DescriptionRole:
Manager, Security and Compliance
Location:
Etobicoke & Mississauga, Ontario
Company:
Stelumar Advanced Manufacturing Inc.
Department:
Information Technology/Shared Services
Employment Type:
Full-Time, Permanent
Reports to:
Director, IT
What you'll do
- Design and build SAMI's security and compliance program across IT and OT environments, establishing the roadmap, governance, standards, and operating model for Cabinetry, Panel, Modular, and Stelumar Communities.
- Implement and continuously mature SAMI's security suite (Sentinel SIEM, Defender for IoT/Endpoint/O365), and lead incident response end-to-end, from triage in the ITSM platform through resolution.
- Manage security controls across SAMI's hybrid AD/Entra environment, including Conditional Access, MFA, privileged access, Purview, and Intune compliance policies.
- Build and lead an end-to-end vulnerability management program: define scanning, patch compliance standards, and remediation tracking across servers, endpoints, and network infrastructure.
- Administer and audit Fortinet network security controls and the IT/OT network security boundary for PLC environments.
- Oversee SAMI's data protection and backup verification program (Cohesity, SQL Server Always On AGs) and support Tier 2 DR/BCP delivery.
- Manage the day-to-day relationship and audit cycle with SAMI's external auditors, including PwC, coordinating evidence, walkthroughs, and control testing; lead internal audit readiness and track findings to close.
- Administer security aspects of SAMI's ERP (Odoo) and MES-connected systems, including access reviews and segregation of duties.
- Run security awareness training and phishing simulations, and support security review of new SaaS tools and vendors.
- Partner with IT leadership to define security guardrails and enable the secure deployment of AI and automation tools from pilot through production.
- Other duties as assigned.
What you bring
- College Diploma or University Degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.
- 5+ years of hands-on IT security and compliance administration experience, including demonstrated success designing, building, and implementing programs, controls, and processes across multiple sites and technologies.
- Demonstrated proficiency with SIEM (e.g., Microsoft Sentinel) and endpoint detection and response tools (e.g., Microsoft Defender).
- Hands-on experience with Microsoft 365/Azure security and compliance tooling, including Conditional Access, Purview, and Intune compliance policies.
- Working knowledge of NIST CSF and IT general controls (ITGCs), with hands-on experience supporting external audits and evidence requests.
- Solid networking/firewall fundamentals, ideally with Fortinet, across corporate and OT environments.
- Strong documentation habits, organization, and discretion handling sensitive security and compliance matters.
- Clear communicator who can explain risk and controls to non-technical stakeholders, auditors, and plant teams.
Bonus Points
- Industry certification such as Security+, SC-200, SC-300, SC-401, or CISSP (or working toward one).
- Prior experience as the auditee contact for PwC or another Big Four/national audit firm, or audit-side experience (SOC 2, ISO 27001).
- Hands-on exposure to OT/PLC network security in a manufacturing or industrial setting.
- Experience with FreshService, SolarWinds, or comparable ITSM and monitoring platforms.
Compensation
The expected base salary range for this position is $85,000 - $130,000. Actual pay may vary depending on your job-related knowledge, competencies, and skills. We recognize that exceptional situations may fall outside this range, and we encourage all interested candidates to apply.
You are also eligible to participate in Stelumar's annual bonus program which gives you the opportunity to increase your total compensation if business and individual goals are achieved.
We encourage applicants who meet most of the role requirements to hit that submit button and apply! It's okay if you don't have 100% of the requirements. If you're the right candidate, we'll help you learn and grow.
