Director, Information Security

Permanent

As one of Canada’s leading life insurers, Blue Cross Life Insurance Company of Canada (Blue Cross Life) takes great pride in being the most trusted brand by Canadian consumers, offering exceptional coverage tailored to protect them and their families.

Federally licensed with operations across Canada, Blue Cross Life provides a full suite of top-tier Individual and Group Life and Disability insurance options. This comprehensive range of products is backed by an insurer with decades of experience protecting Canadians.

Our employees are the key component in enabling us to deliver competitive life and disability products nationally; we value their knowledge and integrity and are dedicated to their professional development by providing an environment of continuous learning and growth. We seek creative problem solvers who care about the work they do while helping to drive responsiveness and insight throughout our organization. 

If you are looking for an opportunity in a challenging, fast-paced, and collaborative work environment, the career you have been looking for may be waiting for you at Blue Cross Life.

Lead Cybersecurity Strategy. Influence Business Decisions. Strengthen Organizational Resilience.

As part of Blue Cross Life's continued investment in cybersecurity, risk management, and operational resilience, we are creating a new Director, Information Security role to lead and evolve our enterprise security program. This is a unique opportunity to shape security strategy, influence business decisions, and help strengthen the organization's cyber resilience.

Reporting to the Chief Risk Officer, you will be responsible for shaping and executing the organization's cybersecurity strategy, security governance framework, cloud security oversight, and cyber risk management program. This is a highly visible leadership role that requires someone who can bridge the gap between technology and business, translating complex cybersecurity risks into meaningful insights, practical recommendations, and informed business decisions.

We're looking for a leader who combines strong technical expertise with exceptional communication and stakeholder management skills, while building a security program that supports the organization's strategic objectives.

What You'll Do

• Lead the development and execution of Blue Cross Life's cybersecurity strategy, roadmap, and governance framework.
• Oversee the organization's cybersecurity risk management program and security architecture and control environments.
• Serve as a trusted advisor to Executive Leadership and the Board by providing clear, actionable insights on cybersecurity risks, trends, and priorities.
• Lead cloud security, vulnerability management, threat monitoring, cybersecurity incident response, and data protection initiatives.
• Manage key security vendors and managed service providers, ensuring performance, accountability, and effective risk management.
• Partner with business leaders, technology teams, risk and compliance teams, and external service providers to strengthen organizational resilience.
• Lead and develop the Information Security team while promoting a culture of security awareness and continuous improvement.

What You'll Need

• 10+ years of progressive experience in cybersecurity, information security, IT risk management, or related technology leadership roles.
• Experience leading cybersecurity teams and enterprise security programs.
• Proven ability to translate complex technical risks and security concepts into actionable business insights and recommendations.
• Ability to communicate complex security risks and technical concepts to executive leaders, Boards, and non-technical stakeholders.
• Strong expertise in cybersecurity governance, risk management, operational resilience, and incident response.
• Experience working within insurance, financial services, or another highly regulated industry.
• Experience managing managed service providers (MSPs), security vendors, and third-party security relationships.
• AWS cloud security experience is strongly preferred.

Pay

$120,336 - $171,908 CAD

Apply today and help shape the future of cybersecurity at Blue Cross Life.

#CBM1

This posting is for a newly created position within our organization.

The Base Pay range may vary depending on the successful candidate or other relevant job-related factors such as knowledge, skills, qualifications, experience and education/training. In addition to Base Pay, eligible Blue Cross Life employees may participate in various performance-based incentive programs. Payments under these programs are discretionary and subject to both individual and organizational results.  

Blue Cross Life is an equal opportunity employer. We strive to foster a culture where everyone is enabled to achieve their full potential - a culture of diversity, equity and inclusion (DEI). Accessibility is a top priority.
 
For applicants with disabilities, we provide accommodations throughout the recruitment, selection and/or assessment process. If selected to participate in the recruitment, selection and/or assessment process, please inform Human Resources staff of the nature of any accommodation(s) that you may require in respect of any materials or processes used to ensure your equal participation. 
 

Our recruitment process may involve automated tools, including AI, to assist in screening applications.

We would like to thank all candidates for expressing interest.  Please note that only those selected for interviews will be contacted. If you experience any technical issues throughout the application process, please email: Medavie.Recruitment@medavie.ca. 

® Registered trademark of the Canadian Association of Blue Cross Plans, an association of independent Blue Cross Plans and Licensees. Used under license by Blue Cross Life Insurance Company of Canada, an independent licensee of the Canadian Association of Blue Cross Plans.