Back to results

Director, Information Security - Competition ID: 4841

  • Surrey, BC, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Posting language
English
Posted

Original job description

Kwantlen Polytechnic University (KPU) is Canada’s only polytechnic university, proudly serving the South Fraser region for more than 40 years. With campuses in Surrey, Richmond, Langley, and Cloverdale, KPU is deeply connected to the communities it serves and to the diverse cultures, backgrounds, and lived experiences of its students. Through academic excellence, applied learning, innovation, and strong industry and community partnerships, KPU prepares students for meaningful futures.

As an open-access university, KPU is powered by the people who live and work here. We believe every employee plays a meaningful role in supporting student learning and success. We are honoured to carry the name of the Kwantlen First Nation and are committed to equity, inclusion, reconciliation, and respectful relationships. As one of BC’s Top Employers, KPU is dedicated to fostering a supportive, inclusive, and engaged workplace where employees feel valued, connected to purpose, and empowered to make an impact.

We invite you to explore your next career opportunity at KPU and discover how your work can contribute to a university where thought truly meets action.

Competition ID: 4841
Internal Closing Date: Open Until Filled
External Closing Date: Open Until Filled
# of Openings: 1
Salary Information: 14 – Administrative Salary Grid - $114,071 to $174,909
Employment Type: Permanent Full Time
Workplace Type: Hybrid
Travel Frequency: Frequent travel between campuses is required.
Employee Group: Administration/Management
Days of Work (BCGEU):
Hours of Work (BCGEU):
Hours per Week (BCGEU):

We are currently seeking a strategic and forward-thinking Director, Information Security to join our Information Technology (IT) team! This is an exciting opportunity to lead KPU's enterprise cybersecurity program and help shape the future of information security across a dynamic, multi-campus institution.

Job Overview

Reporting to the Chief Information Officer, this senior leadership role oversees a team responsible for information security technologies and incident management while providing strategic direction for the protection of the University's systems, data, and digital services. The Director is responsible for advancing KPU's cybersecurity strategy, policies, controls, and programs that safeguard the confidentiality, integrity, and availability of KPU's information assets.

Working closely with IT leaders and academic departments across KPU, the Director translates organizational priorities and risk requirements into practical security strategies and technical solutions. This role balances security, innovation, agility, and operational effectiveness while leading initiatives that strengthen KPU's overall security posture.

This is an exciting opportunity to lead impactful security projects, influence enterprise-wide decision-making, and help shape the future of cybersecurity at KPU. From advancing incident response capabilities and cyber resilience to implementing new technologies, processes, and best practices, the Director will play a critical role in helping KPU navigate a complex environment.

At KPU, you'll have the opportunity to make a meaningful impact while working in a collaborative, purpose-driven environment that values innovation, continuous learning, work-life balance, and employee well-being. If you're passionate about building strong security programs, leading high-performing teams, and driving meaningful change, we'd love to hear from you!

Education And Experience

  • Bachelor’s degree in information system;
  • A minimum of seven years of IT experience, with five years in an information security role and at least two years in a supervisory capacity;
  • Certified Information Systems Security Professional (CISSP)information security is preferred;
  • Or an equivalent combination of education, training and experience.

Knowledge, Skills & Abilities

  • Proven expertise in Identifying, assessing, and prioritizing information security risks. Implement risk mitigation measures and ensure compliance with relevant regulations and standards.
  • Strong leadership persuasion abilities and experience working with the risk management team and a variety of diverse business units. Strong project management skills and experience in creating and managing complex project plans, including budgeting and resource allocation.
  • Demonstrated experience working with security tools, technologies, mechanisms and policy to support and protect business information infrastructure in a large organization.
  • An understanding of operating system internals and network protocols. Familiarity with the principles of cryptography and cryptanalysis.
  • Knowledge and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans.
  • Experience developing and maintaining policies, procedures, standards and guidelines using a consultative and inclusive approach.
  • Experience with common information security management frameworks.
  • Experience in application technology security testing (white box, black box and code review) and in system technology security testing (vulnerability scanning and penetration testing).
  • Familiarity with applicable legal and regulatory requirements for post-secondary education in the Province of British Columbia.
  • Proven ability to communicate security technical concepts to nontechnical people to enhance understanding and drive decisions that lead to positive outcomes.
  • Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment of strategies.
  • Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel and other internal and external University stakeholders.
  • Ability to travel between campuses is required.

