Director, Information Security

Kwantlen Polytechnic University; Surrey; Hybrid; GBP 61,000 - 93,000; Full time

Benefits offered by this job

Tuition waiver

Extended health and dental benefits

Healthcare spending account

Job summary

Kwantlen Polytechnic University (KPU) in British Columbia is seeking a Director, Information Security to lead the enterprise cybersecurity program across its multi-campus system. Reporting to the CIO, you will shape security strategy, policies, controls and programs protecting university information assets.

You will guide incident response, risk management, and security architecture while collaborating with IT and academic partners to balance security with innovation and agility.

Qualifications

• Bachelor’s degree in information systems or related field.
• Seven+ years IT experience with five years in information security and two years in a supervisory role.
• CISSP certification preferred or equivalent experience.

Responsibilities

• Lead enterprise cybersecurity program across multiple campuses.
• Provide strategic direction for information security policies, controls and programs.
• Advance incident response capabilities and cyber resilience across the university.
• Collaborate with IT, academic units and leadership to balance security with innovation.

Skills

Cybersecurity leadership

Risk management

Strategic planning

Communication

Team leadership

Security architectures

Regulatory compliance

Education

Bachelor's degree in information system

CISSP certification preferred

Tools

Security tools experience

Job description

Kwantlen Polytechnic University (KPU) is Canada's only polytechnic university, proudly serving the South Fraser region for more than 40 years. With campuses in Surrey, Richmond, Langley, and Cloverdale, KPU is deeply connected to the communities it serves and to the diverse cultures, backgrounds, and lived experiences of its students. Through academic excellence, applied learning, innovation, and strong industry and community partnerships, KPU prepares students for meaningful futures.

As an open-access university, KPU is powered by the people who live and work here. We believe every employee plays a meaningful role in supporting student learning and success. We are honoured to carry the name of the Kwantlen First Nation and are committed to equity, inclusion, reconciliation, and respectful relationships. As one of BC's Top Employers, KPU is dedicated to fostering a supportive, inclusive, and engaged workplace where employees feel valued, connected to purpose, and empowered to make an impact.

We invite you to explore your next career opportunity at KPU and discover how your work can contribute to a university where thought truly meets action.

• Competition ID: 4841
• Internal Closing Date: Open Until Filled
• External Closing Date: Open Until Filled
• # of Openings: 1
• *Salary Information: 14 - Administrative Salary Grid - $114,071 to $174,909
• Employment Type: Permanent Full Time
• Workplace Type: Hybrid
• Travel Frequency: Frequent travel between campuses is required.
• Employee Group: Administration/Management
• Days of Work (BCGEU):
• Hours of Work (BCGEU):
• Hours per Week (BCGEU):

We are currently seeking a strategic and forward-thinking Director, Information Security to join our Information Technology (IT) team! This is an exciting opportunity to lead KPU's enterprise cybersecurity program and help shape the future of information security across a dynamic, multi-campus institution.

Job Overview

Reporting to the Chief Information Officer, this senior leadership role oversees a team responsible for information security technologies and incident management while providing strategic direction for the protection of the University's systems, data, and digital services. The Director is responsible for advancing KPU's cybersecurity strategy, policies, controls, and programs that safeguard the confidentiality, integrity, and availability of KPU's information assets.

Working closely with IT leaders and academic departments across KPU, the Director translates organizational priorities and risk requirements into practical security strategies and technical solutions. This role balances security, innovation, agility, and operational effectiveness while leading initiatives that strengthen KPU's overall security posture.

This is an exciting opportunity to lead impactful security projects, influence enterprise-wide decision-making, and help shape the future of cybersecurity at KPU. From advancing incident response capabilities and cyber resilience to implementing new technologies, processes, and best practices, the Director will play a critical role in helping KPU navigate a complex environment.

At KPU, you'll have the opportunity to make a meaningful impact while working in a collaborative, purpose-driven environment that values innovation, continuous learning, work-life balance, and employee well-being. If you're passionate about building strong security programs, leading high-performing teams, and driving meaningful change, we'd love to hear from you!

Education and Experience

• Bachelor's degree in information system;
• A minimum of seven years of IT experience, with five years in an information security role and at least two years in a supervisory capacity;
• Certified Information Systems Security Professional (CISSP)information security is preferred;
• Or an equivalent combination of education, training and experience.

Knowledge, Skills & Abilities

• Proven expertise in Identifying, assessing, and prioritizing information security risks. Implement risk mitigation measures and ensure compliance with relevant regulations and standards.
• Strong leadership persuasion abilities and experience working with the risk management team and a variety of diverse business units. Strong project management skills and experience in creating and managing complex project plans, including budgeting and resource allocation.
• Demonstrated experience working with security tools, technologies, mechanisms and policy to support and protect business information infrastructure in a large organization.
• An understanding of operating system internals and network protocols. Familiarity with the principles of cryptography and cryptanalysis.
• Knowledge and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans.
• Experience developing and maintaining policies, procedures, standards and guidelines using a consultative and inclusive approach.
• Experience with common information security management frameworks.
• Experience in application technology security testing (white box, black box and code review) and in system technology security testing (vulnerability scanning and penetration testing).
• Familiarity with applicable legal and regulatory requirements for post-secondary education in the Province of British Columbia.
• Proven ability to communicate security technical concepts to nontechnical people to enhance understanding and drive decisions that lead to positive outcomes.
• Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment of strategies.
• Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel and other internal and external University stakeholders.
• Ability to travel between campuses is required.

Competencies

• Leadership: KPU employees inspire, coach, mentor, and support students, employees and KPU as a whole in achieving objectives.
• Accountability: KPU employees demonstrate fiscal accountability and take ownership for their actions, decisions and results.
• Continuous Improvement: KPU employees take a creative approach to opportunities, exploring unique ways to create optimal value for the KPU community.
• Collaboration: KPU employees work in functional and cross-functional teams, coming together to solve complex issues and accomplish objectives that will benefit the KPU community.

Salary Information

The above compensation range is the span between the minimum and maximum base salary for a position. Typically, initial salary placement is approximately halfway between the minimum and the maximum. This represents an employee that possesses full job knowledge, qualifications and experience for the position. In the normal course, employees will be hired, transferred or promoted between the minimum and approximately halfway of the salary range for a job with consideration given to internal equity.

Total Rewards

As a part of our total rewards offerings, KPU also offers extended health and dental benefits, healthcare spending account, generous vacation package, defined pension plan, parenthood top-up, sick leave, long-term disability, life insurance, professional development days, tuition waiver, inhouse training & development, inter-campus transportation, and more!

Note:

Eligibility requirements apply, benefits may vary depending on the employee group the position belongs to and whether the position offered is temporary or part-time.

Note to Applicants

Kwantlen Polytechnic University welcomes and encourages applications from equity deserving groups and diverse experiences including, but not limited to, Indigenous people, racialized people, people with disabilities, and members of the 2S/LGBTQIA+ community.

If there are any barriers that you are experiencing or an accommodation that we can provide to support you through the application process, please reach out to us at [e-mail].

Kwantlen Polytechnic University is committed to protecting the safety and welfare of employees, students, and the general public, and upholding the reputation and integrity of the University. For this reason, final applicants will be asked to undergo a background check.

We thank all applicants for their interest in employment with KPU. Only candidates who are legally eligible to work in Canada will be considered; only those selected for an interview will be contacted.