Manager Security Operations & Identity

Gore Mutual Insurance•Cambridge, ON

4h•CA$118,500 - CA$168,500•Hybrid

About The Position

At Gore Mutual, we’ve always set ourselves apart as a modern mutual that does good. Now, we’re proudly building on that legacy to transform our company—and our industry—for the better. Effective January 1, 2026, Gore has joined Beneva—the country’s largest mutual insurance company—as part of its Property & Casualty operations in Ontario and Western Canada. During 2026, Gore will combine its operations with Unica Insurance, Beneva’s Ontario-based subsidiary specializing in niche commercial and personal insurance, creating a stronger, more diversified mutual insurer with greater scale and long-term stability. Every decision and investment remains anchored in long-term benefits to customers, members, and communities. Come join us. As the Manager of Security Operations, you will work as part of the Enterprise Security team to protect the organization’s information systems and networks from cyber threats. This role manages the team responsible for monitoring, analyzing, and responding to security incidents, as well as implementing security measures to safeguard sensitive data and systems. You will work with teams and departments across the company to implement and maintain our security controls, ensure accurate security logging and drive continuous improvement of our security program and supporting documents.

Requirements

Community college degree in Computer Engineering or Information Security.
10+ Years experience in below:
Incident Response / Emergency Response Teams – Lead Incident Handler
Cyber Incident Response – Lead Incident Handler
Identity and access management, as senior analyst/specialist/leader
Proficiency in frameworks, compliance, and standards related to cybersecurity (e.g., NIST CSF, OSFI B13, PCI DSS).
Some of IT Operations / IT Service Management / Infrastructure / Cloud etc. in a senior technical role.
Experience in Team management, Performance management, mentoring and coaching
Cyber Security Governance and Risk management
Technical cloud operations and design (Azure and AWS)
Knowledge of Insurance or Financial Business principles.
Clear and proficient documentation and communication skills
Certified in multiple security Domains (e.g. CISSP, CISM, GIAC-GCIH, GIAC-GSEC etc.)

Responsibilities

Incident response management: Relationship Owner for our MDR partner ensuring vendor performance and service delivery is optimized and meeting SLAs. Ensure Team has coverage, capacity and skills to effectively investigate and respond to security breaches. Create and ensure continuous development of incident response plans and procedures. Owner for security emergency response procedures and development of associated playbooks and workflows. Lead engagement with other technical and business departments within Gore Mutual to plan for incidents and proactively develop security best practices.
Identity and Access Management (IAM): Provide leadership to work with cross functional departments to implement workforce and broker IAM solutions and operating processes. Manage the IAM Team, ensuring coverage, capacity and skills development to effectively deliver on the Team’s responsibilities and objectives. Provide ownership and operational oversight for IAM/IAG tooling, controls, data, performance metrics and reports. Continuously develop and optimize joiner, mover, leaver processes for Gore Mutual’s account lifecycle management. Key stakeholder in the modernization of Gore Mutual’s Identity Governance program.
Threat Intelligence and Analysis: Provide leadership to ensure key individuals on the team (including self) maintain diligence and proficiency on the latest cyber threats, vulnerabilities, and attack vectors. Manage the Threat Intelligence function to ensure intelligence data is analyzed and trends & risks are identified quickly with high quality and reliability. Provide knowledge and expertise to other departments such as networking and cloud engineering to assist in developing our platforms to reduce our threat exposure to emerging threats.
Operational Visibility: Develop and continuously improve reporting metrics and dashboards for overall department operational reporting. Leverage knowledge of SIEM and other Data Warehouse and analytics systems to do data discovery, high level forensics and general analysis of security telemetry. Determine and ensure collection of ongoing SLAs, KPIs and KRIs across all security teams. Create monthly, quarterly and yearly reports and dashboards. Deliver and present reports including for senior leadership extending information to trends, outcomes and interpretation of data points.
Physical Security: Co-own, with Facilities and Shared Services, emergency response procedures related to physical security. Work with Shared Services and Facilities Department leaders to develop and continuously improve physical security across all the company’s offices and facilities. Co-ordinate with business departments to create playbooks and procedures to respond to physical threats. Assume a leadership role for Physical Incident Response including for threats, imminent and active situations.