{"id":2517569,"url":"https://alion.io/job/interac-product-security-principal","title":"Product Security, Principal","company":{"id":3854,"name":"Interac","domain":"interac.ca","url":"https://alion.io/company/interac","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":11,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":54000,"max_usd":134000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":52},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Defense in Depth","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-25T10:36:54Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Who We Are:\nEvery transaction matters. Every Canadian matters. At Interac, we protect both - driving trust, security, and inclusion, so our digital economy thrives. \nFounded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day - across both digital and physical environments.\nAs the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.\nWho You Will Work With:\nThe Product Security, Principal is accountable for representing the Information Security function across assigned product lines, platforms, or technology domains, acting as the forward-deployed CISO delegate and senior security authority for that scope.\nThis role is responsible for ensuring security functions are embedded across the full lifecycle of assigned products and services, from strategy and design through delivery, operation, assurance, and ongoing improvement.\nThe Product Security, Principal partners with multiple teams, including Product, Engineering & Operations, Delivery Excellence, InfoSec, Legal, Risk, Compliance, and Finance teams to provide risk-based direction, coordinate security outcomes, and ensure business decisions are informed by a complete view of security risk, required controls, security investment needs, regulatory, and contractual obligations.\nThe role leverages central InfoSec capabilities as needed, including Frontier AI, GRC, Cloud Security, Application Security, Vulnerability Management, Threat Intelligence, SOC, Incident Response, Identity, Security Architecture, and Third-Party Risk, while remaining accountable for the integrated security posture of the assigned product or domain.\nWhat You Will Do:\nServe as the primary Information Security advisor and representative for assigned products and services. \nProvide strategic security guidance to support business, technology, and operational decision-making. \nIdentify, assess, monitor, and escalate security risks, ensuring appropriate controls and risk treatment plans are in place. \nEnsure compliance with security policies, regulatory requirements, industry standards, and contractual obligations. \nSupport audits, regulatory reviews, security assessments, and governance reporting activities. \nReview and advise on security requirements for third-party vendors, contracts, and external partnerships. \nLead security reviews of product architectures, design changes, and major initiatives to ensure secure-by-design principles are embedded throughout the product lifecycle. \nEvaluate threat models, data flows, technology solutions, and third-party integrations to identify and mitigate security risks. \nPartner with security specialists and technology teams to develop and implement effective security strategies and controls. \nSupport security investment planning, budgeting, vendor management, and prioritization of security initiatives. \nProvide guidance on remediation strategies, cost considerations, and security-related business cases. \nEnsure alignment with vulnerability management, monitoring, incident response, resilience, and recovery programs. \nProvide leadership and risk-based guidance during security incidents, investigations, and escalations. \nDrive continuous improvement through lessons learned from incidents, audits, assessments, and emerging threats. \nAct as a trusted advisor to business, technology, risk, legal, and operational stakeholders to enable secure business outcomes. \nCoordinate security resources and influence cross-functional teams to achieve security, compliance, and resilience objectives. \nPromote security awareness and foster a strong security culture across product development, delivery, and operations. \nWhat You Bring\n10+ years of experience in cybersecurity, information security, AI for security, security architecture, governance, risk and compliance (GRC), cloud security, application security, security operations, or related disciplines. \nProven experience serving as a trusted security advisor, security lead, or product-aligned security partner, influencing strategic security and risk decisions. \nStrong knowledge of enterprise security risk management, including risk assessment, control design, risk treatment, exception management, and executive risk communication. \nDeep understanding of security and compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, privacy regulations, and audit and assurance practices. \nExperience integrating security requirements into product development, architecture, technology transformation, and operational processes. \nStrong understanding of secure architecture and engineering principles, including secure-by-design, defense-in-depth, zero trust, least privilege, encryption, and resilience. \nHands-on experience with modern technology environments, including cloud platforms (AWS, Azure, or equivalent), APIs, distributed