Head of Information Security - Canada (remote)

Masabi

23h ago 0 views 0 applications
Canada - East Coast Remote
Competitive
Full-time

Job Description

Join the Fare Payment Revolution at Masabi as Head of IT & Security!

At Masabi, we're not just building software; we're revolutionizing fare payment systems for public transport worldwide. Our Justride platform, deployed in over 250 locations including major global cities, allows riders to seamlessly purchase and use tickets via mobile, ticket machines, or even contactless bank cards. We're also innovating with our mobile ticketing SDK, partnering with industry leaders like Uber, Moovit, and Transit.

Are you a cybersecurity leader ready to make a real-world impact? Do you thrive in a fast-paced SaaS environment? Then read on!

The Opportunity: Head of IT & Security

As our Head of IT & Security, you'll be at the forefront of protecting our innovative platform and ensuring its continued reliability and scalability. This is a critical leadership role, shaping our security strategy and enabling the entire business.

You'll lead a small but highly effective team responsible for both IT and security, with opportunities to grow the team and collaborate with internal stakeholders and external vendors. If you have a passion for cloud infrastructure and a desire to shape technical vision, there's potential to expand the role further, leading our SRE team and owning uptime, cost efficiency, and potentially even the full release lifecycle on our AWS infrastructure.

Location: Hybrid or remote options available for candidates based in the UK, or fully remote for those in Canada (East Coast) or Colombia.

What You'll Do:
Security & Compliance Leadership:
Define and execute Masabi's global security strategy across infrastructure, endpoints, SaaS applications, and application layers.
Manage audits and ensure compliance with key frameworks including ISO27001, SOC 2, GDPR, and PCI DSS.
Lead incident response efforts, including conducting drills and performing root cause analysis.
Own the security risk register and drive mitigation efforts across various teams.
Develop and deliver comprehensive security education and awareness programs across the organization.

Customer Trust & Compliance Engagement:
Represent Masabi in customer security engagements, RFPs, due diligence processes, and assurance reviews.
Ensure internal security posture aligns with customer contract requirements.
Conduct regular security reviews with key customers.
Own and manage end-to-end PCI compliance initiatives.

Corporate IT Infrastructure & Operations:
Develop and maintain corporate IT policies and processes, including acceptable use, device management, and SaaS access controls.
Oversee the IT Helpdesk, device lifecycle management, endpoint security, Mobile Device Management (MDM), and SaaS governance.
Ensure robust business continuity and disaster recovery capabilities.
Manage procurement and vendor relationships for all IT tooling.

Cross-Functional Leadership:
Lead, mentor, and develop a high-performing IT & Security team, fostering a culture of trust and excellence.
Partner with Engineering, Infrastructure, Legal, and Sales teams on secure systems design and contract negotiations.
Contribute to security aspects of M&A due diligence and post-integration activities.
Provide strategic security reporting and insights to executive leadership.

What You'll Bring:
Proven leadership experience in IT and security within a SaaS or technology-driven business.
Deep understanding of ISO27001, SOC 2, PCI DSS, and GDPR compliance requirements.
Strong skills in incident response, risk management, and audit readiness.
Excellent communication skills with experience in customer-facing security roles.
Hands-on experience with IT systems such as SSO, MDM, endpoint protection, Google Workspace, Salesforce, and D365.
Ability to navigate complex technical and business trade-offs.

Bonus Points:
Experience in regulated or public sector environments.
Relevant certifications such as CISSP, CISM, CISA, or ISO Lead Auditor.
A track record of scaling security maturity through periods of growth or M&A activity.

Perks of Joining the Masabi Team:
Generous vacation policy: 20 days annually (plus public holidays), with the option to purchase an additional 5 days. Our office also closes between Christmas and New Year, providing over 28 days of vacation!
Comprehensive Private Healthcare and Life Insurance via Trinet.
Menopause support.
Choice of workstation.
CAD$325 per year to enhance your home office setup.
Flexibility to work remotely from any country in the world for up to 3 months per year.
Enhanced family leave policies.
A fun and collaborative environment focused on making a positive impact.

Why Masabi?

We are a team of innovators from diverse backgrounds, united by our passion for simplifying journeys and making transit fair and accessible for everyone. We value openness, trust, and empower our employees to bring their authentic selves to work.

Driven by Purpose: We believe in journeys made simple.
Encouraged to Accelerate: We support your career growth and development.
Advancing with Empathy: We foster a culture of learning and collaboration.

Ready to power journeys with us? Apply today!