Director Infrastructure & Cybersecurity

ABOUT US

At FortisAlberta we invest in our greatest resource - our people. As Alberta’s largest electricity distribution provider, we are positioned for growth. Each day, FortisAlberta employees strive to exceed customer expectations while maintaining a focus on our commitment to safety.

APPLICATION DEADLINE: November 11, 2026

TITLE: Director Infrastructure & Cybersecurity (E26-225)

DEPARTMENT: Customer & Information Services

WORK LOCATION/OFFICE: Calgary

*This role will be moving to our Airdrie office location in 2027*

STATUS: 01 Full Time - Salaried

NUMBER OF HIRES: 1

DESCRIPTION:

Reporting to the Vice President, Customer and Information Services, the Director, IT Infrastructure and Cybersecurity provides enterprise leadership for the strategy, delivery, security, resilience, and lifecycle management of FortisAlberta’s technology infrastructure and cybersecurity functions. The role is accountable for infrastructure and cloud services, networks and telecommunications, end-user and collaboration technologies, enterprise architecture, security operations, identity and access management, technology resilience, disaster recovery, and related managed services.

As a member of the IT leadership team, the Director translates corporate strategy, operational risk, regulatory obligations, and business priorities into clear technology roadmaps and investment decisions. The Director establishes measurable service, security, and resilience outcomes; advises executives on material technology and cyber risks; leads major modernization initiatives; and builds accountable, high-performing teams and strategic partnerships that enable safe, reliable, and cost-effective utility operations.

DUTIES & RESPONSIBILITIES INCLUDE (but not limited to):

Leadership:

• Lead, manage, coach, and motivate a team of multidisciplinary Information Technology leaders and professionals; this includes providing direction, expertise and advice to employees, identifying employee training requirements, and formally managing the performance of employees.
• Work closely with Human Resources to manage all elements of employee relations, including hiring, terminations, training, performance appraisals for the employee file, administering progressive discipline, and resolving labour relations issues and/or grievances.
• Create an inclusive, high-performance culture grounded in safety, integrity, accountability, collaboration, service ownership, innovation, and continuous improvement.

Infrastructure, Cloud & Enterprise Architecture:

• Accountable for the strategy, architecture, roadmaps, service performance, and lifecycle management of enterprise infrastructure, cloud and hosting platforms, networks, telecommunications, end-user computing, collaboration technologies, storage, backup, and recovery services.
• Establish target-state architectures, technology standards, design guardrails, and technical debt priorities that support interoperability, scalability, maintainability, security, and responsible cloud adoption.
• Ensure critical technology services meet defined availability, capacity, performance, recoverability, and support requirements, with clear service ownership and measurable service-level objectives.
• Direct infrastructure modernization and lifecycle programs, including legacy risk reduction, platform currency, automation, observability, and the adoption of fit-for-purpose emerging technologies.
• Oversee the planning and delivery of major infrastructure and architecture initiatives, ensuring disciplined scope, schedule, budget, quality, risk, benefit, and change management.

Cybersecurity, Risk & Resilience:

• Provide senior leadership for the cybersecurity program, including cyber risk management, security architecture, identity and access management, vulnerability and exposure management, security operations, incident response, threat intelligence, and security awareness.
• Maintain a risk-informed cybersecurity strategy and multiyear roadmap aligned with corporate risk appetite, legal and regulatory obligations, recognized industry frameworks, and the requirements of a regulated electric utility.
• Ensure technology and cyber risks are identified, assessed, treated, monitored, and communicated through clear metrics, exception processes, and timely escalation of material exposures.
• Direct preparedness for significant technology and cyber incidents through tested response plans, executive exercises, recovery strategies, and coordination with business, physical security, legal, communications, and external partners.
• Oversee IT business continuity and disaster recovery capabilities, including recovery objectives, dependency mapping, backup integrity, recovery testing, and remediation of identified gaps.
• Promote security-by-design and resilience-by-design across projects, architecture decisions, technology procurement, and third-party services.

