Managing Director and Chief Information Security Officer

The Managing Director & Chief Information Security Officer (CISO) leads the evolution of an enterprise-wide cybersecurity and cyber resilience program-protecting the organization's assets, data, operations, and reputation in an increasingly complex global threat landscape. This role sets the strategy, advances modern security capabilities, and enables secure innovation, including the responsible adoption of AI and emerging technologies.

Reporting and Collaboration

Reports to the Chief Technology Officer. The CISO engages across Technology and partners closely with Enterprise Risk Management, Legal, Compliance, Privacy, Internal Audit, and business leaders to align cybersecurity with enterprise priorities and risk appetite. The role also engages with executive stakeholders, the Board, auditors, portfolio companies, industry peers, and technology vendors to maintain a strong, forward looking security posture.

What you'll do

• Act as the enterprise authority on cyber risk, ensuring risks are identified, prioritized, and clearly communicated;
• Define and deliver the enterprise cybersecurity and resilience strategy aligned to business priorities;
• Advise the Board and executive committees on cybersecurity risks and resilience strategies;
• Evolve and modernize security capabilities in response to emerging threats and transformation initiatives;
• Oversee core security domains including security operations, threat intelligence, IAM, cloud security, and data protection;
• Establish and maintain governance frameworks, policies, standards, and controls;
• Lead enterprise wide cybersecurity awareness and culture initiatives;
• Direct response to cybersecurity incidents, ensuring effective recovery and continuous improvement;
• Enable secure adoption of cloud, digital platforms, automation, and AI technologies;
• Provide oversight of AI security governance and emerging risk management (e.g., adversarial AI, data leakage);
• Build and maintain external partnerships with peers and intelligence sharing networks;
• Lead and develop high performing cybersecurity teams, including workforce and capability planning.

What you'll need

• 15+ years of progressive experience in cybersecurity, technology risk, or information security, including 7+ years in senior leadership roles;
• Undergraduate degree required; CISSP certification required (additional certifications considered an asset);
• Proven leadership of enterprise scale cybersecurity programs and large transformation initiatives;
• Executive level stakeholder management experience, including advising Boards and senior leadership;
• Deep expertise across cybersecurity domains (e.g., security operations, threat management, governance, resilience);
• Strong knowledge of cloud security, IAM, data protection, and control frameworks;
• Advanced understanding of emerging technologies and risks, including AI, automation, and digital ecosystems;
• Experience leading cyber incident response and recovery in complex, global environments;
• Strong ability to communicate complex risks clearly to business leaders and influence decision making;
• Demonstrated success building and leading high performing, inclusive teams;
• Experience managing budgets, vendors, and strategic partnerships;
• Experience supporting secure adoption and governance of emerging technologies, including AI enabled capabilities.

What we're offering

• Numerous opportunities for professional growth and development;
• Comprehensive employer paid benefits coverage;
• Retirement income through a defined benefit pension plan;
• Opportunity to invest back into the fund through our Deferred Incentive Program;
• A flexible work environment combining in office collaboration and remote working;
• Competitive time off;
• A Flexible Travel Program gives you the option to work abroad in another region/country for up to a month each year;
• Employee discount programs including Edvantage and Perkopolis.

Diversity & Inclusion

At Ontario Teachers', diversity is one of our core strengths. We take pride in ensuring that the people we hire and the culture we create reflect and embrace diversity of thought, background and experience. We celebrate diversity and foster inclusion through events for colleagues to connect for professional development, networking and mentoring.