Competencies

  • Leadership: KPU employees inspire, coach, mentor, and support students, employees and KPU as a whole in achieving objectives.
  • Accountability: KPU employees demonstrate fiscal accountability and take ownership for their actions, decisions and results.
  • Continuous Improvement: KPU employees take a creative approach to opportunities, exploring unique ways to create optimal value for the KPU community.
  • Collaboration: KPU employees work in functional and cross-functional teams, coming together to solve complex issues and accomplish objectives that will benefit the KPU community.


Salary Information

The above compensation range is the span between the minimum and maximum base salary for a position. Typically, initial salary placement is approximately halfway between the minimum and the maximum. This represents an employee that possesses full job knowledge, qualifications and experience for the position. In the normal course, employees will be hired, transferred or promoted between the minimum and approximately halfway of the salary range for a job with consideration given to internal equity.

Want to know more?

Job Description

Click here to view the full job description.

Application Process

To apply for this opportunity, please submit your cover letter and resume as one document via KPU’s Career Centre.

Total Rewards

As a part of our total rewards offerings, KPU also offers extended health and dental benefits, healthcare spending account, generous vacation package, defined pension plan, parenthood top-up, sick leave, long-term disability, life insurance, professional development days, tuition waiver, inhouse training & development, inter-campus transportation, and more!

Note: Eligibility requirements apply, benefits may vary depending on the employee group the position belongs to and whether the position offered is temporary or part-time.

Visit https://www.kpu.ca/hr for more information on KPU’s workplace, culture and total rewards.

Note to Applicants

Kwantlen Polytechnic University welcomes and encourages applications from equity deserving groups and diverse experiences including, but not limited to, Indigenous people, racialized people, people with disabilities, and members of the 2S/LGBTQIA+ community.

If there are any barriers that you are experiencing or an accommodation that we can provide to support you through the application process, please reach out to us at talentacquisition@kpu.ca.

Kwantlen Polytechnic University is committed to protecting the safety and welfare of employees, students, and the general public, and upholding the reputation and integrity of the University. For this reason, final applicants will be asked to undergo a background check.

We thank all applicants for their interest in employment with KPU. Only candidates who are legally eligible to work in Canada will be considered; only those selected for an interview will be contacted.
More about this job

Responsibilities

Lead KPU’s enterprise cybersecurity program, overseeing information security technologies and incident management while setting strategy, policies, controls, and programs to protect university systems, data, and digital services. Work with IT leaders and academic departments to translate organizational priorities and risks into practical security solutions, strengthen cyber resilience, and improve the university’s overall security posture.

Requirements

A bachelor’s degree in information systems and at least seven years of IT experience are specified, including five years in information security and two years in a supervisory role; equivalent education, training, and experience may also qualify. Candidates should bring strong security risk, architecture, testing, project management, leadership, and communication capabilities; CISSP is preferred, along with familiarity with security frameworks and applicable British Columbia post-secondary regulations.

Skills

  • Information Security Risk Assessment
  • Risk Mitigation
  • Cybersecurity Strategy
  • Security Incident Management
  • Security Architecture
  • Security Policy Development
  • Security Frameworks
  • Vulnerability Assessment
  • Penetration Testing
  • Application Security Testing
  • Cryptography
  • Network Protocols
  • Operating System Internals
  • Project Management
  • Team Leadership
  • Stakeholder Communication

Benefits

  • Extended Health Benefits
  • Dental Benefits
  • Healthcare Spending Account
  • Vacation
  • Defined Pension Plan
  • Parenthood Top-Up
  • Sick Leave
  • Long-Term Disability
  • Life Insurance
  • Professional Development Days
  • Tuition Waiver
  • In-House Training and Development
  • Inter-Campus Transportation

Visa sponsorship

Not detected in the job text

Categories

  • Security & Safety
  • Technology
  • Management & Leadership
  • Education

Keywords

  • Cybersecurity
  • Information Security
  • CISSP
  • Risk Management
  • Incident Management
  • Cyber Resilience
  • Security Architecture
  • Security Policies
  • Security Controls
  • Information Security Management Frameworks
  • Cryptography
  • Cryptanalysis
  • Operating System Internals
  • Network Protocols
  • Vulnerability Scanning
  • Penetration Testing
  • White-Box Testing
  • Black-Box Testing
  • Code Review
  • Business Impact Assessment
  • Control Assessment
  • Security Risk Assessment
  • Regulatory Compliance
  • Project Planning
  • Budgeting
  • Resource Allocation
  • Higher Education

Report this job