Director, Security at Inforoute Sante du Canada Inc – Toronto, Ontario

Overview

At Canada Health Infoway (Infoway), we believe a more connected health system is a healthier, more sustainable one. As Canada’s digital health agency, Infoway works in partnership with governments, Indigenous partners and communities, healthcare organizations, clinicians, industry, and patients to advance Connected Care and improve health outcomes and experiences for people across Canada. By strengthening health data exchange, advancing national standards, and supporting the responsible adoption of digital health innovations, we are helping ensure that the right information is available to the right people at the right time. This enables better care coordination, reduces administrative burden for clinicians, empowers patients with access to their health information, and supports a more modern, efficient, and patient-centred health system.

Infoway is an independent, not-for-profit organization funded by the Government of Canada and accountable to its Board of Directors and Members of the Corporation, Canada’s 14 federal, provincial and territorial deputy ministers of health. Working collaboratively across jurisdictions and with health system partners, Infoway acts as a national convener and catalyst to accelerate the adoption of shared standards, trusted digital infrastructure, and innovative solutions that strengthen care delivery and system performance across the country.

Infoway is on an ongoing learning journey, guided by First Nations, Inuit, and Métis voices and perspectives, to deepen understanding, unlearn and relearn, and take meaningful action in support of reconciliation. We are committed to advancing reconciliation by respecting First Nations, Inuit, and Métis Peoples data sovereignty, promoting culturally safe and inclusive approaches to digital health, and supporting the health and data priorities of First Nations, Inuit and Métis Peoples. This work is grounded in building respectful, distinction-based relationships with First Nations, Inuit, and Métis partners, communities, organizations and Northern governments, whose guidance informs our approach to advancing digital health in ways that are meaningful, appropriate, equitable and responsive to community priorities.

Why Join Us?

Summary

We are seeking a Director, Security who combines deep cybersecurity expertise with strategic leadership, governance acumen, and the ability to influence senior executives and national stakeholders.

This role provides strategic direction, thought leadership, and governance oversight for Infoway’s enterprise security program and for the security of pan‑Canadian Connected Care initiatives. You will guide the secure design of health data exchange and interoperability solutions, leveraging international standards such as HL7® FHIR® and other interoperability and terminology standards.

You will serve as Infoway’s senior cybersecurity leader—responsible for shaping long‑term security strategy, advising executives and the Board, leading national security forums, and ensuring that Infoway’s security posture is robust, transparent, and aligned with organizational and national priorities.

Major Responsibilities

Strategic Security Leadership & Governance

• Develop and maintain Infoway’s multi‑year cybersecurity strategy, ensuring alignment with organizational goals, national priorities, and evolving threat landscapes.
• Serve as the primary security advisor to senior leadership and the Board, preparing and presenting strategic briefings, risk updates, and program performance metrics.
• Establish and oversee cybersecurity governance frameworks, policies, and decision‑making structures across the organization and Connected Care initiatives.
• Lead enterprise‑wide security planning, prioritization, and investment recommendations.
• Champion a culture of security, risk awareness, and accountability across all levels of the organization.

Cybersecurity Thought Leadership & National Influence

• Act as a national thought leader on cybersecurity in digital health, representing Infoway in pan‑Canadian forums, conferences, and strategic discussions.
• Lead the pan‑Canadian security forum, fostering collaboration among provincial/territorial jurisdictions, health system partners, and industry stakeholders.
• Produce thought leadership materials including white papers, blogs, guidance documents, and training content.
• Identify emerging trends, technologies, and standards, advising on their strategic implications for Canada’s digital health ecosystem.

Secure Connected Care

• Provide expert security guidance to programs and projects to enable secure interoperability and patient access to health data.
• Lead threat and risk assessments for Connected Care initiatives, ensuring risks are clearly articulated and mitigation strategies are aligned with organizational risk appetite.
• Define and maintain security requirements, security architecture, implementation guidance, and operational procedures for secure participation in the pan‑Canadian trusted healthcare ecosystem.
• Support procurement processes, including vendor security assessments and review of security terms and conditions.

Enterprise Security Operations & Oversight

• Oversee enterprise security operations, ensuring effective monitoring, incident response, vulnerability management, and compliance with security standards.
• Provide governance oversight of Managed Security Service Providers (MSSPs) and internal IT teams to ensure consistent execution of security controls.
• Maintain a deep understanding of the cyber threat landscape and ensure Infoway’s defenses evolve accordingly.
• Lead the enterprise Incident Response Program, including executive‑level communication and post‑incident reporting.
• Establish and track meaningful security metrics and KPIs that demonstrate program maturity and outcomes.
• Ensure ongoing security assessments, audits, and remediation activities are completed and reported to leadership.

Education

• Undergraduate degree in a related field required.
• MBA or other relevant graduate‑level education preferred.

Qualifications

Experience

• 5+ years in a security leadership, consulting, or advisory role with demonstrated strategic influence.
• Experience presenting to executives, Boards, and senior government stakeholders.
• Experience developing and implementing security policies, governance frameworks, and training programs.
• Experience responding to security and/or privacy incidents and leading incident response teams.
• Experience collaborating with government and external partners.

Domain Expertise

• Strong understanding of security risk management, threat modeling, and enterprise risk governance.
• Knowledge of industry standards such as NIST, ITIL, COBIT, ISO 27001.
• Familiarity with privacy and security standards (OAuth2, OIDC, SAML).
• Experience with digital health solutions in Canada is an asset.

Technical Skills

• Hands‑on experience with vulnerability scanning, EDR, and SIEM technologies.
• Solid understanding of Linux and Windows security.
• Excellent written and verbal communication skills, including executive‑level communication.
• Ability to travel up to 10% of the time.
• Bilingual French/English preferred.

Infoway is committed to employing a diverse workforce and is proud to be an equal opportunity employer.

Infoway is committed to advancing Reconciliation and renewing relationships with Indigenous Peoples, based on recognition of rights, respect, cooperation and partnership.

Infoway provides reasonable accommodations to employees as well as candidates taking part in the recruitment process, upon request.

We thank you for your interest in this opportunity at Infoway however, only those applicants who most closely meet the qualifications for this position will be contacted.