Cyber Security Risk Director

Current work authorization for Canada is required for all openings. This is a regular, full‑time role with a flexible hybrid schedule; the work location is 483 Bay Street in Toronto until late 2026, after which the location will shift to 3 Robert Speck Parkway in Mississauga.

What You Will Do

• Oversight and accountability of the cyber security risk framework and methodologies, conducting both planned and ad‑hoc technical risk reviews, evaluating technology and business initiatives with cyber security implications.
• Represent Fidelity Canada on FIL cyber governance committees.
• Lead the development of Fidelity Canada’s Cyber Risk Oversight Program design and implementation, supported by well‑defined policies that align with enterprise risk appetite, regulatory requirements, and industry standards.
• Identify and assess cybersecurity risks and advise business units and Information Security stakeholders on risk issues to ensure awareness and accountability.
• Monitor external trends and evaluate potential impacts to business strategy; provide documented analytical insights of the risk profile while ensuring a sound operational control environment through effective internal controls.
• Perform review and challenge of first line of defense cyber risk management processes (e.g. risk assessments, control evaluations, risk metrics, mitigation plans, risk acceptances, etc.) and communicate risk opinions at various levels of management.
• Advise on remediation strategies of inconsistencies and gaps identified through independent assessments of key cybersecurity processes.
• Provide second line of defense leadership and subject‑matter expertise during response to major cyber incidents, including cyber‑security related privacy events, and coordinate second line of defense engagement and response.
• Develop and provide regular reporting to senior management committees across Fidelity.
• Ensure ownership of relationships with external cyber security risk experts.
• Ensure all activities and deliverables meet timeliness, quality, and accuracy service levels.

Qualifications and Experience

• Completed University Degree or equivalent experience.
• 7+ years of related work experience, with a subset of practical experience in multiple areas of cyber risk.
• 5+ years of experience at the management level.
• Experience with developing and implementing cybersecurity risk oversight programs in the financial services sector, preferably in a 2nd or 3rd line of defense.
• Knowledge of current and evolving regulatory requirements, and trends in cyber threats and vulnerabilities.
• Advanced knowledge of cyber risk management best practices and how to implement them.
• Experience with risk frameworks and standards such as NIST CSF and ISO 27001.
• Experience in cybersecurity risk consulting in the financial services sector, cyber security audit, or a similar second line of defense role is an asset.
• Proficiency with the COBIT risk framework is considered advantageous.
• Professional certifications in cybersecurity, such as CRISC (ISACA), CISM (ISACA), CISA (ISACA), CISSP (ISC²), and CCSP (ISC²).

Skills

• Demonstrated leadership skills and ability to lead oversight activities across different teams.
• Risk anticipation with attention to detail and the ability to challenge the status quo.
• Relationship building, influencing and negotiating across diverse stakeholders and lines of defense, including senior management.
• Excellent written and oral communication skills.
• Understanding of systems architecture.
• Excellent analytical, organizational, and project management skills.
• Strong risk, process, and control validation and/or assessment skills.

Equal Opportunity Employment

Fidelity Canada is an equal opportunity employer. Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally protected ground.

Accommodation and Support

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at .