Director, Information Security

Loopio; Toronto; On-site; CAD 120,000 - 150,000; Full time

Job summary

A leading B2B software company in Toronto is seeking an experienced Director of Information Security to lead their information security operations and ensure compliance with best practices. This role requires at least 8 years of experience, including 5 years in a SaaS environment, to oversee security governance, risk assessments, and foster a culture of security across the organization. The ideal candidate will have strong management skills and a deep understanding of security trends, particularly in AI technologies.

Benefits

Flexible co-working locations

Health and wellness benefits

Professional mastery allowance

Qualifications

• 8 years of progressive experience in information security and / or risk management with at least 5 years in a SaaS environment.
• Deep knowledge of SaaS security trends and threats.
• Experience with AI-related security risks and controls.
• Hands-on experience with security compliance frameworks such as NIST, ISO 27001, GDPR, SOC 2.
• Strong customer-facing experience including presenting to and building trust with customers.

Responsibilities

• Evolve and strengthen information security governance structure.
• Lead and mentor members of the Information Security Team.
• Evaluate and enhance internal security controls and policies.
• Deliver regular reporting on the information security risk program.
• Partner with internal teams on information security risk assessments.

Skills

Crisis Management

Splunk

Google Cloud Platform

Cybersecurity

Identity & Access Management

Management Experience

PCI

NIST Standards

Emergency Management

Encryption

Education

Bachelors degree in Computer Science, Information Systems, or a related field

Job description

Take your career to new heights with Loopio!

Loopio is looking for an experienced Director Information Security who will be the subject matter expert and leadership for all information security related matters. This role will lead maintain and evolve Loopios existing security controls procedures and policies. As a B2B software company selling to the worlds leading enterprises our customers hold us to the highest standards to keep their data secure.

As an established trusted advisor and the owner of information security for Loopio your role will span across operational tactical and strategic levels of the business and plays a key role in the success of Loopio by ensuring our processes data and employees meet the best practices in this role you will partner with key stakeholders across the business including IT engineering legal and finance.

What Youll be Doing :

Evolve and strengthen Loopios information security governance structure to align with business priorities and industry best practices.

Plan execute and oversee information security control risk assessments including the development reporting and monitoring of risk treatment plans.

Lead and mentor members of the Information Security Team acting as a subject matter expert (SME) to guide professional development foster collaboration and build organizational expertise in security.

Evaluate and enhance internal security controls and policies for compliance with applicable information security laws regulations and frameworks recommending improvements where needed.

Deliver regular reporting on the information security risk program to the Information Security Management Committee and other senior stakeholders.

Lead responses to security assessments questionnaires and audits from prospects customers and third-party partners using the Loopio Platform.

Partner with internal teams and external consultants on information security risk assessments third-party audits and certification efforts.

Foster a strong culture of security across the organization by managing the information security awareness training program defining and tracking effectiveness metrics and driving continuous improvement.

Bring expertise in AI security and risk management including assessing emerging threats advising on secure adoption of AI technologies and ensuring compliance with evolving regulations and industry standards.

What Youll Bring to the Team :

8 years of progressive experience in information security and / or risk management with at least 5 years in a SaaS environment.

Deep knowledge of SaaS security trends and threats with a demonstrated passion for staying ahead of the evolving security landscape.

Experience with AI-related security risks and controls including governance compliance considerations and secure adoption of AI technologies in SaaS environments.

Proficiency across core information security domains including risk and control assessments policy and standards development secure systems development lifecycle (SDLC) regulatory compliance access controls technology resiliency governance and metrics incident response vulnerability management and data protection.

Hands-on experience with security compliance and regulatory frameworks (e.g. NIST ISO 27001 GDPR SOC 2) and associated risk methodologies as they apply to cloud services.

Practical expertise in security operations processes including monitoring vulnerability assessment intrusion detection / prevention data loss prevention and endpoint / malware protection.

Proven ability to lead and deliver projects to successful completion from planning through execution and closure.

Strong customer-facing experience including presenting to and building trust with customers / prospects senior leadership and other external stakeholders.

