Director, Security & IT Operations - Permanent - 19535

LRO Staffing; Ottawa; Remote; CAD 160,000 - 200,000; Full time

Benefits offered by this job

Generous vacation allotment

Comprehensive benefits package

Fully remote across Canada

Job summary

LRO Staffing is partnering with a global SaaS company in the Ottawa area to recruit a Director, Security and IT Operations. You will report to the CTO, acting as de facto CISO and Privacy Officer while guiding IT Operations strategy.

This role requires managing SOC2, data privacy, and cloud FinOps, with a focus on production readiness and performance. The role supports a fully remote work model across Canada, with an emphasis on leadership and hands-on execution.

Qualifications

• 8+ years of experience in IT infrastructure and operations, DevSecOps or Security leadership, ideally within a scaling SaaS environment.
• 3+ years of team leadership experience.
• Proven security leadership with hands-on experience building or scaling a security program including SOC2 compliance.
• Strong technical background in Windows environments and SQL Server.

Responsibilities

• Rebuild and own our security program, including access control, vulnerability management, incident response, SOC2 audits, and quarterly Board reporting.
• Serve as Privacy Officer for Canadian jurisdictions, managing policies, privacy impact assessments, access requests, breach reporting, etc.
• Lead enterprise security reviews and create a self-service Security FAQ knowledge base for Sales Engineers
• Enforce vendor SLAs, optimize GCP/AWS cloud spend through rightsizing and commitments, and manage platform availability and disaster recovery
• Own availability, backups and disaster recovery, and change management for production systems, including SQL Server, collaborating with Engineering on releases
• Direct and mentor a lean platform team, setting priorities and growth as the platform scales

Skills

IT infrastructure

Security leadership

Cloud (GCP/AWS)

SOC2 compliance

Data privacy

Budget/FinOps

Board presentation

Team leadership

Windows & SQL Server

Containerization (Docker/Kubernetes)

Tools

Docker

Kubernetes

Terraform

Ansible

Job description

About The Opportunity

A well-reputed, global SaaS company in the Ottawa area is looking to add a Director, Security and IT Operations to their esteemed leadership group. Reporting to the CTO, you will function as their de facto Chief Information Security Officer (CISO) and designated Privacy Officer, in addition to leading the IT Operations function from a managerial and strategic perspective. You’ll lead a lean, high-performing team while actively executing high-impact work yourself, whether that means managing SOC2 compliance, auditing cloud spend, authoring security governance, or driving strategic direction of the IT infrastructure.

While this software company has an office presence in the National Capital Region, they boast a fully-remote work model and welcome candidates across Canada.

Duties

• Security Leadership (CISO): Rebuild and own our security program, including access control, vulnerability management, incident response, SOC2 compliance audits, and quarterly Board reporting
• Data Privacy Officer: Serve as Privacy Officer for Canadian jurisdictions, managing policies, privacy impact assessments, access requests, breach reporting, etc.
• Customer Trust & Sales Enablement: Lead enterprise security reviews and create a self-service Security FAQ knowledge base for Sales Engineers
• Vendor & FinOps Governance: Enforce vendor SLAs, optimize GCP/AWS cloud spend through rightsizing and commitments, and manage platform availability and disaster recovery
• IT Operations: Own availability, backups and disaster recovery, and change management for production systems, including our SQL Server databases. Partner with Engineering on production readiness for releases and infrastructure changes
• Team Leadership: Direct and mentor a lean platform team, setting priorities, operating rhythm, and team growth as the platform scales

About You

• 8+ years of experience in IT infrastructure and operations, DevSecOps or Security leadership, ideally within a scaling SaaS environment, and 3+ years of team leadership experience
• Proven Security Leadership: Hands-on experience building or scaling a security program, including direct ownership of SOC2 compliance
• Strong technical background within IT infrastructure and Windows environments, database administration (SQL Server), etc.
• Data Privacy Expertise: Working knowledge of regional or global data privacy regulations within Canada and the U.S.
• Production Cloud & FinOps Experience: Hands-on experience operating production infrastructure in GCP or AWS, with a proven track record of cloud cost reduction
• Board & Executive Presence: Comfort presenting risk posture and strategy to executive leadership and the Board
• Operator Mindset: A strong preference for active execution alongside strategic management
• Bonus: background in high-throughput communications systems, containerization tools (Docker, Kubernetes, etc.), IaC (Terraform, Ansible), CI/CD pipelines, etc.
• Bonus: Professional certifications in security, privacy, or cloud architecture (e.g., CISSP, CISM, CIPM, AWS or GCP cloud, etc.)

About the Job

• Competitive salary ranging from $160,000 to $200,000
• Generous vacation allotment
• Comprehensive benefits package

Please note that all candidates must be permitted to work in Canada to be considered for this opportunity.