Product Security, Principal

Interac; Toronto; Hybrid; CAD 140,000 - 190,000; Full time

Benefits offered by this job

Vacation days

Benefits coverage

RRSP program

Hybrid work model

Employee assistance program

Job summary

Interac is seeking a Product Security Principal to represent Information Security across product lines, acting as the forward-deployed CISO delegate. You will embed security across the full lifecycle, partner with Product, Engineering, Legal, Risk, Compliance, and Finance to guide risk-based decisions and ensure regulatory obligations are met.

You will lead security reviews, evaluate threat models, and coordinate risk management activities, while driving secure-by-design practices across cloud,

Qualifications

• 10+ years in cybersecurity, information security, AI for security, governance, risk & compliance, cloud security, or related disciplines.
• Proven experience as a trusted security advisor or product-aligned security partner, influencing risk decisions.
• Strong knowledge of enterprise security risk management and relevant frameworks (ISO 27001, NIST CSF, PCI DSS).
• Experience integrating security into product development and secure-by-design principles.

Responsibilities

• Serve as the primary Information Security advisor for assigned products and services.
• Provide strategic security guidance to support business and technology decisions.
• Identify, assess, and elevate security risks with appropriate controls and risk treatment.
• Ensure compliance with security policies, regulatory requirements, and contractual obligations.
• Lead security reviews of product architectures and major initiatives.
• Coordinate security resources and influence cross-functional teams to achieve security objectives.
• Support audits, regulatory reviews, and governance reporting activities.
• Drive continuous improvement through lessons learned from incidents and assessments.

Skills

Security leadership

Risk management

Stakeholder management

Security strategy

Communication

Problem solving

Decision making

Change management

Education

CISSP / CCSP / CISM / CRISC / CCISO (asset)

Tools

AWS

Azure

APIs

Containers

GRC tools

Job description

Who We Are:

Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.
Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With:

The Product Security, Principal is accountable for representing the Information Security function across assigned product lines, platforms, or technology domains, acting as the forward-deployed CISO delegate and senior security authority for that scope.

This role is responsible for ensuring security functions are embedded across the full lifecycle of assigned products and services, from strategy and design through delivery, operation, assurance, and ongoing improvement.

The Product Security, Principal partners with multiple teams, including Product, Engineering & Operations, Delivery Excellence, InfoSec, Legal, Risk, Compliance, and Finance teams to provide risk-based direction, coordinate security outcomes, and ensure business decisions are informed by a complete view of security risk, required controls, security investment needs, regulatory, and contractual obligations.

The role leverages central InfoSec capabilities as needed, including Frontier AI, GRC, Cloud Security, Application Security, Vulnerability Management, Threat Intelligence, SOC, Incident Response, Identity, Security Architecture, and Third-Party Risk, while remaining accountable for the integrated security posture of the assigned product or domain.

What You Will Do:

• Serve as the primary Information Security advisor and representative for assigned products and services.
• Provide strategic security guidance to support business, technology, and operational decision-making.
• Identify, assess, monitor, and elevate security risks, ensuring appropriate controls and risk treatment plans are in place.
• Ensure compliance with security policies, regulatory requirements, industry standards, and contractual obligations.
• Support audits, regulatory reviews, security assessments, and governance reporting activities.
• Review and advise on security requirements for third‑party vendors, contracts, and external partnerships.
• Lead security reviews of product architectures, design changes, and major initiatives to ensure secure‑by‑design principles are embedded throughout the product lifecycle.
• Evaluate threat models, data flows, technology solutions, and third‑party integrations to identify and mitigate security risks.
• Partner with security specialists and technology teams to develop and implement effective security strategies and controls.
• Support security investment planning, budgeting, vendor management, and prioritization of security initiatives.
• Provide guidance on remediation strategies, cost considerations, and security‑related business cases.
• Ensure alignment with vulnerability management, monitoring, incident response, resilience, and recovery programs.
• Provide leadership and risk‑based guidance during security incidents, investigations, and escalations.
• Drive continuous improvement through lessons learned from incidents, audits, assessments, and emerging threats.
• Act as a trusted advisor to business, technology, risk, legal, and operational stakeholders to enable secure business outcomes.
• Coordinate security resources and influence cross‑functional teams to achieve security, compliance, and resilience objectives.
• Promote security awareness and foster a strong security culture across product development, delivery, and operations.

