Director, Security

Overview

Canada Health Infoway (Infoway) is an independent, not‑for‑profit organization funded by the federal government. We work with governments, health care organizations, clinicians, and patients to transform the Canadian health system through digital health solutions. Our focus is on interoperability, ensuring that everyone can access personal health information, book appointments, get prescriptions, view lab test results and access other health services online.

Why Join Us?

• Be part of a high‑profile, pan‑Canadian initiative that improves population health and unlocks value for the health system.
• Collaborate with a dynamic, multi‑functional team dedicated to modernizing the health care system.
• Demonstrate strong organizational and technical leadership skills in a fast‑paced, innovative environment.
• We care for our employees with supportive benefits and a commitment to work life balance.

Summary

Director, Security – Lead hands‑on enterprise security operations and strategic leadership to secure the exchange of healthcare data and interoperability across Infoway’s initiatives. Work closely with the Security Architect and the broader Architecture, Delivery, and Conformance team to protect healthcare data using international standards such as HL7® FHIR® and other interoperability and terminology standards.

Major Responsibilities

Secure Connected Care

• Provide security advice and consultation to internal and external stakeholders.
• Act as a security SME for programs and projects to manage risk and enable interoperability.
• Participate in procurement, vendor assessment, and review of security terms and conditions.
• Analyze, document threats, and develop mitigation plans for patient access to health data.
• Draft security requirements, SOPs, and specifications for secure Individual (Patient) Access to the trusted Canadian health ecosystem.
• Lead the pan‑Canadian security forum, hosting panel discussions and engaging stakeholders.
• Write papers and blogs, lead training, and identify speakers and working groups.

Enterprise Security Operations

• Prepare briefing materials for advisory groups, senior leadership, and the Board.
• Mentor colleagues on security and data protection.
• Research software for security suitability within Infoway.
• Implement data classification and protection procedures.
• Lead planning committees and recommend security enhancements.
• Maintain the Vulnerability Management program.
• Coordinate ongoing monitoring of compliance to security standards with IT and MSS.
• Plan procurement and conduct security reviews and audits.
• Stay current on the cyber threat landscape.
• Lead the Incident Response Program.
• Evaluate and engage Managed Security Service providers as needed.
• Oversee SIEM tools and establish security metrics.
• Lead cybersecurity awareness training delivery.
• Manage external Threat Risk Assessments and remediation follow‑up.

Education

• Undergraduate degree in a related field; MBA or related graduate level education preferred.

Qualifications

Experience

• 5+ years in security leadership, consulting, or advisory roles.
• Relevant industry certifications such as CISSP, CISM.
• Experience developing and implementing security policy and training programs, including phishing simulation.
• Proficient in collaborating with external stakeholders, including government.
• Experience responding to security/privacy incidents with an incident response team.

Domain Expertise

• Strong understanding of risk management, security risks, threats, and vulnerabilities.
• Knowledge of industry standards such as NIST, ITIL, COBIT, ISO 27001.
• Familiarity with privacy and security standards like OAuth2, OIDC, SAML.

Technical Skills

• Hands‑on experience with vulnerability scanning, EDR, and SIEM technologies.
• Solid knowledge of Linux and Windows operating system security.
• Experience implementing digital health solutions in Canada is beneficial.
• Excellent written and spoken communication skills.
• Ability to travel up to 10% of the time (when public health conditions allow).
• Bilingual French and English preferred.

Equal Opportunity & Accommodations

Infoway is committed to employing a diverse workforce and is proud to be an equal opportunity employer.

Infoway provides reasonable accommodations to employees as well as candidates taking part in the recruitment process, upon request.

We thank you for your interest in this opportunity at Infoway; however, only those applicants who most closely meet the qualifications for this position will be contacted.

Seniority level

• Director

Employment type

• Full‑time

Job function

• Other, Information Technology, and Management

Industries

• Hospitals and Health Care

Referrals increase your chances of interviewing at Canada Health Infoway by 2x.