Manager, Information Security

Why FirstOntario?

• Competitive compensation packages
• Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
• Enhanced mental health benefits through SunLife and TELUS Health
• Flex-work environment
• Company-wide Employee Volunteer program (Blue Wave Program)
• Employee and Family Assistance Program

Job Overview

The Manager, Information Security, is responsible for managing the IT security operations centre, which oversees the daily security operations of FirstOntario Credit Union. This role is responsible for the implementation of new security solutions, participation in the creation and maintenance of policies, standards, baselines, guidelines and procedures as well as supporting and assisting with vulnerability audits and assessments. The Manager, Information Security is expected to interface with peers in the Systems and Network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation.

Role

• Create and maintain enterprise security architecture, under the direction of the VP, Chief Information Security Officer
• Create and maintain the enterprise security awareness training program to ensure consistently high levels of compliance with enterprise security documents.
• Create and maintain the enterprise security documents (policies, standards, baselines, guidelines and procedures).
• Assist in the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan.
• Maintain up-to-date detailed knowledge of the Information security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.Report on Governance, compliance, legislation, and regulatory risks and provide input into remedial effort
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Coordinate the deployment, integration and configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Actively manage the Information Security Operations team to ensure monitoring of all in-place security solutions for efficient and appropriate operations.
• Responsible for management of the IT Security Operations Team, including but not limited to staff reviews, coaching, mentoring, defining expectations, providing regular feedback, managing remediation plans as required, and hiring
• Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.
• Take the lead investigating problematic activity.
• Provide leadership in the design and execution of vulnerability assessments, penetration tests and security audits.
• Provide on-call escalation support for IT security staff for all in-place security solutions.

Required Skills

• College diploma or university degree in the field of computer science and at least five to seven (5-7) years of experience in a IT Security related role.
• Two to three (2-3) years of experience in a leadership role.
• One or more of the following certifications is considered an asset: CompTIA Security+, GIAC Information Security Professional (GISP), Microsoft Certified Systems Administrator: Security, CAP, CISA, CCFP, CCSP, CISSP, CISM, Associate of (ISC)2
• Experience with SEIM, Firewallsdata classification
• Experience with endpoint detection and response (EDR), CASB, IDPS and other security related concepts.
• Demonstrated knowledge of security frameworks or standards such as CIS Top 20, NIST and ISO 27001.
• Experience with Varonis DatAdvantage and DatAlert is an asset.
• Knowledge of VMware vSphere, vCenter and ESXI is an asset.
• Working technical knowledge of system vulnerability scanning and remediation.
• Strong understanding of IP, TCP/IP, and other network administration protocols.
• Strong understanding of Windows and Linux operating systems.
• Familiarity with core banking system related security.
• Proven analytical and problem-solving abilities with a strong attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to conduct research into IT security issues and products as required.
• Ability to present ideas in business-friendly and user-friendly language.
• Highly self motivated and directed.
• Team-oriented and skilled in working within a collaborative environment.
• Lifting and transporting of objects (up to INSERT # lbs), such as computers and peripherals.
• Have on-call availability and a willingness to travel on occasion as required.

This posting is for an existing vacancy.

Salary Range: $93,677 to $128,806 annually.

Compensation for this role reflects a combination of skills, experience, and internal equity. Those whose experience more closely aligns the role's requirements may be placed higher within the salary range. You will learn more about FirstOntario Credit Union's total rewards package during the interview process.

Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know.