Engineering Manager leading security efforts at EvenUp. Define security strategy, manage teams, and ensure compliance across products.
Responsibilities
Security Strategy & Team Leadership - Define EvenUp's security roadmap and lead a growing Security & IT team. Serve as the internal authority on risk and security posture, advising engineering, legal, and the executive team. Hire and develop talent as the function scales.
Compliance (SOC 2 & HIPAA) - Own our SOC 2 Type II and HIPAA programs end-to-end: gap assessments, control design, audit readiness, and ongoing compliance. Maintain policies and procedures, manage auditor relationships, and stay ahead of evolving regulatory requirements.
Product Security - Partner with Engineering to embed security into the SDLC through threat modeling, secure design reviews, and vulnerability management (SAST, DAST, pen testing). Champion a shift-left, security-by-design culture across the product org.
Corporate IT & Infrastructure Security - Own corporate IT systems (MDM, SSO/IdP, endpoint security, IAM) and cloud security posture. Evaluate and deploy security tooling. Enforce least-privilege and zero-trust principles across the organization.
Vendor & Third-Party Risk Management - Lead the vendor risk program, including security assessments, contract reviews (BAAs, DPAs), and ongoing monitoring of third-party risk exposure.
Incident Response & Risk Management - Maintain the risk register, run periodic risk assessments, and own the incident response plan. Lead tabletops, manage live incidents, and coordinate breach notification in partnership with legal.
Security Culture & Enablement - Drive security awareness across the company through training, documentation, and internal evangelism. Coach engineers and business teams on best practices and build a security-first culture from the inside out.
Mentorship & Growth: Recruit, mentor, and develop engineers through regular feedback, coaching, and career development. Support performance management, growth planning, and team health.
Requirements
Proven security leadership at a startup or high-growth company - you've built or scaled a security function before, not just maintained one.
Deep compliance experience - hands-on ownership of SOC 2 Type II and HIPAA programs, from control design through audit. Familiarity with emerging requirements (state privacy laws, AI governance) is a plus.
Technical depth across the stack - strong working knowledge of cloud security (AWS/GCP/Azure), IAM, endpoint security, and secure SDLC practices. You can go deep with engineers, not just speak to them.
Product security chops - experience with vulnerability management, threat modeling, and integrating security into fast-moving engineering teams without becoming a bottleneck.
People leadership - track record of managing and growing small technical teams, with the ability to hire well and develop talent as the function scales.
Vendor & third-party risk know-how - experience running a vendor risk program, including security reviews, BAAs/DPAs, and ongoing third-party monitoring in a data-sensitive environment.
Builder mentality - you're equally comfortable writing a policy, configuring a SIEM, presenting to the exec team, and jumping into an incident at 10 pm. You default to doing before delegating.
Benefits
Choice of medical, dental, and vision insurance plans for you and your family.
Additional insurance coverage options for life, accident, or critical illness.
Flexible paid time off, sick leave, short-term and long-term disability.
10 US observed holidays, and Canadian statutory holidays by province.
A home office stipend.
401(k) for US-based employees and RRSP for Canada-based employees.
Engineering Manager securing NVIDIA's DGX Cloud AI infrastructure and massive GPU fleet. Building teams, security platforms, and scalable controls for cloud - scale AI operations.
Transportation Engineering Manager leading WATT’s Vancouver Island transportation practice. Guiding complex projects, client growth, technical quality, and team development.
IT Engineering Manager leading TJX Canada’s finance technology modernization across 60+ applications. Coaching engineers and driving DevSecOps, agile delivery, ERP, and cloud - based solutions.
Senior Engineering Manager scaling Mozilla’s open - source Thunderbolt AI product. Leading engineering execution, people management, and production readiness for enterprise adoption.
Engineering Manager leading Accounts engineering at Relay, a digital banking platform for small businesses. Scaling teams, delivery processes, and intelligent multi - account experiences.
Engineering Manager leading BotCity’s global Platform Engineering team. Scaling Java B2B SaaS reliability, observability, security, and delivery practices.
Senior Engineering Manager leading platform infrastructure, SRE, and DevOps at Shakepay, a Canadian bitcoin financial - services company. Guiding teams, reliability, and AI - powered engineering tooling.
🚨 We’re Hiring: Manufacturing Operations Manager 📍 Vaughan / North York, ON | On - site What we’re looking for: - 3+ years of operations/supervisory leadership -
About the job SOTI is committed to providing its employees with endless possibilities; learning new things, working with the latest technologies and making a di