Chief Information Security Officer – Directeur de la sécurité de l'information

Job not on LinkedIn

🔥 5 minutes ago

🇨🇦 Canada – Remote

💵 $216k - $325k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Insurity

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🛡️ Insurance

☁️ SaaS

🤝 B2B

💰 Private Equity Round - Insurity on 2021-11

Insurance • SaaS • B2B

Insurity is a provider of insurance-focused software and technology solutions. It delivers core policy administration systems (Pro Suite, Workers' Comp Suite, Marine Suite), an AI platform embedded across insurer workflows, analytics and intelligence products (Premium Audit, Loss Control, SpatialKey geospatial analytics), and billing/payments offerings including Billing-as-a-Service. Insurity serves carriers and MGAs with modular, enterprise-grade SaaS and hosted systems to streamline underwriting, policy administration, claims prevention, premium recovery, and billing operations.

📋 Description

• Lead Insurity’s enterprise security, cybersecurity risk, and privacy programs • Protect Insurity’s information assets, products, customer environments, and technology ecosystem while enabling growth, cloud adoption, international expansion, and responsible AI use • Translate cybersecurity, privacy, compliance, and technology risk into clear business decisions for executive leadership and the Board • Develop and continuously improve enterprise information security strategy, policies, standards, and control framework • Establish security priorities aligned with business strategy, product roadmaps, customer commitments, and risk appetite • Reinforce security governance, executive steering forums, and reporting to executive leadership and the Board • Define security accountability across Engineering, Product, Corporate IT, Cloud Operations, Legal, Privacy, and Compliance • Own and mature HIPAA compliance and ePHI protection programs • Lead HIPAA risk analyses, control testing, remediation tracking, program evaluations, safeguards, audit evidence, customer diligence, and breach response • Establish and lead enterprise AI security and governance, including AI inventory, risk classification, approval gates, prohibited uses, human oversight, and generative AI standards • Define controls for AI risks including prompt injection, data leakage, insecure agents, model abuse, data poisoning, supply-chain risk, unauthorized access, and harmful outputs • Manage risk identification, assessment, prioritization, treatment, acceptance, audits, assurance, regulatory changes, cyber-insurance support, and Board reporting • Lead security operations, threat intelligence, vulnerability management, detection and response, penetration testing, investigations, and incident response • Coordinate major incidents and crisis response with the COO, CLO, Legal, Privacy, Compliance, Communications, customers, insurers, law enforcement, and regulators • Lead cyber crisis tabletop exercises and maintain crisis communications and breach-disclosure playbooks • Embed security-by-design across product development, architecture, engineering, DevOps, and change management • Oversee application security, secure coding, threat modeling, SAST, DAST, software composition analysis, penetration testing, vulnerability disclosure, release gates, and software supply-chain security • Oversee cloud security architecture, IAM, encryption, secrets management, network segmentation, logging, monitoring, data-loss prevention, and secure configuration management • Review and approve security architecture for products, platforms, infrastructure changes, AI systems, and customer-facing capabilities • Establish third-party security and privacy programs and manage vendor, cloud provider, subprocessor, partner, and supply-chain risks • Maintain data classification, inventory, data-flow, retention, deletion, residency, and access-governance practices • Build and lead a cost-efficient security organization; hire, develop, coach, and retain security talent • Manage security awareness and role-based training, security budget, partner strategy, managed service providers, and external security resources • Define and report security metrics, risk indicators, maturity measures, control health, remediation progress, incident trends, audit results, customer commitments, and AI-governance metrics

🎯 Requirements

• Bachelor’s degree in information security, computer science, information technology, business, or a related field; equivalent experience may be considered • 8–10 years of progressive experience in information security, cybersecurity, technology risk, or related disciplines within a SaaS, cloud, technology, insurance, healthcare, or other regulated environment • At least 5 years of executive or senior leadership experience in a CISO, Deputy CISO, Head of Security, or comparable role • Demonstrated experience building and operating an enterprise security program across a distributed or remote organization • Experience with HIPAA, ePHI, Business Associate requirements, healthcare data protection, or comparable regulated-data obligations • Demonstrated experience leading security risk assessments, audits, remediation programs, and regulatory or customer assurance activities • Experience leading material incidents, crisis response, business continuity, disaster recovery, and executive communications • Experience establishing or operating an AI security, AI governance, responsible AI, model-risk, or secure-generative-AI program • Strong understanding of cloud, SaaS operating models, identity, encryption, application security, vulnerability management, incident response, and third-party risk • Exceptional written, verbal, presentation, negotiation, and stakeholder-influencing skills • Demonstrated ability to manage budgets, partners, vendors, priorities, and complex cross-functional programs • CISSP, CISM, CISA, CRISC, CCSP, or equivalent certification preferred • Experience with SOC 2 Type II, ISO/IEC 27001, NIST CSF, NIST AI RMF, or comparable frameworks preferred • Experience with AI/ML security, LLM security, agent security, model risk management, AI impact assessments, or AI red teaming preferred • Experience supporting customer security reviews, RFPs, renewals, and executive-level trust discussions preferred • Experience in insurance technology, property and casualty insurance, healthcare technology, or another data-intensive regulated industry preferred • Experience with cyber-risk quantification, cyber insurance, secure software supply chains, DevSecOps, and cloud-native security preferred • English language required to communicate with clients, partners, and colleagues outside Québec; French required for positions permanently located in Québec

🏖️ Benefits

• Flexible work arrangements through the Flex First Workforce approach, including fully remote opportunities • Open PTO Policy • Comprehensive health coverage • Employer-matched retirement savings • Award-winning onboarding program • Internal career growth and promotion opportunities • Mentorship program • Access to Insurity podcasts • Full access to LinkedIn Learning and Kaplan • Discounted tuition for employees and family through the University of Arizona Global Campus partnership • Employee Referral Bonus program • Medical insurance • Dental insurance • Vision insurance • 401(K) match • Paid maternity leave • Paid paternity leave • Disability insurance