Sr Director, Cyber Security Governance Risk & Compliance

Rogers; Brampton; On-site; CAD 120,000 - 160,000; Full time

Job summary

A leading telecommunications company in Brampton is seeking a Sr Director, Cyber Security. This role involves overseeing governance, risk, and compliance in cyber security. The ideal candidate will have extensive experience in risk management and a strong ability to lead teams effectively. A relevant degree and security certifications are required.

Benefits

Health & well-being benefits

Donation matching

Paid time off for volunteering

Pension plan & Employee stock options

Generous employee discounts

Leadership development, Mentorship, and Coaching programs

Qualifications

• 10+ years of broad and deep information security experience in complex technology environments.
• Experience managing large teams (20+ staff) with a minimum of 5 direct reports.
• CISSP, CISM, CISA or similar certifications.

Responsibilities

• Oversee the development and maintenance of information security policies and standards.
• Direct the cyber security risk framework for cloud, access, and network security.
• Build and maintain relationships with stakeholders to demonstrate the value of security.

Skills

Leadership

Risk Management

Cyber Security Governance

Effective Communication

Analytical Skills

Technical Acumen

Education

Undergraduate degree in Computer Science or Engineering

Tools

ISO 27002

COBIT

PCI DSS

Job description

Overview

Sr Director, Cyber Security Governance Risk & Compliance

Rogers is seeking a Sr Director, Cyber Security to support the activities of the Governance Risk & Compliance team. This team is responsible for developing and maintaining the information security policy framework, establishing and maintaining risk management methodology, ensuring that projects design to applicable security requirements, performing threat risk assessments, maintaining the security awareness and training program, establishing and monitoring compliance to platform configuration baselines and providing ongoing strategic security guidance. Reporting to the SVP of Cyber Security at the Rogers Park Brampton Campus, this individual will have the following responsibilities:

What you will be doing

• Cyber security risk management, compliance management, and / or enterprise cyber security governance, embedding proactive thinking and Cyber risk reduction into all activities.
• Lead, motivate, develop, and maximize the contribution of multiple teams and individuals to work effectively as one team
• Oversee the development and maintenance of information security policies, standards, configuration baselines, and guidelines. Ensure that documents are reviewed and updated on a regular basis.
• Oversee the generation of regular security metrics for communication to senior leadership with the objective of driving continuous improvement and informed decision-making.
• Ensure that information security policies and standards satisfy all applicable regulatory and legislative compliance requirements and address new threats and technology.
• Direct and oversee the creation, adoption, maintenance and automation of and cyber security risk framework to be inclusive of cyber threats in cloud, access, digital, data and network security
• Oversee the development and maintenance of cyber security risk management program to ensure that security and privacy requirements are embedded into Rogers products and services
• Manage Threat Risk Assessment activities, especially those that are highly complex.
• Monitor the external and internal risk landscape and drive changes to the information security strategy. Oversees its implementation through budgetary planning and prioritization.
• Direct security awareness and training activities, focusing on both general and targeted audiences.
• Evolve the Cyber Security program to keep pace with Rogers' business needs (i.e. growth, acquisitions, new revenue streams)
• Build and maintain key relationships with technology peers and senior stakeholders to demonstrate the value and effectiveness of security to the company.
• Effectively communicate information security risks to a diverse audience from technical staff to senior leaders to ensure that informed decisions are made and risk is treated appropriately.

Qualifications

What you have

• Undergraduate degree in Computer Science or Engineering, or emphasis in technology or related field
• 10+ years of broad and deep information security experience in complex technology environments
• Experience managing large teams (e.g. 20+ staff) with a minimum of 5 direct reports.
• Experience with frameworks / standards such as ISO 27002, COBIT, ISF SoGP, PCI DSS, PIPEDA
• Previous experience in the telecommunications and / or media industry is an asset
• CISSP. CISM, CISA or similar certifications and training are assets
• Communicates effectively with meaningful and articulate discussions leveraging effective language, tone, and style.
• Synthesizes information into succinct, concise and logical summaries.
• Creates clear written business documents that demonstrate clarity of thought.
• Able to analyze complex security issues and provide pragmatic options and recommendations.
• Demonstrable understanding of how to network and develop healthy working relationships with various key stakeholders.
• Strong business and technical acumen
• Excellent planning and organizational skills
• Ability to work with cross-functional teams and achieve goals and meet deadlines in a fast-paced environment
• Strong ability to coach and mentor individuals on the team
• Can direct and manage multiple priorities in high pressure situations

To protect our people, brand and assets, a pre-employment background check will be conducted. As part of our selection process, all candidates must clear a criminal background check. Additionally, a credit check and drivers abstract may be required depending on the role.

Schedule : Full time

Shift : Day

Length of Contract : Not Applicable (Regular Position)

Work Location : 8200 Dixie Road (101), Brampton, ON

Travel Requirements : None

Background Check(s) Required : Criminal Record and Credit Check

Posting Category / Function : Technology & Information Technology

Requisition ID : 328898

To support career growth, collaboration, and high-performing teams, all Corporate Employees are expected to work onsite a minimum of four (4) days per week starting October 6, 2025, increasing to five (5) days per week effective February 2, 2026. We believe that in-person connection strengthens our culture and drives industry-leading performance.

At Rogers, we believe the key to a strong business, is a diverse workforce where equity and inclusion are core to making everyone feel like they belong. We do this by embracing our diversity, celebrating our different perspectives, and working towards creating environments that empower our people to bring their whole selves to work. Everyone who applies for a job will be considered. We recognize the business value in creating a workplace where each team member has the tools to reach their full potential by removing any barriers for equal participation. We work with our candidates who are experiencing a disability throughout the recruitment process to ensure that they have what they need to be at their best. Please reach out to our recruiters and hiring managers to begin a conversation about how we can ensure that you deliver your best work. You matter to us! For any questions, please visit the Recruitment Process FAQ.

Posting Notes : Technology

Location : Brampton, ON, CA

Being a Rogers team member comes with some great perks & benefits including :

• Health & well-being benefits
• Donation matching
• Paid time off for volunteering
• Wealth Accumulation including : Pension plan & Employee stock options
• Generous employee discounts
• Leadership development, Mentorship, and Coaching programs
• available for full-time and part-time permanent employees, some restrictions apply

Looking for career guidance and inspiration?

Catch up on the latest episodes of For the Love of Work podcast with Dr. Sonia Kang.

Job Segment : Risk Management, Telecom, Telecommunications, Cyber Security, Information Security, Technology, Finance, Security