The Opportunity Our client is an established and growing technology company. Reporting to the CITO, they are hiring a Senior Manager, Information Security & IT to lead the information security program while providing leadership to the corporate IT function. You will take ownership of security governance, cyber risk and compliance, cybersecurity preparedness and response, and core security practices, while leading the team responsible for day-to-day corporate technology.
This is a hybrid role working three days per week on site in Toronto.
As their new Senior Manager, Information Security & IT, you will:- Lead information security. You will own and evolve the company's information security program, setting priorities across governance, risk management, policies, controls, and security practices. You will take a practical, risk-based approach to strengthening the organization's overall security posture.
- Drive compliance and assurance. You will lead security compliance and assurance activities across SOC 2, HIPAA, GDPR, CCPA, audits, penetration testing, customer security reviews, and cyber insurance requirements. You will ensure requirements are understood, controls are effective, and the organization is prepared to demonstrate its security practices to customers, auditors, and other stakeholders.
- Strengthen security operations. You will oversee identity and access management, endpoint security, vulnerability management, and security monitoring across the corporate environment. You will identify gaps, prioritize improvements, and strengthen the practices and controls that protect the organization, its systems, and its information.
- Lead incident preparedness and response. You will own cybersecurity incident response, ensuring the organization is prepared to respond effectively when issues arise. You will lead escalation, remediation, and follow-up, bringing the right people together and ensuring lessons learned translate into stronger practices.
- Lead corporate IT. You will lead and develop the corporate IT team and oversee employee technology, SaaS administration, onboarding and offboarding, and core IT operations. You will create clarity around priorities while helping the team deliver reliable, secure, and effective technology support across the organization.
- Improve how security and IT operate. You will manage security and IT vendors and identify opportunities to improve effectiveness, automation, and cost. You will balance immediate operational needs with longer-term improvements that make both functions more scalable and efficient.
- Communicate risk and priorities. You will provide clear reporting on security risk, compliance, and key priorities to executive leadership and the Audit Committee. You will translate complex security and technology considerations into practical insights that support informed decision-making.
You bring:- The experience. You have progressive experience across information security and corporate IT, with meaningful responsibility in both areas. You have led security programs, risk management and compliance initiatives, and cybersecurity incident response, while also overseeing modern corporate technology environments and IT teams.
- The security and compliance knowledge. You bring strong knowledge of identity and access management, endpoint security, SaaS environments, vulnerability management, security monitoring, and controls. You have working knowledge of frameworks and requirements such as SOC 2, HIPAA, GDPR, and CCPA and understand how to translate them into practical security and compliance practices.
- The technical judgment. You can assess risk, make thoughtful trade-offs, and determine where attention and investment will have the greatest impact. You are comfortable moving between strategic priorities and hands-on problem-solving when the situation calls for it.
- The leadership. You know how to provide direction, develop people, and create accountability while staying connected to the day-to-day realities of the team. You can bring structure and focus to evolving security and IT priorities while supporting a responsive, effective corporate technology function.
- The communication skills. You can translate complex security, risk, and technology topics into clear, practical information for different audiences. You are comfortable working with technical teams, executives, auditors, customers, and external partners, building trust and helping stakeholders understand risks, priorities, and recommended actions.
Compensation:The base salary range for this position is $150,000 - $165,000, plus bonus.
Your compensation will be determined based on your skills and experience, as well as the scope and complexity of the role. We welcome open conversations about compensation and are happy to discuss the approach and overall package throughout the hiring process.
Apply now.What you can expect from the interview process:
- A virtual interview with a Talent Advisor to discuss your interest in joining the company and in the role. The conversation will be recorded using BrightHire, an AI-powered video interview tool. More details will be shared when you are invited to interview.
- A virtual interview with the Hiring Manager focused on your information security and corporate IT leadership experience, your approach to managing cyber risk and compliance, and how you lead security and IT priorities across the organization.
- A final interview with key business partners, providing an opportunity to discuss your approach, leadership style, and how you would collaborate across the organization to strengthen information security and corporate IT.
#LI-Hybrid
#LI-DNI
