Chief Information Security Officer (CISO) and Director, IT Infrastructure

Position Details

• Closing Date: 2026-10-14
• Vacancy Type: Existing vacancy
• Location: Hamilton
• Department: Information Technology
• Employment Type: Full-time
• Contract Type: Permanent
• Engagement Type: Permanent

Summary of Duties

Reporting to the Chief Information Officer (CIO), the Chief Information Security Officer (CISO) & Director, IT Infrastructure will be responsible for implementing and running the enterprise cybersecurity and technology infrastructure program.

The CISO & Director, IT Infrastructure is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets, technologies, and infrastructure are adequately protected. This includes oversight of the City's data center, network infrastructure, and telephony and related infrastructure across approximately 180 sites.

The CISO will lead efforts to secure the organization’s information and IT assets by developing and implementing strategies to mitigate risks, ensure operational stability, manage security incidents, and ensure compliance with relevant policies and regulations.

The CISO will ensure that the business complies with all relevant IT security regulations and standards when acquiring new technology. This involves understanding the legal and regulatory landscape, assessing the technology's security features, and ensuring it meets the required compliance criteria.

The CISO will lead the IT Cybersecurity, Infrastructure Teams consisting of approximately 45 staff members.

General Duties

Strategy & Planning

• Lead and provide strategic direction to achieve business goals by articulating standards, prioritizing technology initiatives and coordinating the evaluation, deployment, and management of current and future security and infrastructure technologies.
• Participate in the development and implementation of IT strategies in collaboration with the IT Management team. Provide advice and recommendations to the Senior Management team on strategic infrastructure and security architectures and best practices to ensure the integrity of the City environment.
• Develop and communicate security and technology plans and directions to senior management team, staff, partners, customers and stakeholders. Collaborate with the appropriate departments to develop and maintain a security technology plan that supports organization risk assessment needs.
• Direct development, execution and updating of cyber incident response and assist with technology business continuity planning and execution.
• Design and develop enterprise security standards, architecture, security technology evaluation and implementation.
• Review proposed infrastructure and application projects and solutions for compliance to defined City security and technology policies, procedures and standards.
• Perform corporate cultural analysis and develop change strategies that are flexible and adaptive in collaboration with the IT Management Team to support effective adoption of new applications, technologies and related processes.
• Conduct research and provide recommendations on security products, services, protocols, and standards in support of all infrastructure procurement and development efforts. Provide insight into emerging security technologies, trends and changes in the IT landscape. Identify and validate those security technologies that are right for the City and develop the best strategy for adoption and implementation. Maintain current knowledge of security industry trends and emerging technologies in anticipation of new business processes and system alterations.
• Establish and manage delivery of quality service through the establishment and monitoring of Key Performance Indicators (KPI).
• Devise strategies and make recommendations for enterprise information/data and solution architectures that meet the City’s security objectives and goals, working in collaboration with City senior management team.
• Coordinate with the IT Management Team to effectively and efficiently utilize IT resources – including personnel and equipment – across the IT organization.
• Manage and maintain strategic relationships with the corporate departmental leadership - across the City with a view to sustained insight into City business strategies and directions and the provision of advice and guidance on opportunities for managing risk by complying with the City’s security and infrastructure policies and procedures.
• Oversee the support, management and administration of contracts for spending on services and products related to managed security hardware and applications. This includes overseeing the preparation and execution of requests for proposals (RFPs), bid proposals, contracts, and other documentation for security applications and hardware. Negotiates enterprise wide contracts with software and service providers as required and liaise with City vendors for prompt rectification of any security problems or emergencies.

Application Process

Interested applicants please submit your application online at www.hamilton.ca/city-council/jobs-city by 4:00 p.m. on October 14, 2026.

Internal applicants should apply with your work e-mail address.

External applicants are considered only after the internal posting process has been completed.

Only applicants chosen for an interview will be contacted.