Senior Manager, Security Operations Centre

TMX Group•Toronto, ON

11d•CA$145 - CA$160•Hybrid

About The Position

The Senior Manager, SOC (6-month contract) is responsible for the design, planning, testing, implementation, and administration of industry-accepted information security principles, practices, and systems to ensure the protection of all information assets processed, stored, or transmitted across the organization. This role continuously evaluates the effectiveness of current information security solutions, monitors for and mitigates security risks, determines the root causes of security violations, and implements robust procedures to prevent future incidents in a 24x7x365 environment. Additionally, the Senior Manager provides expert advisory and assistance to internal system users regarding enterprise information security matters.

Requirements

Bachelor’s degree in Computer Technology, Computer Science, or a related field of study.
At least one industry-recognized professional security designation is required: CISSP, SSCP, CISM, CRISC, GIAC GCIH, or equivalent.
Minimum of 5 years of dedicated experience managing Security Operations.
Deep understanding of industry security standards, including NIST CSF, ISO27001, and PCI DSS.
Proven track record deploying and operating core security capabilities, including SIEM, Endpoint Protection, Endpoint Detection and Response (EDR), and vulnerability management platforms.
Solid, hands-on experience handling complex cybersecurity incidents and breach management protocols.
Strong experience implementing and managing threat intelligence tools and data feeds.
Robust understanding of cybersecurity technologies such as firewalls, intrusion detection/protection systems (IDS/IPS), email security, web security, DDoS prevention, wireless security, Identity & Access Management (IAM) systems, 2FA, certificate/key management, and HSM.
Exceptional communication skills with a proven ability to articulate complex security concepts to stakeholders at all levels of the organization.

Nice To Haves

GIAC (GCIA, GPEN, GWAPT, GSEC, etc.), OPST, CEH, or OSCP.
Familiarity with penetration testing tools and techniques, including red team and blue team practices.
Experience managing cloud security risks within AWS or similar cloud provider architectures, alongside familiarity with G Suite and Splunk

Responsibilities

Lead the implementation, configuration, and operation of information security technologies that are implemented across the TMX Group Limited
Influences internal partners to ensure they build solutions consistent with the organization's planned policies, programs, architectural recommendations, and information security standards
Support the ongoing security control processes within the enterprise which includes security technologies, networks, information systems, and endpoints.
Analyzes threat and vulnerability feeds and analyzes data for applicability to TMX’s environment including the identification and resolution of false positive findings in assessment results, as well as perform compensating controls analysis and validate the efficacy of existing controls
Understanding of threat models, impact levels, and the different approaches and methodologies i.e. black/grey/white box testing
Lead investigations of potential security incidents using forensically sound methods and techniques
Develop and implement information security operations metrics, measurement criteria and reporting to ensure compliance and continuous improvement
Perform operational risk analysis of different solution options and propose a security solution for the business problem that balances potential loss with the cost of the solution