Remote Security Lead: Strategy, Architecture & Compliance

Newton; Remote; CAD 80,000 - 100,000; Full time

Job summary

A leading Canadian financial services firm is seeking a Security Lead to oversee the entire security function, ensuring strong security practices across infrastructure and applications. The ideal candidate will define security strategies, manage risks, and ensure compliance with CIRO and SOC 2 standards. Experience in fintech and knowledge of IAM principles are crucial. You will work remotely as part of a dynamic team that values creativity and risk management, contributing to the company's mission of enabling financial freedom for Canadians.

Benefits

Inclusive work environment

Accommodation for disabilities

Qualifications

• Strong understanding of IAM and risk management frameworks.
• Experience with SOC 2 or comparable audit processes.
• Comfortable reviewing infrastructure-as-code.

Responsibilities

• Define and maintain the company’s security roadmap.
• Review infrastructure designs from a security perspective.
• Own the company’s application security posture.
• Define and maintain the incident response framework.
• Coordinate external penetration tests and track findings to closure.
• Ensure implemented controls withstand audit scrutiny.
• Strengthen security controls on developer machines.

Skills

IAM and least privilege principles

Logging and monitoring architecture

Infrastructure-as-code (Pulumi)

Security architecture understanding

Risk management frameworks

Penetration testing

Vendor risk management

Education

Experience in a regulated environment (fintech, financial services)

Hands-on experience with SOC 2 or comparable audit processes

Tools

AI tooling governance

Job description

A leading Canadian financial services firm is seeking a Security Lead to oversee the entire security function, ensuring strong security practices across infrastructure and applications. The ideal candidate will define security strategies, manage risks, and ensure compliance with CIRO and SOC 2 standards. Experience in fintech and knowledge of IAM principles are crucial. You will work remotely as part of a dynamic team that values creativity and risk management, contributing to the company's mission of enabling financial freedom for Canadians.