Manager, IT Security

Ready to help lead a dynamic team that is reshaping health care shared services and how they are delivered?

Mohawk Medbuy Corporation (MMC) is a national not for profit shared service organization trusted by Canadian hospitals and other health care providers to deliver exceptional value, innovation, and support in raising the standard of patient care. Working as an extension of our Member organizations, we provide end-to-end supply chain, clinical and back-office services driven by collaboration and operational excellence. Through our clinical expertise and strategic data analysis, we source and deliver insights and solutions that address the challenges faced by health care providers - yielding efficiencies and cost savings that allow them to invest in and focus on improving the patient experience across the continuum of care.

MMC is currently recruiting for a **Full-Time Manager, IT Security** to support our IT division.

**Job Summary**:
The IT Security Manager will be responsible for managing operations of the enterprise’s security solutions and identification, investigation, and resolution of security breaches detected by those systems. This role will be responsible for establishing an enterprise security stance through policy, architecture, and training processes. Activities will include the selection of appropriate security solutions, and oversight of any vulnerability audits and assessments. The IT Security Manager will interface with peers in service desk, infrastructure, and operations as well as with the leaders of the business units.

This role is a key part of our incident response and business continuity teams and may have to work off hours in the event of a critical service disruption or security incident.

**Key Responsibilities Include**:

- In collaboration with internal and external stakeholders, develop and sustain the enterprise’s security architecture design.
- Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
- Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
- Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise.
- Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers, and other systems and in databases and other data repositories.
- Lead all investigations into problematic activity and provide on-going communication with senior management.
- Supervise the design and execution of vulnerability assessments, penetration tests and security audits.
- Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.
- Engage in ongoing communications with peers in the other IT groups as well as the various business groups to ensure enterprise wide understanding of security goals, to solicit feedback and to foster co-operation.
- Maintain up-to-date baselines for the secure configuration and operations of all devices.
- Act as the liaison between MMC internal teams and external vendors to ensure compliance with contracts

**Qualifications**:

- College diploma or university degree in the field of computer science and/or 5 years equivalent work experience.
- One or more of the following certifications (or related):

- (ISC)2 certifications such as: SCCP, CISSP, ISSAP, Associate of (ISC)2
- GIAC certifications such as GSEC, GICSP, GCIH, GCFA, GCIA
- ISACA Certified Information Security Manager
- Microsoft security certification such as Azure Security Engineer Associate
- CompTIA Security+
- Extensive experience with O365, Azure, Active Directory
- Extensive knowledge of computer hardware, including Windows-based PC’s, IP phones, mobile devices, and peripherals.
- Experience with ITSM software, preferably Zoho Manage Engine
- Experience with Microsoft desktop and server operating systems
- Familiarity with the advanced principles of ITIL
- Demonstrated knowledge in all facets of MS Office and electronic communication
- Proven track record of developing and providing SLAs and Service Desk deliverables.
- Experience in enterprise security document creation and security architecture design.
- Experience in developing Business Continuity Plans and Disaster Recovery Plans.
- Experience developing, leading and coordinating incident response activities
- Working technical knowledge of IDS/IPS, common antivirus, managed endpoint detection and response (MEDR) solutions.

**Personal Attributes**
- Proven analytical and problem-solving abilities.
- Keen attention to detail.
- Ability to effectively prioritize and execute tasks in a high-pressure environment.
- Go