Manager, Cloud Security

**Position Summary**:
As a Manager, Cloud Security & Advisory Services you will be responsible for the secure / resilient design, and delivery of Microsoft 365 and Azure security solutions through Advisory / Professional Service engagement delivery. In addition, you will oversee the ongoing security and operational maintenance of Difenda managed service infrastructure, including supporting SIEM platforms and cloud services. You will oversee and execute customer onboarding activities, providing an exceptional customer experience through highly automated processes. You will also support the design, implementation and maintenance of key security controls and related technologies within the Difenda environment. Working in close partnership with various cross-functional areas within C3 and external customers, you will ensure that solutions are maintained in accordance with defined service levels. You possess technical and IT security domain expertise and have strong business acumen, helping to ensure that managed services balance customer needs with expedient service delivery. You will be responsible for supporting security operations, including the incident response process as needed.

Note that this is a hybrid role, with both team management and technical delivery responsibilities.

Hours of work are Monday to Friday - 7.5 hours daily or as required. After-hours support will be required.

**Position Responsibilities**:

- Lead and execute the design, implementation, and maintenance of innovative and operationally effective managed service supporting industry leading SIEM platforms and supporting infrastructure
- Lead and execute the design and implementation of Microsoft 365 and Azure security solutions as part of customer advisory / professional service engagements
- Lead managed service customer onboarding processes, ensuring onboarding status visibility and use of automation to enhance customer experience and decrease internal overhead
- Oversee the delivery of Microsoft security workshops in support of ongoing partnership maintenance
- Achieve and maintain related Microsoft security solution certifications
- Maintain service operational procedures and train relevant teams on service delivery tasks
- Act as an escalation contact for non-standards requests and complex incident troubleshooting
- Design, implement and support Difenda’s internal cloud and on-premise systems and infrastructure, ensuring that internal controls are applied and maintained
- Lead Difenda’s vulnerability management program and associated remediation activities to ensure systems are configured in accordance with established policy, best practice guidelines and designated compliance frameworks
- Lead Difenda’s identity and access management program, ensuring that access standards are managed in accordance with established policy, best practice guidelines and designated compliance frameworks
- Design, implement, support and test Difenda’s Disaster Recovery Plan and associated processes
- Support the design, implementation, and maintenance of DevOps services and processes, increasingly enhancing service delivery automation capabilities
- Support the development and measurement of related managed service levels
- Support the maintenance of Difenda’s compliance program, including SOC 2, ISO 27001, and PCI DSS compliance
- Work closely with key stakeholders throughout the development and execution of new projects, backlog items and service requests to ensure that corporate information security objectives, including Secure System Development lifecycle adherence, are maintained
- Support the creation and maintenance of IT Security-related policies, standards, baselines, guidelines and procedures, ensuring alignment with designated security frameworks
- Participate in the testing of the IT Security Incident Response process
- Participate in the annual IT Security Risk Assessment and other ongoing operational processes as needed

**Qualifications**:

- Minimum of 8 years of IT security or related work experience, with 5 years of SIEM platform, infrastructure / cloud services, and cyber security work experience required
- College Diploma or University Degree in Computer Engineering or Computer Science required
- Strong experience in SIEM technologies, with experience with or ability to quickly learn Microsoft Sentinel required
- Experience in Microsoft 365 security technologies, including Defender, Entra / Active Directory, and Purview services preferred
- Experience in securing and managing cloud environments, including Microsoft Azure and Amazon Web Services required
- Exposure to automation development and DevOps practices preferred
- Experience in designing and executing IT Security processes, including Information Protection, Configuration / Vulnerability Management, System Auditing / Logging, and Identity and Access Management
- Experience in management of Vulnerability Assessments and IT Security Audits required
- One or more o