Exceptional communication skills (written and verbal) with the ability to distill complex concepts into clear compelling messages for both technical and non-technical audiences.

Bachelors degree in Computer Science Information Systems or a related field (or equivalent work experience).

Relevant professional certifications (e.g. CISSP CISA CISM CDPSE).

Where Youll Work

We are currently only looking for candidates who reside in or around the Greater Toronto Area and can access our co-working space in Downtown Toronto for the occasional Corporate Service Team get-together.

Loopio is a remote-first workplace because we recognize the advantages of working flexibly. We are HQd in Canada with established hub regions around the world where we hire from.

Our employees (or Loopers as we call ourselves!) live and work in Canada (British Columbia and Ontario) London and India (specifically in Gujarat Maharashtra and Bengaluru).

The majority of our team is based in ON and BC which means these employees live and work remotely within a 300km radius of Toronto (within Ontario) and Vancouver (Within BC).

We offer flexible co-working locations available to Loopers in ON and BC. Those based in ON have the option of working out of our convenient co-working space located in the heart of Downtown Toronto and a 12-minute walk from Union Station. BC Loopers have the option to work centrally in Vancouver. It is whatever works best for you!

Youll collaborate with your teams virtually across the UK India and North America (were just a Zoom call and Slack message away!) with core sync hours and focus time for headsdown work during the workday

We encourage asynchronous collaboration to effectively work as a global #OneTeam!

Why Youll Working at Loopio

Your manager supports your development by providing ongoing feedback and regular 1-on-1s we leverage Lattice for our 1 : 1s and performance conversations

You will have the opportunity to elevate your craft and the opportunity to explore your creativity with a dedicated professional mastery allowance for more learning support! We encourage experimentation and innovative thinking to drive business impact.

We offer a wide range of health and wellness benefits to support your physical and mental well-being starting day 1 with Loopio.

Well set you up to work remotely with a MacBook laptop a monthly phone and internet subsidy and a work-from-home budget to help get your home office all set up.

Youll be joining a supportive culture that has thoughtfully built out opportunities for connections in a remote first environment.

Participate in townhalls AMA (Ask-Me-Anything) and quarterly celebrations to celebrate the big wins and milestones as #oneteam!

Our four active Employee Resource Groups offer opportunities for employees to learn and connect year-round.

Youll be a part of an award-winning workplace with an opportunity to make a big impact on the business.

Questioning your qualifications Read this Hi there we recognize that all too often potential candidates dont apply for a position simply because they dont hit every single criteria included in the job descriptionparticularly members of underrepresented groups.

Whether or not your experience checks off all the boxes on a job posting we still encourage you to apply to ensure that your application receives a review from our team. We understand that a resume can only showcase so much during the applicant stage so weve created prompts in the application for you to share more about yourself. If youve made a career transition (or a few!) youre self taught in a new role or you have skills / experience youd like to highlight we want to hear more about what you could bring to the table.

AI in Recruitment At Loopio we leverage artificial intelligence (AI) technology to enhance our recruitment process. These tools assist with tasks such as resume screening drafting preliminary job descriptions generating initial interview questions and occasionally sourcing prospective candidates. However AI is never used to make final hiring decisions; our use of AI serves to support repetitive and administrative tasks in order to streamline our hiring and recruitment workflows. We are committed to the responsible use of AI in our hiring practices prioritizing both an improved candidate experience and operational efficiency. Our standardized hiring practices remain focused on reducing biases with all key hiring decisions solely made by our team. We continuously review and refine our hiring practices to align with industry best practices and evolving legal guidelines

Loopio is an equal opportunity employer that is deeply committed to building equitable workplaces that are diverse and inclusive. We actively encourage candidates from all backgrounds and lifestyles to consider us as a future employer. Please contact a member of our Talent Experience team ( ) should you require accommodations at any point during our virtual interview processes.

Required Experience :

Director

Key Skills

Crisis Management,Splunk,Google Cloud Platform,Cybersecurity,Identity & Access Management,Management Experience,PCI,NIST Standards,Emergency Management,Security,Information Security,Encryption

Employment Type : Full-Time

Experience : years

Vacancy : 1