What You Bring

• 10+ years of experience in cybersecurity, information security, AI for security, security architecture, governance, risk and compliance (GRC), cloud security, application security, security operations, or related disciplines.
• Proven experience serving as a trusted security advisor, security lead, or product‑aligned security partner, influencing strategic security and risk decisions.
• Strong knowledge of enterprise security risk management, including risk assessment, control design, risk treatment, exception management, and executive risk communication.
• Deep understanding of security and compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, privacy regulations, and audit and assurance practices.
• Experience integrating security requirements into product development, architecture, technology transformation, and operational processes.
• Strong understanding of secure architecture and engineering principles, including secure‑by‑design, defense‑in‑depth, zero trust, least privilege, encryption, and resilience.
• Hands‑on experience with modern technology environments, including cloud platforms (AWS, Azure, or equivalent), APIs, distributed systems, containers, and hybrid infrastructure.
• Knowledge of application and product security practices, including Secure SDLC, DevSecOps, threat modeling, security testing, vulnerability management, and remediation processes.
• Familiarity with security operations disciplines such as incident response, monitoring, threat intelligence, resilience, and continuous improvement.
• Experience supporting security governance, third‑party risk management, vendor assessments, contract reviews, and regulatory or audit activities.
• Ability to evaluate and prioritize security investments, balancing risk reduction, compliance obligations, business objectives, and financial considerations.
• Exceptional communication and stakeholder management skills, with the ability to translate complex technical issues into clear business risks, recommendations, and decisions.
• Demonstrated ability to influence cross‑functional stakeholders and drive outcomes in complex, fast‑paced environments without direct authority.
• Strong judgment, decision‑making, and problem‑solving skills, with the ability to navigate ambiguity and manage competing priorities.
• Relevant industry certifications such as CISSP, CCSP, CISM, CRISC, or CCISO are considered an asset.
• Security clearance eligibility may be required depending on the assigned product or business area.
• Eligibility to work for Interac Corp. in Canada in a full‑time capacity.

What We’re Offering:

The hiring range for this position will depend on factors such as skills, experience, and job‑related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well‑being and future, and includes:

• Generous vacation and wellness days to help you recharge
• Comprehensive employer‑paid benefits coverage for peace of mind
• Market‑leading employer‑funded RRSP program to invest in your future
• Flexible hybrid work model for better work‑life balance
• Access to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family
• Pregnancy and parental leave top‑up to support growing families
• Charitable donation matching with United Way to amplify your impact

Why Join Us?

At Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose‑driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect:

• Investing in the Future – Help us unlock digital prosperity for all Canadians.

• Innovative Thinking – Collaborate on products, practices, and platforms that redefine what’s possible.

• Inclusive Culture – Be empowered to bring your whole self to work and realize your full potential.

• Inspiring Community – Work in an ecosystem where we lift each other up and rise together.

• Intentional Support – Enjoy flexible, supportive offerings that prioritize your total wellness.

Additional Pre-Employment Requirements:

To ensure the integrity of our organization, successful candidates will be required to complete background checks, which may include, Canadian Criminal Credit Check, Canadian ID Cross‑Check, Public Safety Verification, 5‑year Employment Verification, Education Verification, Credit Check, and Social Media Check.

Equal Opportunity Employer

Interac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds, experiences, and perspectives come together. That’s why we are committed to providing fair and equitable employment opportunities for all individuals, without discrimination based on race, color, ancestry, ethnic origin, place of origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, or any other characteristic protected by applicable law.

If you require accommodation during any stage of the application or recruitment process, please contact us at [e-mail]. We will work with you to meet your needs.