Job Requisition ID:Time Type:Full time
Employee Group:Staff
Job Category:IT Security
Employment Type:Permanent
Department:Information Systems and Technology - Information Security Services
Hiring Range:$113,285.63 - $141,607.03
Posting Information:This posting is for an existing vacancy.
The internal posting deadline for this position is November 12, 2026, at 11:59PM.
Job Description:Primary PurposeThis position is accountable for ensuring the effective operation of the Information Security Operations Centre (SOC) to support the information security objectives of the University. The incumbent provides leadership for information security monitoring, incident response and related operations, ensuring service objectives are met. The position provides operational and technical leadership to the information security operations team and advises senior leadership on information security risks, priorities, and opportunities.
Key AccountabilitiesEstablishes priorities and leads the ongoing development of network security monitoring, network access control and security incident response at the University by:- Identifying threats to the campus IT infrastructure, assessing their potential impact, and developing strategies to detect, and mitigate those threats.
- Participating in security architecture development to ensure threats and information security risks are appropriately assessed and addressed.
- Ensuring that the technology and capabilities employed by Information Security Services evolve in response to the changing threat landscape, technological developments and University requirements.
- Advising senior leadership on significant information security risks, operational priorities, and recommended mitigation strategies.
- Collaborating with campus stakeholders to develop and promulgate information security standards.
- Working with ISS and IST leadership to respond to audit findings as appropriate.
Ensures the effective utilization, deployment, and development of human and capital resources for information security operations at the University- Hires and develops the information security operations team.
- Coaches, trains and develops employees to enable their professional development and maintain the specialized capabilities by the function.
- Conducts regular reviews with direct reports and establishes performance expectations and priorities.
- Allocates resources and establishes priorities to maintain effective service delivery and respond to changing operational requirements.
Leads the ongoing operations and performance of the information security operations function - Ensures resources are available to respond to requests of the SOC.
- Establishes and continuously improves operational processes and procedures related to information security.
- Monitors performance and identifies opportunities to improve service effectiveness, quality and responsiveness.
- Coordinates resources and activities across relevant IT functions to support effective resolution of security incidents and operational issues.
- May be required to act operationally as Chief Information Security Officer, in their absence.
Provides specialized technical leadership and expertise for information security operations in the areas of:- Network access controls (e.g. Firewalls, ACLs, NAC, etc.)
- SSL/TLS Certificate Support
- Compliance scanning and reporting
- Information sharing with other institutions and partner organization
- Security risk assessment and mitigation
- Security operations processes and controls
Provides leadership and direction in response to significant information security risks and incidents by- Providing technical and operational leadership during security incidents.
- Assessing the nature, severity and potential impact of security incidents and determining appropriate response and escalation.
- Coordinating with relevant technical and institutional stakeholders to support timely resolution and mitigation.
- Conducting post-incident reviews and identifying opportunities to strengthen security controls, processes and capabilities.
- Providing advice and recommendations to senior leadership regarding significant security risks, incidents and required actions.
Required QualificationsEducation- University degree in a computing discipline together with relevant experience, or an equivalent combination of education and experience.
- Technical security certification (e.g. GIAC) is an asset.
Experience- 7-9 years of progressive experience in in information security, network security, and/or systems administration. Experience in a security administration role is preferred.
- 3-5 years of experience leading or managing technical staff
Knowledge/Skills/Abilities- Advanced experience with: network intrusion detection/prevention systems, log management/security information and event management (SIEM), network firewalls, public key infrastructure (PKI), network packet capture tools, network threat intelligence, systems administration (Unix/Linux and/or Windows), vulnerability scanning tools, TCP/IP and related communications protocols.
- Advanced knowledge of: people management practices, performance management, resource planning, operational planning and service delivery within a technical environment.
