Develop and maintain an AI and data security capabilities roadmap aligned with organizational cyber strategy and risk assessments.
Define and enforce security-focused technical standards and guidelines for AI models, data platforms, and database technologies.
Security Requirements Definition:
Establish clear security requirements for AI systems, data pipelines, and storage solutions, ensuring alignment with compliance frameworks and enterprise risk posture.
Partner with architecture and engineering teams to embed security requirements into AI model development, data governance, and operational practices.
Prioritization and Planning:
Engage with stakeholders to prioritize initiatives that strengthen our Data And AI posture while balancing business objectives.
Drive alignment across engineering, operations, and architecture teams through outcome-driven planning and dependency management.
Define, defend, align and adjust iteratively on recommendations:
Governance reinforcement
Tool rationalization opportunities
Prioritization of in-flight initiatives (e.g. stop or continue)
Define, defend, align, adjust short-term (0-6 months), mid-term (6-18 months), and long-term (18+ months) roadmap for CTC, including common solutions intended for use across CTC enterprise.
Prioritize roadmap initiatives based on impact, cost, and feasibility.
Identify areas requiring deeper analysis of integrations, workflows, and dependencies.
Embed governance and security controls into roadmap initiatives.
Present roadmap to relevant executive stakeholders for feedback and alignment.
Delivery:
Deliver a detailed capability framework, aligned to the strategic expectations of CISO and deep technical engagement with CTC Platform owners.
Capability Heatmap and In-Flight Initiatives Mapped to Framework Expectations.
Prioritized recommendations aligned to the approved capability framework.
Deep knowledge and technical experience in delivering a comprehensive capability roadmap for network and security infrastructure
Facilitation & Influence:
Facilitate fact-based, data-driven decision-making with domain expertise.
Influence technical and business outcomes through strong interpersonal and negotiation skills.
Stakeholder Collaboration:
Engage with cross-functional teams to gather feedback, identify improvement areas, and implement actionable solutions.
What you bring
Experience: 7+ years in program management within technology or cybersecurity, with at least 4+ years focused on AI and data security .
Technical Expertise: Deep understanding of AI and data security controls, including:
AI Security: Model integrity, adversarial attack mitigation, secure ML pipelines, and responsible AI principles.
Data Security: Database hardening, encryption (data-at-rest and in-transit), tokenization, and secure data lifecycle management.
Data Governance: Privacy compliance (GDPR, CCPA), secure data sharing, and identity-based access controls.
Industry Certifications: CISSP, CCSP, CISM, or equivalent required; AI security certifications (e.g., Certified AI Security Specialist) preferred.
Communication & Influence: Proven ability to influence outcomes and drive consensus across diverse technical and business stakeholders.
Requirements
Familiarity with compliance frameworks (NIST AI RMF, ISO 27001, GDPR).
Experience with secure AI development tools and data platforms (Co-Pilot, TensorFlow, PyTorch, Hadoop, Spark, DataBricks, Power Platform, Azure AI Studio/ AI Foundry).
SAFE Certification is a plus
We're always looking for great talent! In addition to competitive pay, we offer:
Reporting to the AVP, Cyber Security Program Management, the Program Manager, Data and AI Security will lead strategic initiatives in the AI and data security domains, encompassing artificial intelligence systems, databases, data platforms, and encryption technologies. This role is for a technically credible security professional who wants to shape enterprise‑level cyber capabilities-without reverting to day‑to‑day engineering. You'll work across architecture, platform, and risk teams to define and drive adoption across the enterprise.
Canadiantirecorporation · Toronto, On, Canada