Product Security, Principal

Who We Are:

Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.

Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With:

The Product Security, Principal is accountable for representing the Information Security function across assigned product lines, platforms, or technology domains, acting as the forward-deployed CISO delegate and senior security authority for that scope.

This role is responsible for ensuring security functions are embedded across the full lifecycle of assigned products and services, from strategy and design through delivery, operation, assurance, and ongoing improvement.

The Product Security, Principal partners with multiple teams, including Product, Engineering & Operations, Delivery Excellence, InfoSec, Legal, Risk, Compliance, and Finance teams to provide risk-based direction, coordinate security outcomes, and ensure business decisions are informed by a complete view of security risk, required controls, security investment needs, regulatory, and contractual obligations.

The role leverages central InfoSec capabilities as needed, including Frontier AI, GRC, Cloud Security, Application Security, Vulnerability Management, Threat Intelligence, SOC, Incident Response, Identity, Security Architecture, and Third-Party Risk, while remaining accountable for the integrated security posture of the assigned product or domain.

What You Will Do:

• •Serve as the primary Information Security advisor and representative for assigned products and services.
• •Provide strategic security guidance to support business, technology, and operational decision-making.
• •Identify, assess, monitor, and escalate security risks, ensuring appropriate controls and risk treatment plans are in place.
• •Ensure compliance with security policies, regulatory requirements, industry standards, and contractual obligations.
• •Support audits, regulatory reviews, security assessments, and governance reporting activities.
• •Review and advise on security requirements for third-party vendors, contracts, and external partnerships.
• •Lead security reviews of product architectures, design changes, and major initiatives to ensure secure-by-design principles are embedded throughout the product lifecycle.
• •Evaluate threat models, data flows, technology solutions, and third-party integrations to identify and mitigate security risks.
• •Partner with security specialists and technology teams to develop and implement effective security strategies and controls.
• •Support security investment planning, budgeting, vendor management, and prioritization of security initiatives.
• •Provide guidance on remediation strategies, cost considerations, and security-related business cases.
• •Ensure alignment with vulnerability management, monitoring, incident response, resilience, and recovery programs.
• •Provide leadership and risk-based guidance during security incidents, investigations, and escalations.
• •Drive continuous improvement through lessons learned from incidents, audits, assessments, and emerging threats.
• •Act as a trusted advisor to business, technology, risk, legal, and operational stakeholders to enable secure business outcomes.
• •Coordinate security resources and influence cross-functional teams to achieve security, compliance, and resilience objectives.
• •Promote security awareness and foster a strong security culture across product development, delivery, and operations.

What You Bring

10+ years of experience in cybersecurity, information security, AI for security, security architecture, governance, risk and compliance (GRC), cloud security, application security, security operations, or related disciplines.

Proven experience serving as a trusted security advisor, security lead, or product-aligned security partner, influencing strategic security and risk decisions.

Strong knowledge of enterprise security risk management, including risk assessment, control design, risk treatment, exception management, and executive risk communication.

Deep understanding of security and compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, privacy regulations, and audit and assurance practices.

Experience integrating security requirements into product development, architecture, technology transformation, and operational processes.

Strong understanding of secure architecture and engineering principles, including secure-by-design, defense-in-depth, zero trust, least privilege, encryption, and resilience.

Hands-on experience with modern technology environments, including cloud platforms (AWS, Azure, or equivalent), APIs, distributed systems, containers, and hybrid infrastructure.

Knowledge of application and product security practices, including Secure SDLC, DevSecOps, threat modeling, security testing, vulnerability management, and remediation processes.

Familiarity with security operations disciplines such as incident response, monitoring, threat intelligence, resilience, and continuous improvement.

Experience supporting security governance, third-party risk management, vendor assessments, contract reviews, and regulatory or audit activities.

Ability to evaluate and prioritize security investments, balancing risk reduction, compliance obligations, business objectives, and financial considerations.

Exceptional communication and stakeholder management skills, with the ability to translate complex technical issues into clear business risks, recommendations, and decisions.

Demonstrated ability to influence cross-functional stakeholders and drive outcomes in complex, fast-paced environments without direct authority.

Strong judgment, decision-making, and problem-solving skills, with the ability to navigate ambiguity and manage competing priorities.

Relevant industry certifications such as CISSP, CCSP, CISM, CRISC, or CCISO are considered an asset.

Security clearance eligibility may be required depending on the assigned product or business area.

Eligibility to work for Interac Corp. in Canada in a full-time capacity.

What We’re Offering:

The hiring range for this position will depend on factors such as skills, experience, and job-related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future, and includes:

• •Generous vacation and wellness days to help you recharge
• •Comprehensive employer-paid benefits coverage for peace of mind
• •Market-leading employer-funded RRSP program to invest in your future
• •Flexible hybrid work model for better work-life balance
• •Access to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family
• •Pregnancy and parental leave top-up to support growing families
• •Charitable donation matching with United Way to amplify your impact

Why Join Us?

At Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose-driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect:

Investing in the Future – Help us unlock digital prosperity for all Canadians.

Innovative Thinking – Collaborate on products, practices, and platforms that redefine