[our Client] is a leading investment & property management firm, headquartered in Toronto as one of Canada's largest multi-residential asset managers with over 20,000 rental apartments with an asset value of more than $5 Billion.

MANAGER, INFORMATION SECURITY

POSITION SUMMARY

We are looking for a dynamic, hands-on Manager to spearhead the compliance and information-security practices. In this role, you will partner with various groups across our organization to build, optimize, and maintain a highly available secure infrastructure.

An acute focus of this role will center on DNS, email abuse, network and application security that will support all services. This is inclusive of vendor management, automation, and monitoring infrastructure security.

RESPONSIBILITIES

Maintain and ensure Windows servers in MS Azure environment is high availability and meeting standard security practices.
Manage and maintain VMWare farm.
Implement disaster recovery plans for operating systems, databases, networks, servers, and software applications.
Work with 3rd party security service providers to:
perform regular threat hunting across all environments to identify unknown threats, identify false positives and ensure threats are mitigated
respond to alerts from unusual M365/Microsoft Azure logins
perform external and internal scanning to ensure there are no potential vulnerabilities in open ports and system OS
in case of a security incident, perform incident response investigations, containment and root cause analysis activities across multiple platforms and environments
Perform regular or needed patching to mitigate known system/software vulnerabilities.
Maintain Firewall and SSL VPN appliances and make necessary adjustments to meet business needs.
Work with users and management teams to ensure threat, risk and impacts are identified and mitigated with successful and realistic security measures.
Assess need for any significant system reconfigurations and execute them if required.
Conduct research on emerging products, services, protocols, and standards in support of systems software procurement and development efforts.
Maintain and revise security related policies, guidelines, processes, procedures and standards.
Ensure that user activities meet corporate security needs and that they are compliant with existing policies, standards, procedures and technologies.
Operate various information security office practices including, but not limited to, education and awareness, vulnerability management, security auditing, and reporting.
Performs related duties as assigned.

REQUIRED SKILL AND EXPERIENCE

Degree in business administration or a technology-related field required.
Minimum of five years of experience in a combination of risk management, information security and IT jobs.
Thorough understanding of different network and security architectures and protocols, their strengths, weaknesses and proper use.
Proven experience with breach mitigation and active breach management.
Strong relationship skills, both internally and externally.
Knowledge of working with VPN and SSL VPN appliances such as Palo Alto and Sonicwall.
Experience working and managing VMWare farm, Microsoft Azure environment, and Zero Trust configuration in Active Directory and Group Policy.
Experience in network, application, DNS and cloud security.
Expert in Info Security and Compliance with the ability to identify the smallest of details while also looking at issues from a macro, strategic perspective.
Proficiency in monitoring tools such as SentinelOne and 24/7 SOC and SIEM.
In-depth knowledge in Microsoft 365 products: Excel, VBA, Power Automate.
SharePoint and/or Yardi Voyager experience is an asset.

· Certification in MS Servers and/or in Cyber Security is an asset.

Gradient Inc.

New Jobs

Director of Governance, Risk, and Compliance

Applicaiton Security Engineer

Manager, Information Security