Service Delivery, Governance & Commercial Management:

• Set expectations for reliable, responsive, and customer-focused service delivery, supported by effective incident, problem, change, request, configuration, and knowledge management practices.
• Establish portfolio governance, performance measures, risk indicators, service reviews, and management reporting that provide clear accountability and support evidence-based decisions.
• Lead annual and multiyear business planning, budgeting, forecasting, resource allocation, and investment prioritization for the function; actively manage operating and capital expenditures and expected benefits.
• Govern strategic vendors, managed service providers, software and cloud partners, and contract resources to ensure performance, security, resilience, compliance, value, and alignment with FortisAlberta’s interests.
• Maintain audit and regulatory readiness through effective controls, records, testing, issue remediation, and transparent reporting.
• Advise the Vice President and senior leaders on technology strategy, service performance, investment priorities, material risks, and emerging issues requiring executive action.
• Build trusted partnerships across Operations, Customer Service, Engineering, Finance, Human Resources, Regulatory Affairs, Risk, Legal, Internal Audit, and other corporate functions.
• Represent the portfolio on enterprise committees and in regulatory, audit, insurance, and industry forums, as required.
• Perform other duties and lead special initiatives as required.

KNOWLEDGE, SKILLS & ABILITIES:

• Enterprise-level strategic thinking, including the ability to translate business strategy, operational risk, and regulatory requirements into pragmatic technology priorities and roadmaps.
• Demonstrated success leading leaders and multidisciplinary teams through operational accountability, organizational change, modernization, and continuous improvement.
• Proven working knowledge of enterprise infrastructure, hybrid cloud, networks and telecommunications, enterprise architecture, cybersecurity, identity, resilience, and technology lifecycle management.
• Sound understanding of cyber risk, security operations, incident response, disaster recovery, third-party risk, control design, and audit or regulatory expectations.
• Superior communication skills with the ability to communicate effectively with executives and senior leaders, exercise sound judgment, influence key stakeholders, explain complex technology and risk issues in clear business terms and provide recommendations.
• Demonstrated commercial and financial acumen, including business-case development, capital and operating budget management, sourcing, contract negotiation, and vendor performance management.
• Ability to make timely, risk-informed decisions during ambiguity, competing priorities, service disruption, or crisis conditions.
• High standards of integrity, discretion, objectivity, and accountability when handling confidential information and material corporate risks.
• Ability to define meaningful outcomes and use operational, financial, risk, and customer measures to drive performance and investment decisions.

EDUCATION & EXPERIENCE:

• A degree or diploma in Computer Science, Engineering, Information Systems, Business Administration, cybersecurity, or a related discipline plus a minimum of 10 years of progressively responsible technology experience, is required; an equivalent combination of relevant education and experience may be considered.
• At least five years of senior leadership experience with accountability for people leaders, enterprise technology services, budgets, vendors, and material operational or cyber risk is required.
• Demonstrated experience leading complex infrastructure, cloud, cybersecurity, architecture, resilience, or enterprise modernization programs is required.
• Demonstrated experience operating critical technology services and managing major incidents, recovery activities, or cyber events is required.
• Experience developing and executing multiyear strategies, roadmaps, business cases, sourcing decisions, and capital and operating plans is required.
• Experience in a regulated, critical-infrastructure, or utility environment would be an asset.
• Knowledge of Microsoft platforms, hybrid cloud, enterprise networking, security technologies, IT service management, and contemporary infrastructure automation and observability practices would be an asset.
• Relevant certifications such as CISSP, CISM, ITIL, TOGAF, PMP, cloud architecture, or equivalent credentials would be an asset.

SPECIAL CONDITIONS:

• Valid Class 5 driver’s permit.
• Travel, evening work and participation in weekend events are occasionally required.

TO APPLY TO THIS POSITION: Please submit your resume via the button below: "Apply"

We thank all applicants for their interest, however, only those candidates to be considered for an interview will be contacted.

If you receive an error message when applying, please contact the system administrator at: [email protected]