Information Technology –Technical Program Manager, Cyber Security

THE BUSINESS

We are Everyday Luxury™. It's what we do and how we do it — together. It's working alongside world-class talent in pursuit of world-class results. It's maximizing your potential in a high-performance culture. It's knowing that wherever you are, you belong. It's elevating your world — and the world of those who love and will love Aritzia. It's You. And an endless runway of opportunity.

With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America — including Toronto, New York, Los Angeles and Seattle — our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best — with us.

The mission of the Cybersecurity Department is to deliver high-quality cybersecurity services and solutions that minimize risk across Aritzia’s systems and data.

Aritzia is growing, and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the operational engine of Cybersecurity, the team responsible for protecting Aritzia’s business, customers, and brand by proactively managing cyber risk, ensuring resilience, and enabling secure growth. As a Technical Program Manager (TPM), Cybersecurity, you will manage the delivery of Cybersecurity initiatives – including risk reduction initiatives, regulatory commitments, and security capabilities – that our Technology teams and the enterprise rely on every day.

You will own the “When” — orchestrating the timelines, complex dependencies, and cross-functional nature of the Cybersecurity team. You will bridge the gap between strategy and execution, ensuring that our foundational initiatives land on time and deliver exponential value to our Technology teams and beyond. With the skills you gain in this role, the opportunities are endless — from a rewarding career in Technology to continued growth and development with Aritzia.

As the Technical Program Manager, Cyber Security, you will:

• Manage the integrated Cybersecurity roadmap, ensuring alignment between internal teams to prevent bottlenecks before they occur
• Partner with Domain Tech Leads to translate high-level architectural intent into actionable, sequenced release plans that align with business deadlines
• Manage the “flow of work” across the department by proactively identifying and resolving cross-squad dependencies, managing escalation paths, and ensuring work is “Ready” for engineering execution
• Facilitate critical governance forums to ensure the Cybersecurity roadmap remains synchronized with Enterprise standards and business priorities
• Manage the operational logistics of our Cybersecurity vendors, including Statement of Work (SOW) management, onboarding/offboarding, and Quarterly Business Reviews (QBRs) to maximize vendor ROI
• Facilitate high-level departmental rituals to drive decision velocity and continuous improvement

The Technical Program Manager, Cybersecurity has:

• Proven skills, certifications, education and/or experience:
  Certifications such as CISSP, CISM, or PMP are an asset
• Expert capability in managing complex technical security programs using Agile/Kanban methodologies, visualizing risk reduction, and managing dependencies across multiple engineering teams without blocking product velocity
• Strong understanding of SecSDLC, Cloud Infrastructure Security (AWS/Azure), IAM, cryptography, and Dev Ops concepts to effectively communicate with security architects and identify technical vulnerabilities (i.e., you don't write the exploits, but you understand the mitigation)
• Proven experience managing security vendor deliverables, tracking remediation burn rates, and coordinating distributed Incident Response/Blue Team exercises across hybrid teams
• Deep expertise in architecting and administering modern work management systems (e.g., Jira, Jira Service Management) are integrated with security tools (e.g., Defender, SIEM alerts)
• Ability to design complex automation and enforce data hygiene, while utilizing SQL/APIs to independently validate mitigation status and generate risk metrics
• A commitment to learn and…