Manager, Cyber Security and Risk Management

**Requisition number**

SCHII00084

**Job Category**

Support Staff

**Posting Start Date**

Oct 7, 2025

**Posting End Date**

Oct 28, 2025

**Work mode**

Hybrid

**Location**

East Education Office

**Geographic Location**

Scarborough

**Panel Type**

Not Applicable

**Position Type**
- Permanent

**Working at the TDSB**:
**_SCH II-25-2075NE_**:
**Manager, Cyber Security and Risk Management**:
**1 - Permanent Position**:
**Information Technology Services**:
**Schedule II, Level 10**:
**(Non-Union 12 Months)**:
**$131,013 - $157,199**:
**The Toronto District School Board adheres to equitable hiring, employment, and promotion practices.**

**Overall Purpose**:
Reporting to the Senior Manager, IT Operations, the Manager, Cyber Security and Risk Management, will provide strategic support for Cyber Security governance and risk management and manage the architecture, engineering and operational support for the cyber security, threats and vulnerabilities, security analytics, forensic infrastructure and the controls required to address risks. The Manager will coordinate and provide expertise to implement and manage the cyber security infrastructure, incidents, breaches, investigations and the development and implementation of IT related cyber security policies and processes, while working closely with other IT teams to strengthen their defense and security postures and proactively mitigate risks across systems and services

**Summary of Duties**:

- Work with the Senior Manager, IT Operations to develop cyber security strategies, governance frameworks, policies, processes and procedures to address identified risks and organizational requirements.
- Manage the process of analyzing and assessing current and future threat landscape and provide realistic overview of risks and threats faced by TDSB.
- Ensure the risk assessment and recommended controls remain effective as the computing landscape changes with cloud and social computing.
- Identify budget and resource requirements for short and long term goals and objectives.
- Manage and coordinate security incidents, breaches, investigations, risk assessments and audits.
- Facilitate the understanding of evolving risk, threat landscapes, vulnerabilities and the required changes to the controls with the respective service owners and their teams.
- Facilitate the understanding and responding to controls audit and failures.
- Coordinate risk assessment arising out of changes in threat, vulnerability and asset base, including introduction of new systems or services.
- Provide and coordinate security communications, awareness and training to align with user centric and devolved security strategy.
- Consult and support IT and Business architects on threat driven and proactive security measures at architectural, design and implementation stages.
- Consult and support the respective teams to ensure security is factored into selection, contracting, and implementation of new systems.
- Recommend and coordinate implementation of technical controls to manage risks and meet compliance and legislative requirements.
- Research, evaluate, design, test, recommend and plan the implementation of new or updated cyber security hardware or software.
- Manage and coordinate operational components of security incident/breach/investigation management, including detection, response and reporting.
- Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances and variation to residual risks, recommend treatment plans and communicate information about residual risk.
- Communicate intelligence-related concepts and recommendations to senior management and provide status and briefings of threat intelligence operational activities.
- Responsible for management and direction of staff, including planning, staffing, training and performance reviews.
- Provide leadership to motivate staff and facilitate team building, review and recommend hiring of staff.
- Manage, review and monitor department and project budgets, including expenditure review, authorization and analysis of transactions, contract reviews etc.
- Provide guidance and direction to external vendors that provide cyber security functions for compliance with contracted service-level agreements.
- Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and applicable laws and regulations.

**Qualifications**:

- University degree in a related discipline such as Computer/Network Engineering or Computer Science with seven years of progressively responsible experience in IT Security for large complex, multi-site public sector environment, or equivalent combination of education and experience.
- Specialized training and certification from such as Global Information Assurance Certification in the following areas: IT Risk Management, Security Leadership, Information Security, Perimeter Protection, Enterprise Defense, Critica