[Hiring] Director of IT & Security @Xello

Role Description

As Director of IT and Security, you will lead Xello’s IT operations and security initiatives which include data privacy and compliance in the education space. Managing the IT team, you will be responsible for developing, implementing, and monitoring security/confidentiality/business continuity/disaster recovery controls. Working with directors and executives, you will help determine acceptable levels of risk for the organization. You will design and implement comprehensive security evaluations and provide architectural/design guidance for mitigation strategies using current and emerging cloud technologies. As a manager, you will be leading and mentoring our IT team to deliver on security, privacy, and IT objectives. Reporting to the VP of Engineering, you will ensure the efficient operation of the company’s network, servers, and equipment.

What you’ll do…

• Lead IT department operational planning and projects in an Agile environment.
• Take ownership over our information security roadmap.
• Ensure compliance with regulations, best practices, and customer data sharing agreements, including (but not limited to): PIPEDA, FERPA, COPPA, GDPR, CCPA.
• Conduct organization-wide security awareness training and work with engineers to ensure best practices are met in the SDLC.
• Stay updated on the latest threats and security practices.
• Liaise with Xello’s sales department and customers to support security-focused aspects of RFPs and review customer data sharing agreements for compliance.
• Oversee reporting and documentation related to network and systems operations.
• Work with stakeholders to define business and system requirements for new technology implementations.
• Develop maintenance schedules for network and systems equipment.
• Analyze existing operations and make recommendations for the improvement and growth of the network infrastructure and IT systems.
• Coordinate all major incidents ensuring timely updates to senior management and the business, conduct post-mortem reviews, and follow through on action items.
• Provide leadership to team members through coaching, performance evaluations, training plans, and career development plans.
• Serve as the key interface with internal and external auditors for security compliance related activities.
• Protect confidential and private information and uphold the ethics and integrity of Xello’s code of conduct.

Qualifications

• 10+ years experience in IT and 2 years of experience in a people management capacity.
• Proven experience owning and leading SOC 2, ISO 27001, and related security/compliance audit programs.
• Deep knowledge of web application security, and understanding of vulnerabilities and countermeasures.
• Strong knowledge of networking, telecom, and server technologies.
• Strong understanding of project management principles.
• Experience securing production software systems.
• Experience with incident management lifecycles.
• Proven experience in IT infrastructure planning and development.
• Positive attitude and a great team player.
• University or college degree with a technical major, such as Engineering or Computer Science.

Great if you also have…

• Knowledge of Agile principles and practices.
• Information Security Certifications - CISSP, CISM, CIPM.
• CCNA, CCNP, or other network certifications.

Compensation

The compensation range for this role is $155,000 - $175,000 CAD. The final offer will be determined based on the candidate's experience and expertise, as assessed during the interview process.

Benefits

• Flexible work arrangements including hybrid and remote.
• 4 weeks of vacation.
• Employer-paid health and dental benefits.
• 4-month top-up for parental leave.
• Group RRSP with 3% matching.

Company Description

We are Xello (CASCAID in the UK), the leading developer of future readiness programs in North America and the UK and soon the world! Our mission is to help anyone, anywhere in the world to create a successful future through self-knowledge, exploration, and planning. We believe that by bringing our best selves to our work and collaborating with one another, we can change the world. We are a very diverse group of individuals who work hard, laugh often and share in each other’s lives. We are an inclusive, equal opportunity employer.