Sr Director, Cyber Security Governance Risk & Compliance

Rogers Communications; Brampton; On-site; CAD 150,000 - 180,000; Full time

Job summary

A leading telecommunications firm in Brampton is seeking a Sr Director in Cyber Security to oversee risk management, compliance, and governance. The role demands a minimum of 10 years in information security, experience in managing large teams, and familiarity with regulatory frameworks. Strong communication and analytical skills are essential. The position requires onsite work and is tied to a commitment to diversity and inclusion.

Benefits

Diversity and inclusion initiatives

Career growth opportunities

Qualifications

• 10+ years of information security experience in complex technology environments.
• Experience managing large teams (20+ staff) with at least 5 direct reports.
• Strong ability to coach and mentor individuals on the team.

Responsibilities

• Oversee the development and maintenance of information security policies.
• Ensure information security policies satisfy regulatory compliance.
• Manage Threat Risk Assessment activities.

Skills

Communication

Risk Management

Team Leadership

Cyber Security Governance

Compliance Management

Analytical Skills

Education

Undergraduate degree in Computer Science or Engineering

Tools

ISO 27002

COBIT

PCI DSS

PIPEDA

Job description

Overview

Our Technology team wakes up every day with one goal in mind - connecting Canadians to the people and things that matter most. We support 30 million Canadians each month through a robust technology portfolio, driving large-scale, complex, and high-visibility projects and programs that shape the future of technology in Canada and expand connectivity from coast to coast. Rogers is seeking a Sr Director, Cyber Security to support the activities of the Governance Risk & Compliance team. This team develops and maintains the information security policy framework, establishes risk management methodology, ensures projects are designed to meet security requirements, performs threat risk assessments, maintains the security awareness and training program, and provides ongoing strategic security guidance. Reporting to the SVP of Cyber Security at the Rogers Park Brampton Campus, this role will have the following responsibilities.

What you will be doing

• Cyber security risk management, compliance management, and/or enterprise cyber security governance, embedding proactive thinking and cyber risk reduction into all activities.
• Lead, motivate, develop, and maximize the contribution of multiple teams and individuals to work effectively as one team.
• Oversee the development and maintenance of information security policies, standards, configuration baselines, and guidelines. Ensure documents are reviewed and updated regularly.
• Oversee the generation of regular security metrics for communication to senior leadership to drive continuous improvement and informed decision-making.
• Ensure information security policies and standards satisfy applicable regulatory and legislative compliance requirements and address new threats and technology.
• Direct and oversee the creation, adoption, maintenance and automation of a cyber security risk framework inclusive of cyber threats in cloud, access, digital, data and network security.
• Oversee the development and maintenance of a cyber security risk management program to embed security and privacy requirements into Rogers products and services.
• Manage Threat Risk Assessment activities, especially those that are highly complex.
• Monitor the external and internal risk landscape and drive changes to the information security strategy, overseeing its implementation through budgetary planning and prioritization.
• Direct security awareness and training activities for general and targeted audiences.
• Evolve the Cyber Security program to keep pace with Rogers' business needs (growth, acquisitions, new revenue streams).
• Build and maintain key relationships with technology peers and senior stakeholders to demonstrate the value and effectiveness of security to the company.
• Communicate information security risks effectively to a diverse audience from technical staff to senior leaders to support informed decisions and appropriate risk treatment.

What you have

• Undergraduate degree in Computer Science or Engineering, or emphasis in technology or related field
• 10+ years of broad and deep information security experience in complex technology environments
• Experience managing large teams (e.g., 20+ staff) with a minimum of 5 direct reports
• Experience with frameworks/standards such as ISO 27002, COBIT, ISF SoGP, PCI DSS, PIPEDA
• Previous experience in the telecommunications and/or media industry is an asset
• CISSP, CISM, CISA or similar certifications and training are assets
• Effective communication with meaningful and articulate discussions leveraging appropriate language, tone, and style
• Ability to synthesize information into succinct, concise, and logical summaries
• Ability to create clear written business documents that demonstrate clarity of thought
• Able to analyze complex security issues and provide pragmatic options and recommendations
• Demonstrable understanding of how to network and develop healthy working relationships with key stakeholders
• Strong business and technical acumen
• Excellent planning and organizational skills
• Ability to work with cross-functional teams and achieve goals and meet deadlines in a fast-paced environment
• Strong ability to coach and mentor individuals on the team
• Ability to direct and manage multiple priorities in high-pressure situations

To protect our people, brand and assets, a pre-employment background check will be conducted. As part of our selection process, all candidates must clear a criminal background check. Additionally, a credit check and drivers abstract may be required depending on the role.

Schedule: Full time
Shift: Day
Length of Contract: Not Applicable (Regular Position)
Work Location: 8200 Dixie Road (101), Brampton, ON
Travel Requirements: None
Background Check(s) Required: Criminal Record and Credit Check
Posting Category/Function: Technology & Information Technology
Requisition ID: 328898

To support career growth, collaboration, and high-performing teams, all Corporate Employees are expected to work onsite a minimum of four (4) days per week starting October 6, 2025, increasing to five (5) days per week effective February 2, 2026. We believe that in-person connection strengthens our culture and drives industry-leading performance.

At Rogers, we believe the key to a strong business is a diverse workforce where equity and inclusion are core to making everyone belong. We do this by embracing diversity, celebrating different perspectives, and creating environments that empower our people to bring their whole selves to work. Everyone who applies will be considered. We recognize the business value in creating a workplace where each team member has the tools to reach their full potential by removing barriers for equal participation. We work with candidates who are experiencing a disability throughout the recruitment process to ensure they have what they need to be at their best. Please reach out to our recruiters and hiring managers to begin a conversation about how we can ensure you deliver your best work. You matter to us! For questions, please review the Recruitment Process FAQ.

Posting Notes: Technology