Senior Manager, Information Security Defense and Operation

Job Details

Vacancy Type: Full-time Permanent

Salary/HourlyRange: $142,987 - $157,285

Work Details (Days/Hours): Monday – Friday 36.25 hours per week

Hybrid Eligible: Yes

Affiliation: Non-Union: Management

Divisionand Department: Information and Technology Services (ITS)

Location: 729 Petrolia Road, Toronto

Number of Vacancies: 1

Existing/New Job: Existing

Grade: 09

Vacancy Status: Existing

Candidate List or Eligibility List: Candidate List

What we offer In addition to a competitive salary and a rewarding career where you can truly make a difference, we offer a comprehensive package that meets the various needs of our diverse employees, including:

Ability to participate in inclusive employee-led networks to educate, inspire, amplify voices, build relationships and provide development opportunities;

Minimum four (4) weeks of paid annual vacation days, increasing with years of service;

Four (4) paid personal days;

Defined benefit pension plan with OMERS, includes 100-per-cent employer matching;

Health, dental, and vision benefits,including a health spending account available upon your start date;

Employee and family assistance program;

Maternity and parental leave top up (93% of base salary);

Training and development programs including tuition reimbursement of $1500 per calendar year.

Fitness membership discount;

This job offers the opportunity to work from home as part of a hybrid work arrangement. This arrangement will allow you to work some days at a TCHC work location and the rest of the time from home. The amount of time required to work at a TCHC work location is flexible, while considering operational and service delivery requirements.

Make a difference Are you passionate about Cyber Security and Information Risk Management and interested in having a positive impact on your local community? If so, the Senior Manager,Information Security Defense and Operationposition at Toronto Community Housing may be for you

The Senior Manager of Information Security Defense and Operation is accountable for ensuring all aspects of the security of “TCH’s” IT systems and assets. Activities in this strategic role include conducting risk and security assessments, incident response and security operations, and developing the necessary monitoring and compliance systems, policies, procedures and security controls. This position is accountable for the protection of information and information systems from unauthorized access, inappropriate use, disclosure, disruption, modification, or destruction to ensure confidentiality, integrity, and availability.

What you’ll do Information Security Defense Management Framework and Strategy for TCHC:

Accountable for the operationalization and management of the information security defense controls and incident response including IT and OT Security controls including but not limited to detection, recovery, protection, and identification of potential threats against TCHC enterprise digital assets and operations including and infrastructure and networks. Develop security technology strategies that align with TCHC vision, mission and objectives. Plays a proactive role in development of annual Information Security operational plans.

Provide tactical and strategic recommendations to Senior Management - related to Information Security, Cyber threats and risk management, Cyber disaster recovery and associated Information Management and IT/OT Security controls.

Analyze proposed solution architectures, technology, design and IT development processes to identify potential threats and vulnerabilities, and to recommend options that enhance the security of solutions and business processes.

Proactively provides internal Information Security Operation recommendations on related governance requirements, baselines, standards and best practices. Balance the requirement for Information Security controls with the requirements of the Business and make implementable recommendations balancing risk versus business operations.

Identify, analyze, and recommend options for risk management at appropriate levels within the enterprise and municipalities and associated agencies.

Acts as a subject matter expert and may take on more complex work in developing plans and deliverables, deploying resources, and interacting with key internal partners. Play a mentorship role as a senior subject matter expert in information security domain and provide training and guidance to them wherever needed.

Research and maintain proficiency in tools, techniques, countermeasures and trends in computer and network vulnerabilities, data hiding, encryption and cyber security.

Recommends technology changes in order to mitigate risks or implem