Aecon

Director, Information Security

📍 Location
Toronto, Ontario
⏰ Job Type
Full-time
📅 Posted
March 19, 2026
Apply Now

Job Description

What is the Opportunity?

The Director, Information Security is responsible for managing the Governance, Risk & Compliance (GRC) and Information Security Architecture and Operations functions. This role ensures alignment to overall strategy, drives operational excellence, and constantly advances enterprise security maturity. This role reports to the VP, Information Security and influences senior stakeholders across IT, Legal, Privacy, and other business units.

What You’ll Do Here:


Governance, Risk & Compliance

  • Own enterprise security policy framework and risk management program aligned to NIST CSF and ISO 27001.

  • Oversee audits, regulatory assessments, and third-party risk management.

  • Ensures organizational compliance with CMMC 2.0 (US), CPCSC (Canada) and all other relevant security frameworks/regulations.

  • Oversee multiple external /internal IT audits including SOC 2, SOC 1, ITGC and Swift....
  • Start Your Week Right!

    Apply now and make every Monday exciting with Aecon

    Apply for this Position