Director, Cybersecurity

Location Address:

100 Queens Quay East, 9th Floor, Toronto

Number of Openings:

1

Pay:

$106,911.00 - $205,213.00

Job Posting Description:

Director, Cybersecurity

This position is onsite #LI-Onsite

Are you passionate about growing and developing cybersecurity teams and programs? Reporting to the CIO, you will oversee the LCBO’s cybersecurity program and ensure that we maintain a robust cybersecurity posture, aligned with business objectives and regulatory requirements. You will be the primary liaison between LCBO and the MSSP as well as managing high-severity incidents, overseeing vendor relationships, and leading strategic initiatives to protect systems, data, and assets.

If you are an experienced Cybersecurity leader looking to make a real difference at Ontario’s largest retailer, then this is the role for you!

About the Role

Strategic Leadership and Governance

• Develop and execute the organization’s cybersecurity strategy and roadmap.
• Provide strategic direction to ensure cybersecurity aligns with organizational goals.
• Oversee cybersecurity governance, compliance, and risk management frameworks.
• Act as the organization’s key advisor on cybersecurity to the CIO, leadership team, and other stakeholders.
• Develop and present updates to executive leadership and the Board on the state of cybersecurity.
• Lead the cybersecurity council meetings to provide updates to leadership from all business units
• Monitor changes to regulatory and compliance requirements, ensuring the organization’s cybersecurity strategy evolves to meet new standards and obligations.
• Collaborate with LCBO CISO

Cybersecurity Program Oversight and Strategic Operations

• Serve as Incident Commander for high-severity incidents, ensuring timely resolution and executive reporting.
• Oversee strategic direction of cybersecurity operations, ensuring proper monitoring, detection, and response processes are in place.
• Establish and track key cybersecurity metrics to measure the program's effectiveness, ensuring alignment with organizational goals and identifying opportunities for continuous improvement.
• Lead the governance and performance management of the Managed Security Service Provider (Managed Security Service Provider) to ensure SLAs and KPIs are met.
• Advance the organization's cybersecurity maturity by promoting innovative security strategies, frameworks, and automation to proactively address evolving threats and business needs.
• Ensure the effectiveness of security tools, processes, and technologies across the enterprise.
• Develop and enforce policies, standards, and processes to enhance security posture.
• Oversee enterprise-wide cybersecurity risk assessments and ensure mitigation strategies are aligned with organizational risk tolerance and business objectives.
• Continuously assess emerging cybersecurity technologies and threats to identify opportunities for innovation and ensure the organization remains resilient against evolving risks.
• Manage the cybersecurity budget, ensuring effective allocation of resources to achieve strategic priorities and enhance security capabilities.
• Act as the primary cybersecurity representative during the RFP process, ensuring that security requirements are accurately defined and included in procurement documents.

Leadership Development and Organizational Integration

• Lead, mentor, and develop the cybersecurity team, including senior managers, architects, and analysts.
• Foster a culture of continuous improvement and knowledge sharing.
• Provide strategic oversight into the development and delivery of security awareness and training programs to promote a security-first culture across the organization.
• Collaborate with other IT and business leaders to integrate security into operations.
• Promote cross-functional collaboration to ensure security priorities are integrated into IT and business operations without hindering innovation.
• Champion security awareness programs across the organization to embed a security-first mindset at all levels.
• Develop and implement talent development and succession planning strategies to grow future cybersecurity leaders.

Third-Party Risk and Compliance Management

• Oversee relationships with third parties, ensuring SLAs and compliance objectives are met.
• Develop and oversee a comprehensive third-party risk management program to mitigate risks posed by vendors, suppliers, and partners.
• Ensure findings from audits and assessments are addressed promptly, and drive improvements to maintain compliance and enhance security posture."
• Lead security reviews, assessments, and audits, ensuring alignment with regulatory frameworks (e.g., NIST, ISO 27001).
• Provide strategic oversight for the implementation of initiatives that improve the organization's cybersecurity posture across cloud, network, and applications.
• Establish metrics and reporting mechanisms to track vendor compliance with SLAs and ensure alignment with security objectives
• Stay current with the latest regulatory requirements and ensure we are compliant across all security domains.

About You

• Bachelor's degree in Computer Science, IT, cybersecurity or equivalent work experience
• CISSP or CRISC or CISA or CISM Certification or equivalent experience
• 7+ years of progressive experience in cybersecurity, including at least 3 years in a leadership or strategic oversight role.
• Knowledge of cloud security (Azure, AWS) and Vulnerability Management
• Expertise in frameworks like NIST CSF, ISO 27001, and CIS Controls; strong knowledge of cloud security (Azure, AWS), vulnerability management, and modern security architectures Knowledge of incident response processes.
• Understanding of compliance standards such as PCI-DSS, GDPR, or Canadian-specific cybersecurity regulations.
• Identify inefficiencies in processes and recommend automation or optimization.
• Experience aligning MSSP operations with long-term cybersecurity goals.
• Experience mentoring teams and aligning cybersecurity initiatives with organizational goals.
• Experience managing incidents, conducting risk assessments, and overseeing audit and compliance efforts to mitigate risks.
• Experienced in managing third-party vendors, negotiating contracts, and ensuring SLA compliance.

We offer a comprehensive suite of benefits including:

• Health/Dental Benefits
• Access to an Employee & Family Assistance Program
• a Defined Benefit Pension
• Discounts on products and services via Workperks.

There is a world of opportunities at the LCBO…

Join an organization where you can be challenged while achieving your true potential. A place where you can make a positive impact supporting Ontario business and communities. Discover a safe, healthy, diverse, inclusive, and accountable workplace where your wellbeing is our top priority. At the LCBO, your contributions are respected and valued.  Be part of our journey as we invest in people and technology to transform an organization. There really is a world of opportunities at the LCBO.

We foster a culture of inclusion and belonging, so everyone feels valued, respected, and heard. The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility of Ontarians with Disabilities Act. If contacted for an interview or employment opportunity, please advise if you require an accommodation.

Please submit your resume via Workday by 11:59pm on the deadline date.  We appreciate your interest and advise that only those selected for an interview will be contacted.

Your personal information is being collected under the authority of the Liquor Control Board of Ontario Act, 2019, SO 2019, c 15, Sch 21, Section 3 and in compliance with the Freedom of Information and Protection of Privacy Act for the purpose of processing your job application. When you select “Easy Apply”, your personal information will be collected through LinkedIn and shared with the LCBO in accordance with the LinkedIn User Agreement.

If you wish to apply without sharing your personal information with LinkedIn, please visit the LCBO Careers website. If you have any questions regarding the LCBO’s collection and use of personal information, please refer to the LCBO Customer Privacy Notice, or contact the Freedom of Information and Privacy Office at:

Freedom of Information and Privacy Office

100 Queens Quay East, 9th Floor

Toronto, Ontario M5E 0C7

Telephone: 416 864-2462

E-mail: [email protected]    

Work Hours:

36.25

Union / Non-Union:

Non-Union

Job Posting End Date:

July 22, 2026

The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act.