Director, Enterprise Architecture & Cyber Security

About RECO

As Ontario’s regulator of more than 110,000 real estate agents and brokerages (often referred to as registrants), RECO administers and enforces the law that regulates trading in real estate in Ontario and enhances consumer confidence in the real estate services sector. RECO’s commitment to pursuing trust in every transaction means consumers can navigate the real estate market with confidence.

A modern regulator with approximately 170 employees, RECO is a collegial and dynamic environment where strategic agility, curiosity and empathy are valued.

Hybrid work environment

RECO has a ‘hybrid’ environment, which typically includes a minimum attendance in the office of two days per week, with some teams/positions requiring more frequent in-office attendance.

RECO’s commitment to diversity and inclusion: They aren’t just words to us!

RECO is committed to promoting an equitable, diverse, and inclusive environment that includes awareness, education, and engagement-building opportunities for all employees.

The role

Reporting to the Chief Data, Technology and Innovation Officer (CDTIO), the Director, Enterprise Architecture & Cyber Security is accountable for RECO's enterprise technology strategy and architecture, cyber security strategy and operations, technology resilience, and the secure, reliable operation of core infrastructure services.

The role provides strategic leadership for the design, modernization, security, and optimization of RECO's infrastructure environment, including cloud platforms, networks, identity and access services, end-user technology, collaboration platforms, security technologies, backup and recovery capabilities, and related infrastructure services.

The Director establishes infrastructure architecture principles, standards, roadmaps, and governance and serves as a senior advisor on cyber security, infrastructure risk, resilience, and technology investment decisions. The role partners with application, data, and business leaders to ensure infrastructure and security capabilities support RECO's strategic objectives, regulatory mandate, and consumer protection responsibilities.

Position responsibilities

Enterprise Infrastructure Architecture & Strategy

• Develop and maintain RECO's enterprise infrastructure architecture strategy, vision, principles, standards, target-state architecture, and multi-year roadmap.
• Define architecture for cloud, network, compute, storage, identity, collaboration, end-user technology, and core infrastructure platforms.
• Ensure infrastructure architecture supports scalability, resilience, security, interoperability, service performance, and organizational priorities.
• Provide architectural direction for infrastructure modernization, lifecycle management, technical debt reduction, and platform consolidation.
• Advise Executive Leadership on infrastructure architecture risks, investment priorities, emerging infrastructure technologies, and modernization opportunities.

 Infrastructure Architecture Governance & Standards

• Establish and maintain infrastructure architecture governance, standards, patterns, reference architectures, and technology guardrails.
• Lead architecture reviews for infrastructure and security solutions and ensure alignment with approved standards and target-state architecture.
• Partner with application and data teams to define infrastructure dependencies, hosting requirements, integration constraints, and security requirements without owning application or data architecture.
• Evaluate infrastructure and security technologies, including cloud, network, identity, endpoint, monitoring, automation, and resilience capabilities.
• Maintain architecture documentation, technology lifecycle standards, and exception-management processes

Technology Resilience & Continuity

• Establish and maintain technology resilience requirements for critical infrastructure and security services.
• Oversee disaster recovery, cyber recovery, backup, restoration, redundancy, and continuity capabilities and ensure they are regularly tested.
• Define recovery objectives and resilience standards in partnership with business continuity and technology stakeholders.
• Identify infrastructure single points of failure, key-person dependencies, and service continuity risks and drive remediation plans.
• Provide leadership during significant technology disruptions and ensure post-incident lessons learned are translated into architecture and operational improvements

Cyber Security Operations, Risk & Resilience

• Accountable for RECO's enterprise cyber security strategy, security operations, cyber risk management, and information security governance.
• Oversee security operations, threat monitoring, vulnerability management, incident response, identity and access management, endpoint security, and security architecture.
• Direct the ongoing operation and continuous improvement of security technologies, controls, monitoring, and detection capabilities.
• Lead cyber incident response, recovery, lessons learned reviews, and remediation planning.
• Establish cyber security policies, standards, controls, and risk practices aligned with industry best practices and regulatory requirements.
• Oversee third-party cyber security risk assessments and vendor security management programs.
• Provide regular cyber security risk reporting and recommendations to Executive Leadership and governance committees.

