Product Security Engineer building secure CIAM authentication services for Affirm’s pay - over - time platform. Developing Python/Kotlin APIs, MFA, identity integrations, and reliable account - access experiences.
About the role
- Global cybersecurity leader defining strategy, risk governance, and security operations for Innocap’s managed alternative-investment platform. Leading worldwide teams and protecting regulated financial technology.
Responsibilities
- Define and execute Innocap’s global cybersecurity strategy and operating model
- Safeguard the confidentiality, integrity, availability, and resilience of information assets, technology platforms, and critical business services
- Advise executive leadership on cyber risk and establish security posture and risk-based priorities
- Provide independent challenge and escalation on material cybersecurity matters
- Lead a global team of employees, consultants, and security partners
- Collaborate with Technology, Risk, Compliance, Legal, Privacy, Internal Audit, and business leaders to embed security by design
- Own cybersecurity policies, standards, target operating model, and multi-year roadmap
- Establish an enterprise approach to identifying, assessing, prioritizing, treating, and accepting cyber risk
- Report to executive leadership and governance bodies on cyber risk, threats, incidents, controls, regulatory exposure, investments, and program performance
- Set security architecture principles across Azure, Microsoft 365, identity, networks, applications, data platforms, business intelligence, software development, cloud services, and AI solutions
- Lead security operations including monitoring, threat intelligence, detection engineering, vulnerability management, and incident response
- Direct containment, investigation, recovery, root-cause analysis, and lessons learned for significant security events
- Define cyber crisis management, response, and recovery capabilities; conduct exercises and simulations
- Oversee identity and access management, privileged access, data protection, encryption, information handling, and zero-trust security
- Own cybersecurity components of third-party risk management, including vendor due diligence, risk tiering, contractual requirements, monitoring, remediation, and incident coordination
- Build, develop, and retain a high-performing global cybersecurity team and partner ecosystem
- Oversee budgets and vendors and drive enterprise-wide security awareness and role-based learning
Requirements
- University degree or equivalent relevant training in cybersecurity, computer science, information technology, engineering or a related field
- Typically 15+ years of progressive cybersecurity, technology risk or information security experience
- Substantial experience leading a global or multi-region security function in a complex, regulated environment
- Experience operating with a CISO-level mandate, shaping enterprise strategy, advising senior executives, and communicating material risk to non-technical decision-makers
- Deep knowledge of cybersecurity governance, enterprise risk management, security architecture, cloud security, incident response, resilience, threat management, data protection, and third-party risk
- Advanced experience securing Microsoft Azure and Microsoft 365 environments
- Strong understanding of modern identity, zero-trust, application security, DevSecOps, and AI-related security risks
- Practical knowledge of NIST CSF, ISO/IEC 27001, CIS Controls, and SOC 2
- Proven success leading and developing global teams and managing SOC capabilities, external service providers, budgets, and strategic security investments
- Exceptional judgment, executive presence, and influence
- Excellent written and verbal communication skills in English
- French knowledge is an asset
- Knowledge of financial markets, alternative investments, asset servicing, or the hedge fund industry is a strong asset
- Relevant certifications such as CISSP, CISM, CRISC, or CCSP are assets
Benefits
- Equal opportunity employer
- Inclusive, equitable, and people-first culture
- Accommodation during any stage of the application process
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff Security Software Engineer securing Keycard’s agent identity and access infrastructure. Threat - modeling token exchange, delegation, cloud controls, and AI - agent authorization.
Senior Security Consultant leading integrated security system design and project delivery. Advising Canadian commercial, institutional, and government building clients.
Senior AI security specialist strengthening governance, architecture, and risk controls at TD, a global financial institution. Advising executives and technology teams on secure AI adoption.
Principal Product Security Researcher leading threat research and security strategy at Chainguard, a provider of hardened open - source software builds. Influencing product roadmaps and industry security practices.
Principal Product Security Researcher leading threat research and product security strategy. Shaping secure, production - ready open - source software builds for Chainguard customers.
Principal Product Security Researcher shaping threat research and security strategy for Chainguard’s hardened open - source software. Influencing product roadmaps, mitigating supply - chain risks, and advancing industry security practices.
Endpoint security engineer designing and operating enterprise protection for TD, a major North American bank. Leading security platforms, technical initiatives, and a small engineering team.
Hybrid offensive and defensive security advisor protecting Desjardins systems, networks, and applications. Investigating incidents, assessing vulnerabilities, and recommending mitigation measures.
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.