Product Security, Principal

Who We Are:

Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives.
Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments.

As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With:
The Product Security, Principal is accountable for representing the Information Security function across assigned product lines, platforms, or technology domains, acting as the forward-deployed CISO delegate and senior security authority for that scope.

This role is responsible for ensuring security functions are embedded across the full lifecycle of assigned products and services, from strategy and design through delivery, operation, assurance, and ongoing improvement.

The Product Security, Principal partners with multiple teams, including Product, Engineering & Operations, Delivery Excellence, Info Sec, Legal, Risk, Compliance, and Finance teams to provide risk-based direction, coordinate security outcomes, and ensure business decisions are informed by a complete view of security risk, required controls, security investment needs, regulatory, and contractual obligations.

The role leverages central Info Sec capabilities as needed, including Frontier AI, GRC, Cloud Security, Application Security, Vulnerability Management, Threat Intelligence, SOC, Incident Response, Identity, Security Architecture, and Third-Party Risk, while remaining accountable for the integrated security posture of the assigned product or domain.

What You Will Do:

Serve as the primary Information Security advisor and representative for assigned products and services.

Provide strategic security guidance to support business, technology, and operational decision-making.

Identify, assess, monitor, and elevate security risks, ensuring appropriate controls and risk treatment plans are in place.

Ensure compliance with security policies, regulatory requirements, industry standards, and contractual obligations.

Support audits, regulatory reviews, security assessments, and governance reporting activities.

Review and advise on security requirements for third‑party vendors, contracts, and external partnerships.

Lead security reviews of product architectures, design changes, and major initiatives to ensure secure‑by‑design principles are embedded throughout the product lifecycle.

Evaluate threat models, data flows, technology solutions, and third‑party integrations to identify and mitigate security risks.

Partner with security specialists and technology teams to develop and implement effective security strategies and controls.

Support security investment planning, budgeting, vendor management, and prioritization of security initiatives.

Provide guidance on remediation strategies, cost considerations, and security‑related business cases.

Ensure alignment with vulnerability management, monitoring, incident response, resilience, and recovery programs.

Provide leadership and risk‑based guidance during security incidents, investigations, and escalations.

Drive continuous improvement through lessons learned from incidents, audits, assessments, and emerging threats.

Act as a trusted advisor to business, technology, risk,…