Infrastructure, Cloud & Technology Operations

• Provide strategic oversight of infrastructure, cloud services, networks, collaboration platforms, end-user technology, identity services, and related operational services.
• Ensure infrastructure services are reliable, secure, scalable, supportable, and aligned with business requirements and architecture standards.
• Establish service management frameworks, service levels, operational performance measures, and technology lifecycle practices.
• Monitor infrastructure capacity, availability, performance, and operational risk and implement continuous improvement initiatives.
• Ensure operational changes, releases, and platform upgrades are governed and executed with appropriate risk, security, and continuity controls.

Leadership & Organizational Effectiveness

• Lead, develop, coach, and mentor infrastructure and cyber security leaders and team members.
• Establish workforce plans, succession plans, and capability development strategies for infrastructure architecture, operations, and cyber security.
• Foster a high-performance culture focused on collaboration, accountability, service excellence, security, and continuous improvement.
• Promote effective cross-functional partnerships across Technology and the broader organization.

Financial Management & Vendor Governance

• Develop and manage operating and capital budgets for infrastructure and cyber security services.
• Oversee infrastructure and security procurement, vendor relationships, managed service providers, licensing, and strategic technology partnerships.
• Ensure infrastructure and cyber security investments deliver measurable value, manage risk, and align with organizational priorities.
• Lead contract negotiations, vendor performance management, and service reviews for infrastructure and cyber security providers.

​ Qualifications and experience

• Minimum 10-15 years of progressively senior technology experience, with significant leadership accountability for infrastructure architecture, technology operations, and cyber security.
• Minimum 5-7 years leading managers and professional technology teams.
• Demonstrated experience establishing enterprise infrastructure architecture, standards, roadmaps, and governance across cloud, network, identity, endpoint, collaboration, and core infrastructure platforms.
• Demonstrated experience leading cyber security operations, security architecture, cyber risk management, incident response, and organizational technology resilience.
• University degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or a related field.
• Master's degree and/or relevant professional certifications such as CISSP, CISM, CCSP, TOGAF, or equivalent are considered assets.
• Experience leading large-scale infrastructure modernization, cloud transformation, lifecycle management, and resilience initiatives in a DAA (Designated administrative authority) is nice to have
• Experience managing managed service providers, technology vendors, budgets, contracts, and service performance in a DAA (Designated administrative authority) is preferred
• Experience advising executive leadership and governance bodies on infrastructure architecture, cyber security, technology risk, and resilience in a DAA (Designated administrative authority) is preferred.
• Experience working within highly regulated environments is preferred.

Core competencies

• Strategic Leadership
• Enterprise Infrastructure Architecture
• Cyber Security & Technology Risk Management
• Architecture Governance & Standards
• Executive Influence & Advisory Skills
• Business & Financial Acumen
• Vendor & Third-Party Risk Management
• Stakeholder Relationship Management
• People Leadership & Talent Development
• Regulatory & Governance Awareness

Why work for RECO?

Working at RECO means contributing to an organization that supports a fair, transparent, and consumer-focused real estate marketplace.

What you can expect

• Purpose-driven work: Your contributions help protect consumers and strengthen one of Ontario’s largest and most important sectors.
• A modern, evolving regulator: We are innovating how we regulate and engage with the real estate sector, and your ideas and expertise will help shape the future.
• Professional growth: We invest in employee development, ongoing learning, and cross-functional exposure.
• Hybrid flexibility: Our hybrid model supports balance, flexibility, and wellbeing.
• Inclusive culture: You’ll work with people who care deeply about doing what’s right and delivering high-quality public service.

Join us

If you’re passionate about meaningful work, eager to grow, and want to make a tangible impact on an industry that touches every Ontarian, RECO is the place to do it.

Apply today and help shape the future of real estate in Ontario.

__________________________________________________________________

RECO is committed to treating all people in a way that allows them to maintain their dignity and independence. We believe in integration and equal opportunity. We are committed to meeting the needs of persons with disabilities in a timely manner and will do so by preventing and removing barriers to accessibility.

We thank all applicants in advance for their interest.