Director, Security & IT Operations - Permanent - 19535

LRO Staffing; Ottawa; Remote; CAD 160,000 - 200,000; Full time

Benefits offered by this job

Generous vacation

Comprehensive benefits

Job summary

LRO Staffing represents a global SaaS leader in Ottawa seeking a Director of Security and IT Operations. You will serve as CISO and Privacy Officer while directing IT operations with a strategic focus and hands-on execution in a fully remote-capable role.

You will rebuild the security program, manage SOC2 audits, govern cloud spend, and lead a lean team. Strong regulatory knowledge and executive presence are essential for success.

Qualifications

• 8+ years in IT infrastructure and operations or security leadership in a scaling SaaS environment.
• 3+ years of team leadership experience.
• Hands-on security program experience including SOC2 ownership.
• Strong background in IT infra and Windows environments, SQL Server.
• Knowledge of regional or global data privacy regulations in Canada/US.
• Production cloud experience in GCP or AWS with cloud cost reduction.
• Board/executive presence for risk posture and strategy.

Responsibilities

• Rebuild and own the security program, including SOC2 audits and incident response.
• Serve as Privacy Officer for Canadian jurisdictions, managing PIA, access requests, breach reporting.
• Lead enterprise security reviews and create a self-service Security FAQ for Sales Engineers.
• Enforce vendor SLAs and optimize cloud spend while ensuring platform availability and DR.
• Own IT operations, backups, DR, and change management for production systems.
• Mentor a lean platform team and set priorities and rhythm as the platform scales.

Skills

Security leadership

Privacy knowledge

Cloud cost optimization

Strategic management

Executive communication

Active execution

Tools

Docker

Kubernetes

Terraform

Ansible

SQL Server

AWS

GCP

Job description

About The Opportunity

A well-reputed, global SaaS company in the Ottawa area is looking to add a Director, Security and IT Operations to their esteemed leadership group. Reporting to the CTO, you will function as their de facto Chief Information Security Officer (CISO) and designated Privacy Officer, in addition to leading the IT Operations function from a managerial and strategic perspective. You’ll lead a lean, high-performing team while actively executing high-impact work yourself, whether that means managing SOC2 compliance, auditing cloud spend, authoring security governance, or driving strategic direction of the IT infrastructure.

While this software company has an office presence in the National Capital Region, they boast a fully-remote work model and welcome candidates across Canada.

Duties include but are not limited to:

• Security Leadership (CISO): Rebuild and own our security program, including access control, vulnerability management, incident response, SOC2 compliance audits, and quarterly Board reporting
• Data Privacy Officer: Serve as Privacy Officer for Canadian jurisdictions, managing policies, privacy impact assessments, access requests, breach reporting, etc.
• Customer Trust & Sales Enablement: Lead enterprise security reviews and create a self-service Security FAQ knowledge base for Sales Engineers
• Vendor & FinOps Governance: Enforce vendor SLAs, optimize GCP/AWS cloud spend through rightsizing and commitments, and manage platform availability and disaster recovery
• IT Operations: Own availability, backups and disaster recovery, and change management for production systems, including our SQL Server databases. Partner with Engineering on production readiness for releases and infrastructure changes
• Team Leadership: Direct and mentor a lean platform team, setting priorities, operating rhythm, and team growth as the platform scales

About You

The successful candidate will have the following:

• 8+ years of experience in IT infrastructure and operations, DevSecOps or Security leadership, ideally within a scaling SaaS environment, and 3+ years of team leadership experience
• Proven Security Leadership: Hands-on experience building or scaling a security program, including direct ownership of SOC2 compliance
• Strong technical background within IT infrastructure and Windows environments, database administration (SQL Server), etc.
• Data Privacy Expertise: Working knowledge of regional or global data privacy regulations within Canada and the U.S.
• Production Cloud & FinOps Experience: Hands-on experience operating production infrastructure in GCP or AWS, with a proven track record of cloud cost reduction
• Board & Executive Presence: Comfort presenting risk posture and strategy to executive leadership and the Board
• Operator Mindset: A strong preference for active execution alongside strategic management
• Bonus: background in high-throughput communications systems, containerization tools (Docker, Kubernetes, etc.), IaC (Terraform, Ansible), CI/CD pipelines, etc.
• Bonus: Professional certifications in security, privacy, or cloud architecture (e.g., CISSP, CISM, CIPM, AWS or GCP cloud, etc.)

About the Job

Our client is offering a competitive salary ranging from $160,000 to $200,000 in addition to a generous vacation allotment and a comprehensive benefits package.

LROIT

Please note that all candidates must be permitted to work in Canada to be considered for this opportunity.

Please quote job 19535.