Location Address:
100 Queens Quay East, 9th Floor, Toronto
Number of Openings:
1
Pay
$91,606.00 - $170,059.00
Job Posting Description:
Senior Manager,
Cyber Security Operations
Are you looking for an exciting leadership opportunity in cyber security with the LCBO? Then this role may be the next career step for you!
Reporting to the Director, Cybersecurity, your main priority will be to oversee and enhance the strategic operations of the Cybersecurity program, encompassing leadership in incident and problem management, advancing threat intelligence, optimizing security tools, managing proactive threat hunting programs, and refining security reporting and incident response strategies in the event of security breaches.
You will provide leadership for the information security operations team and external partners, focusing on strategic aspects of security operations, procurement, and contracts. Your work will involve critical decision-making responsibilities, long-term planning, and a substantial contribution to our overall security posture. You will help develop team capabilities and aligning cybersecurity operations objectives with the broader business' goals.
About The Role
(40%) - Cyber Security Operations Leadership
- Manage our threat intelligence program to identify threats and ensure deployment of mitigating controls.
- Lead response efforts during security incidents, including containment, eradication, and recovery
- Develop incident response plans and strategies for different types of cyber threats and incidents.
- Conduct post-incident reviews and analysis to identify lessons learned and areas for improvement.
- Evaluate the adequacy of the security controls for our information and technology systems.
- Manage the forensic investigative services function.
- Lead a team of 2-5 internal cybersecurity professionals, and provide indirect leadership to Managed Service Providers and other relevant partners.
- Stay updated on new cyber threats, vulnerabilities, and attack techniques, and adjust security measures accordingly.
- Set clear group and individual goals for the cybersecurity operations team and monitor performance against these goals.
- Foster a culture of collaboration, innovation, and continuous improvement within the team.
(40%) - Partnership and Resource Management
- Keep cyber-related documentation including incident strategies, procedures, and guidelines updated
- Develop and refine cybersecurity metrics, working with the Managed Security Service Provider (MSSP) to define and assure the delivery of actionable information.
- The Sr. Manager acts as the Primary liaison to MSSP, and other 3rd party security vendors.
- Works with 3rd party incident response team as required.
- Participate in the planning and design of enterprise security architecture, including the creation of information security documents/policies under the direction of the Director, Cybersecurity.
- Collaborate on strategy planning, program design, and governance with the Director, Cybersecurity.
- Support the Cybersecurity operations team in budget, contract, and vendor relationship management.
- Assist with the threat risk assessment (TRA) process and set of artifacts.
- Manage the Incident Response Plan (IRP) on a predetermined periodic basis.
- Foster a high-level of corporate cybersecurity awareness including administration of end-user cybersecurity courses and periodic phishing simulations to improve overall enterprise security.
- Manage the creation and distribution of an executive internal security dashboard.
- Perform the deployment, integration and initial configuration of all new cybersecurity solutions and enhancements to existing solutions following standard best operating procedures.
- In partnership with the Director, Cybersecurity develop and implement policies to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation
(20%) – Compliance and Reporting
- Ensure compliance with relevant regulatory requirements, industry standards, and best practices.
- Prepare and present regular reports on the state of cyber security operations, including key metrics, trends, and incidents, to senior management and stakeholders.
- Provides evidence to audit and risk teams as required.
- Work with internal auditors and external assessors during security audits and assessments.
About You
- 5 years’ experience in any combination of cybersecurity or information security, information technology, or IT risk management.
- Experience in incident response
- Familiarity with the MITRE ATT&CK framework
- Previous experience managing any or all the following types of tools: Firewalls, Vulnerability Management, Web Gateway/Proxy, Web Application Firewalls, Secure Code Review, CASB, DLP, Email Gateway, SIEM, AV/EDR/XDR Certificate Management and Security Awareness Training.
- Experience with Payment Card Industry (PCI-DSS) compliance.
- Experience in managing budgets, as cybersecurity initiatives often require significant financial resources.
- Professional certification such as CRISC, CISA, CISM, CISSP
- Understanding of relevant Ontario provincial and Canadian Federal information security and information privacy legislation
There is a world of opportunities at the LCBO…
Join an organization where you can be challenged while achieving your true potential. A place where you can make a positive impact supporting Ontario business and communities. Discover a safe, healthy, diverse, inclusive, and accountable workplace where your wellbeing is our top priority. At the LCBO, your contributions are respected and valued. Be part of our journey as we invest in people and technology to transform an organization. There really is a world of opportunities at the LCBO.
We foster a culture of inclusion and belonging, so everyone feels valued, respected, and heard. The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility of Ontarians with Disabilities Act. If contacted for an interview or employment opportunity, please advise if you require an accommodation.
Please submit your resume via Workday by 11:59pm on the deadline date. We appreciate your interest and advise that only those selected for an interview will be contacted.
Work Hours:
36.25
Union / Non-Union:
Non-Union
Job Posting End Date:
March 31, 2025
The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act.
