Strategic Information Security Program Lead

Jobgether; Canada; On-site; CAD 105,000 - 120,000; Full time

Benefits offered by this job

Health benefits

RRSP matching

Stock options

Career development

Collaborative workplace

Autonomy

Stability

Meaningful responsibilities

Inclusive workplace

Job summary

Jobgether, on behalf of a partner company, seeks an Information Security Program Manager based in Canada to lead security programs across client environments. You will advise executives, manage risk assessments, and coordinate audits while aligning with frameworks such as NIST CSF, ISO 27001, HIPAA, SOC 2, and PCI DSS.

Responsibilities include policy development, vulnerability management, incident response coordination, and business continuity planning.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or related discipline (or equivalent).
• Minimum five years in information security leadership (CISO/vCISO or similar).
• At least three years in security operations, engineering, or vulnerability management.
• Experience in consulting or MSS; multi-client regulated industries preferred.
• Hands-on experience implementing controls per NIST/ISO/HIPAA/SOC 2/PCI DSS.
• Audit/assessment experience with external audits and regulatory assessments.
• Knowledge of risk frameworks: NIST RMF, NIST SP 800-30, ISO 27005, ISO 31000, FAIR.
• Experience with regulated data environments and data classification.
• Knowledge of encryption, DLP, secure coding, and related tech.
• CISSP certification is required.
• Additional certifications (CISM/CCSP/CGRC/ISA/HCISPP/CCP) are assets.
• Strong communication and stakeholder management; client-focused.
• Leadership, decision-making, and project management skills.

Responsibilities

• Security program leadership: Develop, implement, and maintain information security programs aligned with objectives and standards.
• Executive advisory: Report to senior leadership on strategy, risks, and remediation priorities.
• Policies and controls: Establish and maintain security policies for confidentiality, integrity, and availability.
• Security solutions and operations: Oversee security tools, SBAs, incident detection, response, and SLAs.
• Risk assessments: Lead internal and third-party risk assessments and remediation planning.
• Regulatory compliance: Guide clients in maintaining controls per frameworks/regulations.
• Audit support: Coordinate audits, prepare evidence, and track findings and closures.
• Risk & control management: Map controls, address gaps, and document risk acceptance decisions.
• Protected environments: Define security requirements for regulated data (ePHI, PCI data, CUI).
• BC/DR: Develop and test business continuity and disaster recovery plans.
• Security awareness: Build training programs and collaborate across teams on secure solutions.
• Client relationship management: Translate complex requirements into practical security recommendations.

Skills

Security program leadership

Stakeholder management

Regulatory compliance

Audit coordination

Risk assessment

Vulnerability management

Incident response

Security frameworks

Data protection

Leadership

Client advisory

Education

Bachelor's degree in CS/IS/NS Engineering

CISSP

CISM

CCSP

CGRC

ISA/HCISPP/CCP

CRISC

CISA

CIPT

Job description

Jobgether, on behalf of a partner company, seeks an Information Security Program Manager based in Canada to lead security programs across client environments. You will advise executives, manage risk assessments, and coordinate audits while aligning with frameworks such as NIST CSF, ISO 27001, HIPAA, SOC 2, and PCI DSS.

Responsibilities include policy development, vulnerability management, incident response coordination, and business continuity planning.