Director, IT & Cybersecurity

Jobtailor; Toronto; On-site; CAD 150,000 - 190,000; Full time

Job summary

Jobtailor is seeking a senior technology and cybersecurity leader to assess and elevate the organization’s technology and security posture in Toronto, Canada. You will define a target operating model, drive a prioritized roadmap, and establish governance across IT systems, ensuring reliability, security and regulatory alignment.

You will advise executive leadership on risk, investments and emerging requirements, overseeing MSPs, cloud services, and core platforms while guiding incident response

Qualifications

• 10+ years of progressive experience in information technology, infrastructure, cybersecurity or related areas.
• Significant experience in a senior leadership or technology management role.
• Experience leading or overseeing infrastructure, networks, cloud services, Microsoft 365, end-user technology and business applications.
• Strong practical knowledge of identity and access management, vulnerability management, endpoint and network security, security monitoring, data protection and third-party risk.
• Experience developing or overseeing cybersecurity programs, policies, incident response plans, business continuity and disaster recovery capabilities.
• Ability to assess complex technology environments, identify risks and capability gaps, and translate findings into priorities, roadmaps and investment recommendations.
• Experience managing managed service providers, technology vendors and specialized external partners.
• Strong technical judgment and hands-on technical expertise for assessing complex issues and directing incident response.
• Experience managing technology budgets, contracts, licensing, lifecycle planning and investment decisions.

Responsibilities

• Conduct a comprehensive assessment of the Foundation’s technology and cybersecurity environment.
• Develop a target operating model and prioritized technology and cybersecurity roadmap.
• Establish technology governance, documentation, decision-making and accountability practices.
• Advise the COO and executive leadership on technology risks, investments and emerging requirements.
• Maintain accountability for availability, reliability, performance and security of the technology environment.
• Oversee on-premises servers, network infrastructure, cloud services, Microsoft 365, SharePoint, end-user devices and specialized applications.
• Ensure monitoring, maintenance, configuration, patching, backup, vulnerability remediation and lifecycle management.
• Provide hands-on technical support, investigation and remediation for complex or sensitive issues.
• Establish and oversee a comprehensive cybersecurity program, including identity and access management, security monitoring, vulnerability management, endpoint protection, email security, network security and data protection.
• Lead preparation for and response to cybersecurity and significant technology incidents.
• Own technology components of business continuity and disaster recovery programs.
• Manage the managed service provider and other IT and cybersecurity vendors.
• Provide leadership, direction and technical oversight to the IT Manager.
• Oversee administration, integration, security and lifecycle management of core technology platforms.
• Develop policies, procedures, standards, documentation and executive reporting.
• Support cyber insurance applications, audits and risk assessments.
• Develop and manage the annual IT and cybersecurity budget and evaluate technology investments.

Skills

Leadership

Stakeholder management

Cybersecurity program development

Incident response management

Risk management

Vulnerability management

Identity and access management

Cloud services management

Network security

Technical oversight

Education

Postsecondary education in IT or related field

Tools

Microsoft 365

SharePoint

Cloud services

On-Premises servers

Network infrastructure

End-user devices

Managed Service Providers

Job description

• Conduct a comprehensive assessment of the Foundation’s technology and cybersecurity environment.


• Develop a target operating model and prioritized technology and cybersecurity roadmap.


• Establish technology governance, documentation, decision-making and accountability practices.


• Advise the COO and executive leadership on technology risks, investments and emerging requirements.


• Maintain accountability for availability, reliability, performance and security of the technology environment.


• Oversee on-premises servers, network infrastructure, cloud services, Microsoft 365, SharePoint, end-user devices and specialized applications.


• Ensure monitoring, maintenance, configuration, patching, backup, vulnerability remediation and lifecycle management.


• Provide hands-on technical support, investigation and remediation for complex or sensitive issues.


• Establish and oversee a comprehensive cybersecurity program, including identity and access management, security monitoring, vulnerability management, endpoint protection, email security, network security and data protection.


• Lead preparation for and response to cybersecurity and significant technology incidents.


• Own technology components of business continuity and disaster recovery programs.


• Manage the managed service provider and other IT and cybersecurity vendors.


• Provide leadership, direction and technical oversight to the IT Manager.


• Oversee administration, integration, security and lifecycle management of core technology platforms.


• Develop policies, procedures, standards, documentation and executive reporting.


• Support cyber insurance applications, audits and risk assessments.


• Develop and manage the annual IT and cybersecurity budget and evaluate technology investments.

Requirements

• 10+ years of progressive experience in information technology, infrastructure, cybersecurity or related areas.


• Significant experience in a senior leadership or technology management role.


• Experience leading or overseeing infrastructure, networks, cloud services, Microsoft 365, end-user technology and business applications.


• Strong practical knowledge of identity and access management, vulnerability management, endpoint and network security, security monitoring, data protection and third-party risk.


• Experience developing or overseeing cybersecurity programs, policies, incident response plans, business continuity and disaster recovery capabilities.


• Ability to assess complex technology environments, identify risks and capability gaps, and translate findings into priorities, roadmaps and investment recommendations.


• Experience managing managed service providers, technology vendors and specialized external partners.


• Strong technical judgment and hands-on technical expertise for assessing complex issues and directing incident response.


• Experience managing technology budgets, contracts, licensing, lifecycle planning and investment decisions.


• Strong leadership, communication and stakeholder-management skills.


• Postsecondary education in information technology, computer science, cybersecurity, engineering or a related discipline, or an equivalent combination of education and relevant professional experience.


• Relevant certifications such as CISSP, CISM, CRISC, CCSP or Microsoft/Azure certifications are considered an asset.


• Experience overseeing physical security systems or vendors is considered an asset.

Core Competencies

Demonstrates extensive expertise in technology governance, cybersecurity program development, and risk management, with a strong focus on incident response and business continuity planning. Proven ability to lead technology teams, manage vendor relationships, and oversee complex technology environments.

Highest-signal resume keywords

• Cybersecurity Program Development


• Technology Governance


• Incident Response Management


• Cloud Services Management


• Identity And Access Management

ATS Optimization Keywords

Hard Skills

• Cybersecurity


• Infrastructure Management


• Vulnerability Management


• Network Security


• Data Protection


• Technology Budget Management


• Incident Response Planning


• Lifecycle Management


• Technical Support


• Risk Assessment

Soft Skills

• Leadership


• Communication


• Stakeholder Management

Certifications & Qualifications

• CISSP


• CISM


• CRISC


• CCSP


• Microsoft Certifications

Industry Keywords

• Technology Roadmap


• Business Continuity


• Disaster Recovery


• Cyber Insurance


• Security Monitoring

Tools & Technologies

• Microsoft 365


• SharePoint


• Cloud Services


• On-Premises Servers


• Network Infrastructure


• End-User Devices


• Managed Service Providers