Product Security, Principal (Cybersecurity)

Location: Toronto, Canada; flexible hybrid work model

Company

hirify.global operates secure digital payment, identity verification, and fraud protection services supporting Canada's financial ecosystem.

What you will do

• Serve as the primary Information Security advisor for assigned products, services, platforms, or technology domains.
• Provide strategic, risk-based guidance across product strategy, architecture, delivery, operations, assurance, and continuous improvement.
• Identify, assess, monitor, and escalate security risks while defining controls, treatment plans, and remediation strategies.
• Lead security reviews of product architectures, design changes, threat models, data flows, and third-party integrations.
• Support audits, regulatory reviews, governance reporting, vendor assessments, security investment planning, and budgeting.
• Guide incident investigations and escalations while coordinating cross-functional teams to improve security, compliance, resilience, and recovery.

Requirements

• 10+ years of experience in cybersecurity, information security, security architecture, AI for security, GRC, cloud security, application security, or related disciplines.
• Experience as a trusted security advisor, security lead, or product-aligned security partner influencing strategic risk decisions.
• Strong knowledge of enterprise security risk management, control design, risk treatment, exception management, and executive risk communication.
• Deep understanding of ISO 27001, NIST Cybersecurity Framework, PCI DSS, privacy regulations, audit, and assurance practices.
• Experience with secure architecture, secure-by-design, zero trust, least privilege, encryption, resilience, Secure SDLC, DevSecOps, threat modeling, and vulnerability management.
• Hands-on experience with cloud platforms such as AWS or Azure, APIs, distributed systems, containers, and hybrid infrastructure; eligibility to work for hirify.global in Canada in a full-time capacity is required.

Nice to have

• Certifications such as CISSP, CCSP, CISM, CRISC, or CCISO.
• Security clearance eligibility, depending on the assigned product or business area.

Culture & Benefits

• Flexible hybrid work model.
• Generous vacation and wellness days.
• Employer-paid benefits coverage and an employer-funded RRSP program.
• 24/7 confidential employee and family assistance program.
• Pregnancy and parental leave top-up, plus charitable donation matching.
• Inclusive, purpose-driven environment focused on digital finance and Canadian financial security.

Hiring process

• Successful candidates complete background checks, which may include Canadian criminal, identity, employment, education, credit, and social media checks.
• Accommodation is available during all stages of the application and recruitment process.