Information Security Manager

Johnston Group Inc.; Winnipeg; Hybrid; CAD 85,000 - 115,000; Full time

Job summary

A leading employee benefit solutions provider is seeking an Information Security Manager in Winnipeg, MB. The successful candidate will oversee security operations, manage policies, and ensure compliance. Ideal candidates will have over 7 years of experience in information security, with strong leadership and technical skills. This role offers a hybrid working model with a focus on fostering a culture of security across the organization.

Benefits

Hybrid working model

Salary based on experience

Supportive work environment

Qualifications

• 7+ years of hands-on experience in information security, including 3+ years in a senior or lead role.
• Proven leadership in securing hybrid environments (on-prem and cloud).
• Deep knowledge of firewalls, VPNs, IDS/IPS, encryption, and endpoint protection.

Responsibilities

• Lead the execution of the company's information security program.
• Oversee daily security operations, including vulnerability management.
• Manage the information security budget and advise on cybersecurity risks.

Skills

Information Security

Incident Response

Identity and Access Management

Microsoft 365 Security

Project Management

Education

Post-secondary degree or diploma in Information Security or Computer Science

Tools

Microsoft Azure

AWS

Nessus

PowerShell

Python

Job description

Johnston Group provides employee benefit solutions to over 30,000 companies, ranging from one employee to thousands across various product lines, including Chambers of Commerce Group Insurance Plan, Canada’s #1 employee benefits plan for small businesses. JG is a platinum member of Canada’s Best Managed Companies and was named one of Manitoba’s Top Employers. We support a positive work atmosphere where we value the diversity in the people we serve and are looking for talent who will contribute to our diverse and inclusive workplace; where individual differences are recognized, appreciated, and respected. JG believes in giving back and contributes significantly to local health, arts, sports, and other community organizations.

This role is responsible for leading the execution of the company’s information security program, ensuring alignment with business objectives, regulatory requirements, and industry best practices. The Information Security Manager will oversee daily security operations, including vulnerability management, incident response, identity and access controls, and cloud security across platforms such as Microsoft 365, Azure, and AWS. This role is also responsible for developing and maintaining disaster recovery and business continuity plans, embedding Zero Trust principles, and supporting secure software development across teams.

Key responsibilities include managing the implementation of security policies and procedures, leading security awareness training programs, and maintaining visibility into the evolving threat landscape. The role tracks key security metrics, advises technical and executive leadership on cybersecurity risks, and manages the information security budget. Mentoring IT staff, ensuring cross-functional collaboration, and aligning security efforts with organizational priorities are also critical aspects of the role. The Information Security Manager plays a central role in fostering a culture of security and resilience, working closely with IT, HR, and business units to embed security into systems, processes, and decision-making throughout the organization.

Hybrid working model based out of our Winnipeg, MB office, with three days in-office per week.

Qualifications:

• Post-secondary degree or diploma in Information Security, Computer Science, or related field
• 7+ years of hands-on experience in information security, including 3+ years in a senior or lead role
• Proven leadership in securing hybrid environments (on-prem and cloud)
• Deep knowledge of firewalls, VPNs, IDS/IPS, encryption, and endpoint protection
• Experience hardening Windows/Linux servers and enterprise endpoints
• Strong background securing Microsoft 365/Azure (e.g., Azure AD, Intune, Conditional Access) and AWS (IAM roles, CloudTrail, security groups)
• Skilled in identity and access management (AD/Azure AD, SSO, SAML/OAuth, MFA, least privilege)
• Experience with vulnerability scanning tools (Nessus, Qualys, Rapid7), and remediation planning
• Incident response expertise including threat containment, log analysis, and root cause investigation
• Applied knowledge of Zero Trust principles and current threat mitigation technologies (e.g., XDR, CASB)
• CISSP strongly preferred; other security certifications are an asset
• Familiar with PIPEDA and frameworks like ISO 27001 or NIST CSF
• Experience in financial services or other data-sensitive sectors preferred
• Project management experience or certifications (e.g., PMP, Agile) an asset
• Familiarity with scripting or coding (PowerShell, Python) and CI/CD pipeline security practices

The successful candidate must be legally eligible to work in Canada. We thank all applicants for their interest. Please note that only those selected for an interview will be contacted.

JG welcomes the opportunity to provide accommodation throughout the selection process. Please contact us to discuss your requirements by email at [e-mail] or by phone at 204-772-9565