Product Security, Principal

Altis Technology; Toronto; Hybrid; CAD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible hybrid work environment

Employer-paid benefits

Generous vacation and wellness days

RRSP program

Parental leave top-up

Opportunity to influence security策略

Job summary

Altis Technology is seeking a Product Security Principal in Canada, hybrid work with on-site requirements to be confirmed. The role focuses on embedding security across the product lifecycle, partnering with product, engineering, and risk teams to balance innovation with protection.

You will lead risk assessments, threat modelling, and secure-by-design reviews, while guiding governance, audits, and third-party risk management.

Qualifications

• 10+ years of cybersecurity experience across architecture, cloud, and operations.
• Strong knowledge of ISO 27001, NIST CSF, PCI DSS and privacy regulations.
• Hands-on familiarity with AWS, Azure, APIs, distributed systems, containers, and hybrid infra.
• Expertise in Secure SDLC, DevSecOps, threat modelling, vulnerability management and incident response.
• Understanding of zero trust, least privilege, encryption, resilience and third-party risk.

Responsibilities

• Serve as a trusted security advisor guiding product strategy and architecture decisions.
• Lead security risk assessments, threat modelling and secure-by-design reviews across products and platforms.
• Oversee security governance, audits, third-party risk and remediation planning.
• Partner with technical teams to strengthen cloud, application, identity and infrastructure security.
• Guide incident response, vulnerability management, resilience and continuous improvement initiatives.
• Influence security investments and priorities while communicating risks to senior stakeholders.

Skills

Security leadership

Security architecture

Cloud security

Secure SDLC/DevSecOps

Threat modelling

Compliance & risk governance

Tools

AWS

Azure

APIs

Containers

Job description

Product Security Principal
Location: Canada, Hybrid (on-site requirements to be confirmed)
Language: Excellent written and verbal communication skills in English
Background Check Requirement: Criminal record, identity, public safety, employment, education, credit and social media checks may be required. Security clearance eligibility may also apply.

About the Opportunity

Are you a strategic cybersecurity leader who thrives at the intersection of technology, risk and business innovation? An established organization in Canada's financial technology sector is seeking a Product Security Principal to help protect critical digital products and services that Canadians rely on every day. In this influential role, you'll serve as a senior security authority, partnering with Product, Engineering, Operations, Legal, Risk and Compliance teams to embed security throughout the product lifecycle. You'll balance innovation with protection, helping teams make confident, risk-informed decisions.

What's In It for You

• A flexible hybrid work environment that supports work-life balance
• Comprehensive employer-paid benefits, generous vacation and wellness days
• A competitive employer-funded RRSP program and parental leave top-up
• Opportunities to influence enterprise security strategy and collaborate with innovative technology teams
• An inclusive, purpose-driven culture that values professional growth and collaboration

Your Responsibilities

• You’ll serve as a trusted security advisor, guiding product strategy, architecture and operational decisions.
• You’ll lead security risk assessments, threat modelling and secure-by-design reviews across products and platforms.
• You’ll oversee security governance, regulatory compliance, audits, third-party risk and remediation planning.
• You’ll partner with technical specialists to strengthen cloud, application, identity and infrastructure security.
• You’ll guide incident response, vulnerability management, resilience and continuous improvement initiatives.
• You’ll influence security investments, budgets and priorities while communicating risks to senior stakeholders.

Skills and Qualifications

• 10+ years of cybersecurity experience spanning security architecture, AI for security, GRC, cloud, application or operational security.
• Strong knowledge of ISO 27001, NIST CSF, PCI DSS, privacy regulations, audit practices and enterprise risk management.
• Hands-on familiarity with AWS, Azure, APIs, distributed systems, containers and hybrid infrastructure.
• Expertise in Secure SDLC, DevSecOps, threat modelling, security testing, vulnerability management and incident response.
• Understanding of zero trust, least privilege, encryption, resilience, third-party risk and security investment planning.
• Exceptional communication, judgment and stakeholder influence, with CISSP, CCSP, CISM, CRISC or CCISO certification considered an asset.

Note from the Hiring Manager

"We’re looking for someone who can see the bigger picture, connect security with business priorities and build trusted relationships across teams. You’ll have the opportunity to make a meaningful impact while helping us innovate securely."

We appreciate the time and effort all applicants invest in their submissions. Please note that only candidates shortlisted for this role will be contacted directly. However, your profile will remain under consideration for future opportunities that align with your experience and career goals. All qualified applicants will receive fair consideration for employment. We welcome individuals of all backgrounds, experiences, and identities including those who identify as women, members of racialized groups, Indigenous Peoples, persons with disabilities, and 2SLGBTQIA+ communities. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions. Our human recruiters review all applications and always make the final hiring decision. On occasion, we also use AI-assisted tools to help review applications.