systems, containers, and hybrid infrastructure. \nKnowledge of application and product security practices, including Secure SDLC, DevSecOps, threat modeling, security testing, vulnerability management, and remediation processes. \nFamiliarity with security operations disciplines such as incident response, monitoring, threat intelligence, resilience, and continuous improvement. \nExperience supporting security governance, third-party risk management, vendor assessments, contract reviews, and regulatory or audit activities. \nAbility to evaluate and prioritize security investments, balancing risk reduction, compliance obligations, business objectives, and financial considerations. \nExceptional communication and stakeholder management skills, with the ability to translate complex technical issues into clear business risks, recommendations, and decisions. \nDemonstrated ability to influence cross-functional stakeholders and drive outcomes in complex, fast-paced environments without direct authority. \nStrong judgment, decision-making, and problem-solving skills, with the ability to navigate ambiguity and manage competing priorities. \nRelevant industry certifications such as CISSP, CCSP, CISM, CRISC, or CCISO are considered an asset. \nSecurity clearance eligibility may be required depending on the assigned product or business area. \nEligibility to work for Interac Corp. in Canada in a full-time capacity. \nWhat We’re Offering:\nThe hiring range for this position will depend on factors such as skills, experience, and job-related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future, and includes:\nGenerous vacation and wellness days to help you recharge \nComprehensive employer-paid benefits coverage for peace of mind \nMarket-leading employer-funded RRSP program to invest in your future \nFlexible hybrid work model for better work-life balance \nAccess to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family \nPregnancy and parental leave top-up to support growing families \nCharitable donation matching with United Way to amplify your impact \nWhy Join Us?\nAt Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose-driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect:\nInvesting in the Future - Help us unlock digital prosperity for all Canadians.\n\nInnovative Thinking - Collaborate on products, practices, and platforms that redefine what’s possible.\n\nInclusive Culture - Be empowered to bring your whole self to work and realize your full potential.\n\nInspiring Community - Work in an ecosystem where we lift each other up and rise together.\n\nIntentional Support - Enjoy flexible, supportive offerings that prioritize your total wellness.\n\nAdditional Pre-Employment Requirements:\nTo ensure the integrity of our organization, successful candidates will be required to complete background checks, which may include, Canadian Criminal Credit Check, Canadian ID Cross-Check, Public Safety Verification, 5-year Employment Verification, Education Verification, Credit Check, and Social Media Check.\nEqual Opportunity Employer\nInterac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds, experiences, and perspectives come together. That’s why we are committed to providing fair and equitable employment opportunities for all individuals, without discrimination based on race, color, ancestry, ethnic origin, place of origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, or any other characteristic protected by applicable law.\nIf you require accommodation during any stage of the application or recruitment process, please contact us at . We will work with you to meet your needs.\nPlease be aware that certain individuals are misusing Interac Corp.’s name and logo to promote fictitious employment opportunities. Interac Corp. never requests, solicits, or accepts any form of payment in exchange for employment. Any such offers are fraudulent and should be disregarded. Interac Corp. assumes no liability for any claims, losses, damages, expenses, or inconveniences arising from or related to these fraudulent activities. Such communications do not constitute an offer or representation by Interac Corp. or its subsidiaries and affiliates.","description_format":"text","description_chars":9935,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Generous vacation","Hybrid work","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-14T10:09:47Z"}],"visa":[],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.739,"p_room":0.55,"age_days":13,"expected_fill_days":11,"reasons":["conf:19","velocity","win:tail"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/interac-product-security-principal","json_url":"https://alion.io/job/interac-product-security-principal.json","meta":{"generated_at":"2026-10-26T10:34:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14183,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854},"rest":"https://alion.io/mcp/rest/get_company?id=3854"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finterac-product-security-principal"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finterac-product-security-principal"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finterac-product-security-principal"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interac-product-security-principal\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finterac-product-security-principal"}]}