Senior Manager leading BDO Canada’s cybersecurity monitoring, threat detection, incident response, and security team. Driving operational risk reduction across enterprise and cloud environments.
About the role
- Cloud-oriented security resource responsible for implementing security controls in Microsoft 365 and Azure environments. Collaborating with IT, compliance and product teams for incident management and continuous improvement.
Responsibilities
- Configure, administer, and maintain Microsoft 365 and Entra ID security controls
- Manage security policies (Conditional Access, MFA, RBAC, Privileged Identity Management)
- Implement and maintain DLP, sensitivity labels and data classification using Microsoft Purview
- Administer Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity and Defender for Cloud
- Monitor and improve security posture using Secure Score and Microsoft recommendations
- Apply governance best practices for Copilot for Microsoft 365, including data access and information protection
- Help secure Azure and AWS environments
- Manage security controls for AWS and Azure
- Contribute to the evolution of cloud security architecture
- Monitor security events and analyze alerts
- Actively participate in security incident management, from analysis through remediation
- Perform vulnerability assessments and track patch remediation
- Contribute to risk analyses and incident response exercises
- Participate in incident post-mortems and continuous improvement of controls
- Take an active role in drafting and maintaining policies, procedures, standards, and audit evidence
- Document security configurations, runbooks, and operational playbooks
- Collaborate with internal and external auditors
- Contribute to vendor assessments and regulatory requirements, including Quebec’s Loi 25
Requirements
- Degree in Computer Science, Cybersecurity or equivalent experience
- 5+ years of experience in cybersecurity or cloud security
- Hands-on, in-depth experience with Microsoft 365, Entra ID and Azure
- Strong proficiency with M365 security controls, DLP, data classification, and governance
- Strong understanding of Azure and AWS cloud environments
- Familiarity with AWS cloud environments is an asset
- Knowledge of security frameworks such as ISO 27001, SOC 2 or NIST
- Ability to produce clear, structured, and actionable documentation for audits
- Highly autonomous, proactive, and pragmatic approach
- Comfortable working in an SME/SMB environment
- Bilingual in French and English
- Valid Canadian work permit
Benefits
- Employer-paid comprehensive health coverage
- Registered Retirement Savings Plan (RRSP) with employer matching to help you invest in your future
- Flexible work arrangements: options for remote, hybrid and on-site work at our Gatineau and Montreal offices
- Generous paid time off
- A culture focused on developing internal talent, providing learning and growth opportunities within a growing organization
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Manager leading BDO Canada's security operations, threat detection, and incident response. Managing cyber risk, security capabilities, and a high - performing cybersecurity team.
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI - enabled security capabilities for fintech payments.
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI - enabled workflows, and executive risk reporting.
SOC Detection & Response Specialist developing SIEM detections, SOAR playbooks, and incident - response workflows. Supporting Sopra Steria’s consulting, digital services, and software - development clients.
Staff Security Operations Specialist building AI - powered threat detection and response for ShareGate, a Microsoft 365 migration and governance platform. Automating triage, investigations and developer remediation workflows.
Staff Security Operations Specialist automating threat detection and incident response across Workleap and ShareGate. Building trusted security agents and detection pipelines for a workplace software company.
Spécialiste Staff en opérations de sécurité chez Workleap, éditeur de logiciels de travail et de migration Microsoft 365. Automatisation de la détection, des enquêtes et de la réponse par des agents IA.
Security Engineer building LiveKit’s vulnerability management and security operations program. Securing infrastructure for the company’s voice, video, and AI application platform.
Junior SOC Analyst monitoring and responding to security incidents for Long View, a North American IT services provider. Supporting SIEM operations, cloud security, incident escalation, and 24x7 coverage.