partners with Information Security, Enterprise Risk, and Technology Risk across Fidelity Canada and FIL to strengthen resilience....Remote workFlexible hours
- Elevate your career with BDO as a Senior Consultant in Cyber Risk Management & Transformation. Help clients manage cybersecurity and privacy... ..., CISM, PMP Engage in cybersecurity consulting at BDO, leveraging your expertise to improve client security postures. #J-18808-Ljbffr
- ..., eDiscovery, and analytics solutions. We securely capture and preserve the communications data... ...free of barriers.Your role: The Cyber Security Specialist - L3 ensures the deployment... ...for curiosity and awareness of the security risks of organizational AI use and an ability to...Manual labor
- ...at the center of how we operate. As we move faster, security becomes even more critical. We’re looking for a Cyber & AI Security Leader to take ownership of our... ...and incident response Drive SOC 2 readiness, risk management and penetration testing Lead and develop...Full time
- ...grow with us. We are currently seeking a Cyber Security Program Manager to join our team in... ...leads to prioritize backlogs and ensure risk-based delivery outcomes. Ensure compliance... ..., or CISM. Experience with DevSecOps, secure SDLC, and continuous compliance practices...Long term contract
$90k - $125k per year
...DescriptionWe are seeking a detail-oriented and proactive Senior Cyber Security Analyst to join our growing cybersecurity team. In this role,... ...documentation, including incident response playbooks, SOPs, and risk assessments. Support continuous improvement of security...Contract work$114k - $147k per year
...Cybersecurity Advisor ensures consistency of project solutions that are cyber secure by design. That is, according to defined cybersecurity policy,... ...activities (security management plans, requirements, risk assessments, vulnerability assessments, etc.).Key Accountabilities...$88.98k - $111.23k per year
..., diversity, and inclusion in our community. Job SummaryThe Cyber Security Analyst supports Mohawk College’s Cyber Security Framework and... ...individual will facilitate and continuously improve technology risk assessment methodologies including Threat and Risk Assessments...Temporary workFor contractorsInternshipImmediate startMonday to friday- ..., innovation and client commitments. Operating at an enterprise level, the role advises executive leadership on cyber risk, establishes the firm’s security posture and risk-based priorities, and provides independent challenge and escalation on material cybersecurity matters...Internship
- ...integration and civil aircraft certification, working knowledge is highly desired. You have knowledge of IT and/or Aviation Information Security Management System principles. You have working knowledge of aviation cybersecurity standards and guidance (highly desired): ED-...Flexible hours
- ...with admin level knowledge and experience working on enterprise Security Information and Event management (SIEM) tools. The ideal candidate... ...coordination with the business aspects of security engineering and Cyber Threat Management teams. Contribute to the strategic roadmap...Worldwide
- Lead complex cyber risk assessments at COFOMO in Montreal’s hybrid environment, applying cybersecurity and identity management expertise.... ...governance while collaborating with project managers, architects, security teams, and business stakeholders. Your work will also address...
$100k - $170k per year
...transformation. We design and implement scalable, secure, high-impact technology solutions that... ...and insurers on the most consequential cyber security problems they face — the ones... ...drive those plans to closure alongside CISO, Risk, and Audit leadership. This is not a...- Join TD as a Lead Cyber Risk Assessor, focusing on evaluating third-party cybersecurity risks while creating a strong risk culture. Drive security solutions that protect vital organizational assets. This role requires over ten years of experience in third-party cyber risk...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Security Risk Director. Be the first to apply!
Related searches
- group risk manager Winnipeg, MB
- senior manager risk management Winnipeg, MB
- operational risk manager Winnipeg, MB
- credit risk Winnipeg, MB
- risk and insurance manager Winnipeg, MB
- no experience cyber security Winnipeg, MB
- entry level cyber security Winnipeg, MB
- cyber security intern Winnipeg, MB
- cyber security contract Winnipeg, MB
- cyber security Winnipeg, MB

