Head of Security

Super; Toronto; Hybrid; CAD 180,000 - 280,000; Full time

Benefits offered by this job

Health, dental, & vision insurance

Learning allowance

Equity options

Permanent remote flexibility

Toronto office access

Work-from-home allowance

Unlimited PTO

Job summary

Super.com in Canada seeks a Head of Security to lead our security function at scale. Define the security roadmap, staff the team, manage risk, and ensure regulatory compliance while partnering with Legal, Data, Engineering, Product and Finance to ship a secure product.

You will report to the Senior Director of Infrastructure Engineering and collaborate with executives and the board. Drive governance, AI-first security, and incident response, while mentoring engineers and aligning outcomes with

Qualifications

• 10+ years in security with leadership experience.
• Proven track record hiring security professionals and scaling teams.
• Experience aligning security with business objectives and board-level communication.
• Hands-on with security risk quantification and critical threat management.
• Experience with SOX, GDPR, PCI, SOC2, ISO27001 is a plus.

Responsibilities

• Define and drive the security roadmap and staff the function.
• Own governance, risk, and compliance programs with automated evidence.
• Lead AI-first security initiatives and AI tooling deployment.
• Set security architecture across Engineering and Product teams.
• Mentor engineers and security staff and manage senior leaders.
• Report to Senior Director and interface with executives and board.

Skills

Security leadership

Managing managers

AI transformation

Board interaction

Security architecture

Security risk quantification

GRC

Compliance frameworks

Tools

Cursor

Claude

AI agents

Job description

• As the Head of Security at Super.com, you’ll be our most senior and accountable security leader
• You’ll define and drive our security roadmap, staff and manage our security function, navigate our risks, ensure regulatory compliance, and help us deliver a safe and secure product to our customers
• You’ll report to our Senior Director of Infrastructure Engineering, and work closely with leaders across Legal, Data, Engineering, Product, Finance and HR while maintaining direct access to our executive team and board
• Expect high autonomy, frequent collaboration, a fast pace, and reliance on your own initiative
• You’ll leverage your years of technology leadership experience to define what success looks like, and to align your organization’s outcomes closely with company-level objectives
• This is a strategic and technical role that requires scaling your impact across AI tools, team leadership, cross-functional partnerships, and individual contributions
• Reflecting our rapid growth, Super.com is actively expanding our security function. This Security & IT organization is responsible for IT, GRC, Product Security and Corporate security
• This organization has two arms: A security engineering team covering application and infrastructure security reports to you directly, with day-to-day technical leadership from a Staff engineer
• An IT & Compliance function covering IT, GRC, and Corporate Security is led by a Director who also reports to you
• This team exists within the broader Infrastructure Engineering organization alongside the Quality, Sales/Support Engineering, and DevOps/Platform functions
• This is a fast-paced team with broad scope, high autonomy, and close collaboration across other departments
• Building out the team: You’ll lead hiring for engineers, GRC staff, and SOC partners
• You’ll manage reports ranging in experience from junior IC to Staff and Director level, providing mentorship and directing them toward impactful opportunities
• Own OKR setting and broad strategic planning across Security related domains
• Mature our governance, risk, & compliance functions, including: Expanding our control framework with automated evidence, policy lifecycle, risk management, and managing privacy obligations in partnership with Legal
• Champion an AI-first security program: direct the continued build-out of our AI-native vulnerability management and detection tooling, provide safety while the company adopts AI, and use AI to scale the team’s output well beyond its headcount
• Set the security culture: training, secure-by-default patterns, developer enablement, and clear expectations so every team ships securely without waiting on Security
• Ensure our customers are protected and our product is secure through experienced tool selection, organization structure, and well directed security team focus
• Provide technical direction and final say on security architecture across Engineering
• You’ll be accountable to the board for overall security posture and risk acceptance
• Our Technology:
• Product services are authored as K8s-based microservices powered by Python FastAPI backends and TypeScript React front-end code
• Apps are built upon Postgres, Redis, Kafka, Elasticsearch, and Snowflake
• Our infrastructure runs on AWS and leverages hosted infrastructure technologies such as EKS, MSK, Elasticache, and RDS. We use Istio for service mesh, Helm, TF and Crossplane for IAC, and Kyverno for policy-as-code enforcement
• Vulnerabilities are managed through in-house, AI-native custom tooling that your team develops. We orchestrate open-source tools through this custom platform
• Security and application logs/metrics/events are managed through Datadog
• Our security stack is currently evolving as we select and quickly roll out new tools. You’ll play a deciding role in the selection and deployment of these
• As an AI-First engineering organization, we leverage modern AI development workflows using tools such as Cursor, Claude, and internally built AI agents to accelerate implementation and iteration across our codebases. You’ll help Security drive our rapid AI adoption across tooling, process, and our product

Benefits

• Competitive base salary
• Yearly learning & development allowance
• RRSP & 401k employee contribution plan
• Bi-annual performance & compensation reviews
• Generous equity options
• Health, dental, & vision insurance on day one
• Parental leave programs
• Wellness reimbursement
• Supplemental Life Insurance
• Unlimited PTO (yes, really!)
• Recharge days throughout the year
• Office in Toronto
• Permanent remote flexibility
• Work-from-home allowance

• Owned company-level security strategy, budget, and outcomes end-to-end at a fast-paced technology company
• 10+ years in security, including 4+ years leading a security function or major pillar, and experience managing managers/directors and senior technical leaders(Staff+)
• Strong track record hiring security professionals and developing engineers into technical and people leaders
• Proven success supporting fast-paced software development teams at scale
• Direct professional experience with and notable outcomes from driving AI transformation in security, engineering, and/ or IT organizations
• Presented to and worked directly with a Board or Audit Committee, and with external auditors, regulators, or QSAs
• Hands-on history in at least two of: application / product security, infra security, detection & incident response, enterprise IT & identity, and GRC
• Experience with security risk quantification, acceptance, and translating technical risk into business impact for executive decision-making
• Stood up or scaled a GRC program: control frameworks, evidence automation, policy, and privacy program management.
• Experience with frameworks such as SOX, GDPR, PCI, SOC2, and/or ISO27001