Security Manager enhancing KUBRA's security posture through strategic decision making and collaboration on security processes. Protecting data assets from threats while working closely with technology and business stakeholders.
Responsibilities
Management of Staff & Projects: Lead the implementation and maintenance of Cybersecurity programs and projects.
Security Standards: Develop and implement security operations standards, procedures, and guidelines as needed.
Strategic Planning: Create and update security plans to address evolving threats and risks.
Team Leadership: Lead and manage the Security Operations team, providing guidance, training, and mentorship.
Recruitment: Oversee the recruitment and development of security operations analysts.
Goal Achievement: Lead the team in achieving established goals and departmental objectives.
Performance Management: Accomplish staff results by communicating job expectations; planning, monitoring, and appraising job results; coaching, counseling, and disciplining employees; developing, coordinating, and enforcing systems, policies, procedures, and productivity standards.
Culture: Foster an environment that emphasizes trust, open communication, creative thinking, and cohesive team effort.
Develop and implement security operations standards, procedures, and guidelines as needed
Create and update security plans to address evolving threats and risks.
Assess the operational security risks of third-party tools and integrations within the security stack to support vendor risk management responsibilities.
Manage the 24/7 monitoring of security alerts and incidents.
Develop and implement incident response plans and procedures.
Establish and maintain an incident response plan to address security breaches and emergencies.
Coordinate and lead the response to security incidents, collaborating with relevant stakeholders.
Conduct or oversee investigations into security incidents, violations, or breaches.
Collaborate with law enforcement or external agencies as needed.
Oversee digital forensics investigations to support HR, Legal, and external law enforcement requirements during serious breaches or internal policy violations.
Design, implement, and operate a comprehensive Risk-Based Vulnerability Management Program covering Infrastructure, Applications, and CI/CD Pipelines.
Drive the classification of vulnerabilities based on contextual risk (e.g., exploitability, asset criticality) rather than just CVSS scores, prioritizing remediation efforts effectively.
Establish and lead a Security Champions Program to foster security culture within development and engineering teams, ensuring security advocates are embedded across the organization.
Oversee the deployment and maintenance of security technologies within the SOC, such as SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems, and other relevant tools.
Management of security technologies, such as firewalls, surveillance systems, access control systems, and intrusion detection systems.
Oversee the Identity and Access Management (IAM) and Identity Governance and Administration (IGA) programs, ensuring proper lifecycle management, access reviews, and least-privilege enforcement.
Stay current on the latest cyber threats and vulnerabilities.
Integrate threat intelligence into SOC processes to proactively identify potential risks.
Implement continuous monitoring of network and system activities.
Analyze security alerts and log data to identify patterns and trends.
Prepare and deliver regular reports on Security Operations activities, incident trends, and key performance indicators (KPIs).
Maintain documentation of incidents, responses, and lessons learned.
Ensure compliance with relevant regulations and industry standards such as PCI DSS, NIST, ISO and other frameworks.
Conduct regular tabletop exercises to test and improve incident response capabilities.
Manage the budget for the Security Operations team, ensuring cost-effective use of resources.
Provide input for the acquisition of new tools and technologies.
Define and track key performance metrics to measure the effectiveness of Security operations.
Requirements
8-10+ years of relevant experience in information security
2-3+ years of experience leading security teams
Working knowledge of Identity and Access management, SIEM management, Incident management and vulnerability management concepts
Working knowledge of Information Security best practices and standards such as COBIT, SSAE18, ISO 27000 Series, PCI DSS, SOX etc.
Excellent writing and verbal communication skills, interpersonal and presentation skills and proven ability to influence and communicate effectively with all levels of staff.
Comprehensive knowledge or experience of information security principles, including risk assessment, intrusion detection, Security Incident and Event Management (SIEM) tools, threat and vulnerability management
Detailed knowledge or experience of application and network-based penetration testing tools and methodologies
Experience of incident response and security incident event management solutions, UEBA, EDR etc
Successful track record of effective project coordination, prioritization, collaboration, organization, and timely project delivery
Ability to understand and evaluate risk in relation to IT Security and communicate this to Stakeholders
Experience of working within an information security, cyber security environment or Security Operations Centre
Strong technical background with excellent knowledge of cyber security, computer networks and operating systems including firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, networks and cloud services
Analytical background with the ability to analyze and interpret large and complex data sets and articulate observations, conclusions and recommendations
Good understanding of current legislation and regulations pertaining to IT security.
Benefits
Earn annual performance-based bonuses recognizing your contributions
Enjoy generous benefit coverage with low premiums, plus a Healthcare Spending Account and Wellness Spending Account
Invest in your future with RRSP matching
Take time to recharge with paid vacation and sick days, and enjoy a paid day off for your birthday
Make a difference with two paid volunteer days to support causes you care about
Keep learning with free access to LinkedIn Learning and our education reimbursement program for continued development
Feel appreciated through our employee recognition programs
Support your mental health with a free premium Headspace membership
Stay refreshed with unlimited access to fully stocked beverage stations
Save more with exclusive Perkopolis retail discounts
Corporate Security Operations Lead managing security operations for Carbon60 in a hybrid environment. Involves monitoring, incident response, and security controls across cloud and internal systems.
Product Security Incident Response Manager at Autodesk responsible for external security assessments, penetration testing, and team leadership. Balancing technical work with mentorship to improve security posture.
Senior Security Operations Specialist protecting Relay's digital banking platform from security threats. Implementing advanced threat detection and incident response protocols for optimal business security.
Security Operations Specialist monitoring and responding to incidents for Fluent, Inc. Collaborating across teams to develop and maintain security best practices and compliance frameworks.
Cyber Defender (Senior SOC Analyst) at Ontinue focusing on detection and response in security operations. Collaborating with teams to enhance managed security services using Microsoft tools.
Security Operations Manager at Apollo.io ensuring effective incident detection and response in a remote environment. Leading a high - performing team and improving security processes.
Sr. Google SecOps Engineer dedicated to onboarding and maintaining Sec Ops environments for Optiv clients. Collaborating in a 24x7 Security Operations Center to provide critical services.
Security Operations Analyst at KUBRA ensuring data protection and responding to security incidents. Join a dynamic team focused on continuous improvement in cybersecurity.
Lead incident response team managing critical incidents across IT, eCommerce, store ops & supply chain. Contract - to - permanent role with hybrid work.
SOC Engineer role at Just Eat Takeaway.com involves monitoring and supporting global platform changes. Focus on automation and engineering support in a fast - paced, agile environment.