Principal Investigator, Cybersecurity

Principal Investigator, Cybersecurity
COMPETITION NO. ADP23-03

About Durham College:
Durham College (DC) is a leading post-secondary institution with a clear purpose: transforming lives, building careers, and enriching communities.

We prepare students to thrive in a rapidly changing world of work through innovative, hands-on and industry-connected learning. From co-ops and field placements to applied research and other experiential opportunities, DC students develop the practical skills, knowledge, and confidence to make an immediate impact in their careers and communities.
Known for future-focused, innovative teaching and strong connections to industry, DC offers a diverse range of market-driven programs designed to respond to evolving workforce needs. Our programs span business, information technology, engineering, construction and skilled trades, health care, science and technology, culinary, hospitality and horticulture, social and community services, and media, art and design.

Across our modern campuses in Oshawa and Whitby, DC offers 145 programs, including eight degrees and 11 apprenticeship programs, serving nearly 11,000 full-time post-secondary and 2,800 apprenticeship students. We also support lifelong learning through more than 18,000 registrations in professional and part-time learning, while our community of more than 125,000 alumni is making an impact locally and around the world.

Our impact extends well beyond our campuses. DC contributes more than $913 million annually to Durham Region’s economy. Remaining community-connected, DC works closely with employers, industry, and partners to strengthen our communities and create new opportunities. We are committed to embedding sustainability in the way we learn, work, and contribute to the communities we serve.

At DC, employees are at the heart of that impact. As a people-centred college, our culture is grounded in our values of collaboration, diversity and inclusion, excellence, innovation, integrity, respect and social responsibility. Together, we are creating exceptional learning experiences, supporting student success, and helping to shape a more sustainable, equitable, and prosperous future.

About Research, Innovation and Training Services (RITS):

Durham College is seeking experienced and motivated professionals who share our commitment to quality and student success. The Office of Research, Innovation and Training Services (RITS) is currently seeking applications from qualified individuals who are interested in joining the Centre for Cybersecurity Innovation, on a part-time, project-based contract to oversee the development of real-world solutions for industry partners through applied research and knowledge transfer projects.

Teams of expert faculty, students and recent graduates collaborate with industry partners and their staff to deliver innovative cybersecurity-based solutions to pressing business problems and opportunities. Projects can include producing and testing prototypes, evaluating new technologies, and developing new or improved products or processes for small- and medium-sized businesses (SMEs). All projects are funded by provincial or federal government grants.

The Centre for Cybersecurity Innovation is located at the Oshawa Campus and provides SMEs access to facilities, equipment, technical expertise, and project services to assist them in product development, technology adoption, expansion into new markets and commercialization of new products, services and processes.

Position Information:
Hourly Rate: $57.41
Hours: Up to 24 hours per week, Monday to Friday.
Reporting To: Director, Applied Research
Vacancy Status: This posting is part of an ongoing recruitment process to maintain an applicant pool. Recruitment is continuous and dependent on project needs; candidates may be contacted as new projects arise

Duties and Responsibilities:

The responsibilities of a Principal Investigator include, but are not limited to:

• Develop, review, and update security policies, procedures, and governance documentation to meet compliance standards.
• Conduct comprehensive gap assessments against relevant frameworks, identify areas of non-compliance, and recommend actionable remediation steps.
• Lead the implementation, maintenance, and continuous improvement of SOC 2 Type 2, ISO 27001, and NIST SP 800-53/800-171 compliance programs.
• Design, implement, and document security controls across cloud and on-premises environments, ensuring alignment with framework requirements.
• Develop and manage remediation plans, conduct internal audits and readiness assessments, and track progress toward compliance objectives.
• Perform risk assessments, maintain risk registers, and support third-party/vendor risk management processes.
  Assess and enhance the security of cloud infrastructure, ensuring compliance with SOC 2, ISO 27001, and NIST requirements.
• Coordinate and support external audits, manage evidence collection, and serve as the primary liaison with auditors.

Qualifications:

The ideal candidate will meet or exceed the following qualifications:

• An undergraduate degree in Cybersecurity, Information Technology, Business or a related field, preferably a masters degree.
• Three to five years of relevant industry experience and demonstrated ability in fields and technologies relevant to project opportunities
• 3+ years of experience in GRC, information security, or compliance roles.
• In-depth knowledge of SOC 2 Type 2, ISO 27001, and NIST frameworks.
• Experience with gap analysis, internal audits, and remediation planning.
• Strong understanding of cloud security principles and cloud infrastructure (AWS, Azure, GCP, etc.).
• Familiarity with GRC and audit management tools (e.g., Secureframe, Drata, Vanta, Sprinto).
• Excellent written and verbal communication skills; ability to communicate complex compliance requirements to technical and non-technical audiences.
• Strong organizational and project management abilities.
• Experience developing and maintaining security policies and governance documentation.
• Ability to work independently and collaboratively in a fast-paced environment.

The ideal candidate will possess the following qualifications:

• ISO/IEC 27001 Lead Auditor/Implementer, CISA, CRISC, CGRC, or similar certifications.
• Experience supporting SOC 2 Type 2, ISO 27001, or NIST certification and audit processes.
• Knowledge of vulnerability management, SIEM, and cloud security assessment tools.
• Experience in SaaS or cloud-native environments.

Please apply below by submitting your cover letter and resume to the online portal. Competition number ADP23-03.

Contact Us T:905.721.3073 [email protected]
C Wing, Second Floor - 2000 Simcoe St. N. Oshawa, ON

Durham College invites applications from all qualified individuals. Durham is committed to fostering workplace diversity, and, provides accommodations to applicants with disabilities throughout our hiring process. If you require this information in alternate format; require communication supports; an accommodation in applying for a posting and/or if you are selected for an interview, please contact our Human Resources (HR) department and an HR assistant will work with you to meet your needs.

We thank you for your interest in employment with Durham College however, only those candidates selected for an interview will be contacted.

Land Acknowledgement
Durham College is situated on the traditional lands of the First Peoples of the Mississaugas of Scugog Island First Nation. These lands are covered under the Williams Treaties and rest within the traditional territory of the Anishinaabeg. We offer our gratitude to the Indigenous Peoples who care for and, through the treaty process, share the lands on which we live, learn, teach and prosper today.