Director, Cybersecurity

Lead Our Cybersecurity Strategy and Protect What Matters Most CPA Ontario is not like other organizations We operate at a rare intersection, both regulator and membership body, responsible for upholding the integrity of the CPA designation while supporting more than 105,000 members and 19,000 students across the province. Our work sits between business and the public interest, between the evolving demands of industry and the standards that make trust possible. Careers built here tend to look different because the work itself is different. You are not simply contributing to an organization. You are helping shape a profession that touches nearly every sector of the economy at a moment when expectations, technology, and the nature of work are all being rewritten. About This Opportunity: As Director, Cybersecurity, you'll lead our Security Operations team and partner closely with the CISO to advance our cybersecurity strategy, strengthen our security posture, and support the secure adoption of AI and data technologies. Leading a team of three cybersecurity professionals, you'll combine technical expertise with collaborative leadership to build resilient security practices, guide critical initiatives, and help safeguard our organization's future. What You’ll Be Doing: * Lead and coach the Cybersecurity Operations team. * Oversee threat detection, incident response, vulnerability management, and security operations. * Strengthen AI and data security programs, including AISPM and DSPM initiatives. * Partner with IT, Enterprise Architecture, and Data teams to manage emerging technology risks. * Develop and enhance cybersecurity playbooks, controls, and response processes. * Lead vendor assessments, selection, and onboarding, including MDR providers. * Support the CISO in delivering cybersecurity, AI governance, and data security strategies. * Develop meaningful KPIs and KRIs that support informed decision-making and continuous improvement. To Be Successful You Need: * CISSP designation; additional cybersecurity, cloud, or AI security certifications are an asset. * 7+ years of progressive experience across cybersecurity operations, governance, risk, compliance, security architecture, and incident response. * Demonstrated success leading, mentoring, and developing technical teams. * Hands-on experience implementing and managing cybersecurity technologies and controls. * Strong knowledge of industry frameworks such as NIST, CIS, PCI-DSS, and MITRE. * Experience with Microsoft E5 security capabilities. * Familiarity with AI and data security practices, governance frameworks, and emerging technologies. * Proven ability to build trusted partnerships, influence stakeholders, and drive security outcomes. Salary Range * The starting annual salary range for this position is $162,100 - $194,500, per annum, based on your qualifications, experience, and internal parity. Exceptions may be considered with further review. Why Join CPA Ontario? * We support your well-being through industry-leading benefits, mental health resources, savings programs, and a sustainable approach to how work gets done. * We are committed to inclusion as a core part of how we operate, not as an afterthought. * We have a hybrid working environment, with three days a week on-site - Tuesday, Wednesday and Thursday - complemented by 2 days of remote work. We are intentional about that: the work we do benefits from being together. We want those days you work from home to be comfortable and offer a one-time bonus towards a home office when you start. * We invest in your growth through learning and professional development opportunities, stretch projects, secondments, and genuine paths for career progression. * We move quickly. The pace reflects the profession we serve; it can be demanding, but the work matters, and the team around you is invested in the same outcomes you have. We appreciate your interest in CPA Ontario and this position At CPA Ontario, we are committed to building high-performance teams. Our selection process is thorough, fair and run by humans. All suitable applications are reviewed by someone on our Recruitment team, and if your qualifications and experience meet the requirements of this role, we’ll be in touch. We encourage you to set up CPA Ontario job alerts for positions that align to your experience and career goals. CPA Ontario is an inclusive employer. Accommodation is available under the Ontario Human Rights Code. If you require a disability-related accommodation to participate in the recruitment process, please email [email protected] [[email protected]] with “Accommodation Required” in the subject line to provide your contact information. A member of the Recruitment team will contact you within 48 hours.

The Director of Cybersecurity will lead the Security Operations team and partner with the CISO to advance cybersecurity strategy and secure AI and data technology adoption. Responsibilities include overseeing threat detection, incident response, vulnerability management, and managing vendor relationships.

Candidates must hold a CISSP designation and possess at least 7 years of progressive experience in cybersecurity operations, governance, and risk management. Strong knowledge of industry frameworks like NIST and CIS, along with experience in Microsoft E5 security capabilities, is required.

• Health benefits • Mental health resources • Savings programs • Professional development • Home office bonus

• LeadershipPreferred

Identified from the job description. Confirm important requirements above.

• Cybersecurity strategy
• Security operations
• Threat detection
• Incident response
• Vulnerability management
• AI security
• Data security
• Risk management
• Security architecture
• Compliance
• Leadership
• Vendor management
• NIST
• CIS
• PCI-DSS
• Microsoft E5
• Cyber Security Management
• Influencing Skills
• AI Security
• Cyber Operations
• Cyber Security Strategy
• Influencing Without Authority
• Threat Detection
• AI Adoption
• Emerging Technologies
• Resilience
• IT Security Architecture
• Artificial Intelligence
• Mental Health
• Certified Information Systems Security Professional
• Decision Making
• Continuous Improvement Process
• Cyber Security
• Data Security
• Economics
• Incident Response
• Governance
• Enterprise Architecture
• Key Performance Indicators (KPIs)
• Mentorship
• Payment Card Industry (PCI) Data Security Standards
• Relationship Building
• Vulnerability Management

• Technology
• Security & Safety
• Management & Leadership
• Data & Analytics
• Finance & Accounting
• Director of Cyber Security
• Cyber Security Manager / Administrator
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

Minimum education

Professional degree

Minimum experience

5+ years

Posting language

English

Working hours

40 hours per week

Office presence

3 days per week