Want to know if this job is worth applying to?
Toronto, Ontario, Canada
Onsite
Putting people first, every day
BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth.
Your Opportunity
BDO Canada’s National office is looking for a Director, Information Security, to join our National Information Technology team, responsible for leading the organization’s global information security strategy, governance, and operations. This newly created role will develop and implement enterprise-wide security programs that protect company assets, data, and systems from internal and external threats, ensuring the confidentiality, integrity, and availability of our digital assets while enabling secure business growth across Canada and globally.
The Director will be the architect of BDO Canada’s information security vision, strategy, and compliance and shape the continued growth and maturity of the ISMS program. BDO Canada’s Information Security needs span regulatory, information security, privacy, and more. The Director will partner closely with executive leadership, IT, risk management, legal, and compliance teams to maintain a strong security posture protecting our people, clients, and data.
Key responsibilities include:
Strategic Leadership
Develop and execute a comprehensive enterprise information security strategy aligned with business goals and risk tolerance.
Establish a security governance framework, policies, and standards consistent with ISO 27001, SOC II, NIST, and other relevant frameworks.
Lead the creation and execution of the organization’s security roadmap — encompassing people, process, and technology improvements.
Present regular security posture updates, metrics, and risk assessments to executive management and the board of directors.
Risk Management & Compliance
Identify, assess, and manage information security risks across corporate and operational environments.
Ensure compliance with applicable regulations and standards such as PIPEDA, GDPR, SOC 2, PCI DSS, and provincial/federal privacy laws.
Direct the execution of periodic security risk assessments, internal audits, and third-party reviews.
Partner with Legal and Privacy teams to oversee incident response, data breach notification, and regulatory reporting requirements.
Security Operations
Oversee day-to-day security operations, including threat detection, monitoring, vulnerability management, and incident response.
Lead the deployment and management of security technologies (SIEM, EDR/XDR, IAM, DLP, CASB, MFA, encryption, etc.).
Manage and continuously improve the Security Operations Center (SOC) and incident management processes.
Coordinate with IT infrastructure and cloud teams to ensure secure architecture design, patching, and access control.
Leadership & Collaboration
Build, mentor, and lead a high-performing information security team, fostering a culture of accountability and continuous improvement.
Partner with IT and business units to embed security-by-design principles into projects, procurement, and system development.
Collaborate with HR and Corporate Communications to drive security awareness and training programs for all employees.
Act as the organization’s security spokesperson during audits, client assessments, and vendor negotiations.
Vendor and Third-Party Security
Oversee third-party risk management programs and ensure vendors meet the company’s security standards.
Evaluate and approve security controls for external partnerships, SaaS platforms, and cloud providers.
How do we define success for your role?
Your experience and education
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (Master’s preferred).
15+ years of progressive experience in information security roles, with 5+ years in a leadership capacity.
Demonstrated success building and leading enterprise security programs in an organization of similar scale (3,000–10,000 employees).
Strong knowledge of cloud security (Azure, AWS, M365), identity management, and modern hybrid IT environments.
Proven experience developing and managing security budgets and vendor contracts.
Exceptional communication and presentation skills, with the ability to influence at all levels of the organization.
Deep understanding of risk management, data protection, and business continuity principles.
Strategic thinker with the ability to balance security rigor and business agility.
Certifications (Preferred)
CISSP, CISM, CISA, CCISO, or equivalent executive-level security certification.
ISO 27001 Lead Implementer / Auditor, or NIST-based certification is an asset.
Why BDO?
Our people-first approach to talent has earned us a spot among Canada’s Top 100 Employers for 2026. This recognition is a milestone we’re thrilled to add to our collection of awards for both experienced and student talent experiences.
Our firm is committed to providing an environment where you can be successful in the following ways:
We enable you to engage with how we change and evolve, being a key contributor to the success and growth of BDO in Canada.
We help you become a better professional within our services, industries, and markets with extensive opportunities for learning and development.
We support your achievement of personal goals outside of the office and making an impact on your community.
Giving back adds up: Where company meets community. BDO is actively involved in our communities by supporting local charity initiatives. We support staff with local and national events where you will be given the opportunity to contribute to your community.
Total rewards that matter: We pay for performance with competitive total cash compensation that recognizes and rewards your contribution. We provide flexible benefits from day one, and a market leading personal time off policy. We are committed to supporting your overall wellness beyond working hours and provide reimbursement for wellness initiatives that fit your lifestyle.
Everyone counts: We believe every employee should have the opportunity to participate and succeed. Through leadership by our Diversity, Equity and Inclusion Leader, we are committed to a workplace culture of respect, inclusion, and diversity. We recognize and celebrate the valuable differences among each of us, including race, religious beliefs, physical or mental disabilities, age, place of origin, marital status, family status, gender or gender identity and sexual orientation. If you require accommodation to complete the application process, please contact us.
Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.
Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It’s about creating work experiences that meet everyone’s needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role.
Code of Conduct: Our Code of Conduct sets clear standards for how we conduct business. It reflects our shared values and commitments and includes guiding principles to help us make ethical decisions and maintain trust with each other, our clients, and the public.
BDO may use artificial intelligence enabled tools to support certain aspects of the recruitment process. While these tools assist our teams, our use of AI does not replace human decision making, and all employment-related outcomes are made by BDO personnel.
More information on BDO Canada’s Privacy Policy can be found here: Privacy Policy | BDO Canada
Ready to make your mark at BDO? Click “Apply now” to send your up-to-date resume to one of our Talent Acquisition Specialists.
To explore other opportunities at BDO, check out our careers page.