Interim Chief Information Security Officer

Lead institution-wide cybersecurity strategy and operations as Toronto’s Interim Chief Information Security Officer for a four-to-six-month mandate. Advise executives and protect institutional data.

Reporting to the Chief Information Officer, this senior security leader will build and strengthen a critical information security function. The mandate spans governance, risk, compliance, incident response, AI threats, cloud adoption, and security culture. Success requires transforming security capabilities within a complex academic institution.

Key Responsibilities:

• Define security strategy, governance, policies, and institutional capabilities
• Advise executives and the Board Audit & Risk Committee
• Lead regulatory compliance, audits, assessments, and incident reporting
• Coordinate incident response, vulnerability assessments, and tabletop exercises
• Develop security awareness programs and measurable training targets

Requirements:

• Master’s degree or equivalent training and experience
• CISSP, CISM, or comparable information security qualification
• Minimum 10 years’ progressively responsible security experience
• Minimum 5 years’ senior leadership and people management experience
• Expertise in NIST, ISACA, CIS Controls, and applicable legislation

Apply strategic security leadership, risk management, and operational expertise to strengthen a Toronto academic institution’s cyber resilience.