Information Security Operations Manager

Love Where You Work; Headquarters; On-site; CAD 75,000 - 95,000; Full time

Job summary

A cybersecurity-focused organization based in Canada, British Columbia, is seeking a talented cybersecurity professional to implement and manage operational controls. The ideal candidate will oversee identity and access management, vulnerability management, and ensure compliance with security policies. Key responsibilities include monitoring systems, participating in incident response, and collaborating with various teams to enhance security practices. Required qualifications include a degree in Cybersecurity, relevant certifications, and at least three years of experience in the field.

Qualifications

• Minimum three years of experience in cybersecurity operation or related field.
• Hands-on experience with SIEM tools, endpoint protection, and incident response.
• Strong understanding of NIST CSF 2.0 and cybersecurity frameworks.

Responsibilities

• Implement cybersecurity controls, including identity and access management.
• Monitor networks and systems to detect potential security threats.
• Participate in incident response and recovery plans.

Skills

Problem-solving skills

Interpersonal skills

Technical expertise

Communication skills

Collaboration abilities

Critical-thinking skills

Education

Bachelor’s degree in Cybersecurity or related field

Certifications: CISSP, GIAC, Security+, CEH

Tools

SIEM tools

Endpoint protection systems

Intrusion detection/prevention systems

Job description

Responsible for implementing and managing operational cybersecurity controls, including identity and access management, vulnerability management, and secure configurations. Accountable for maintaining secure configurations, enforcing least privilege, and ensuring compliance with security policies and frameworks. Collaborates with governance, architecture, and other teams for policy alignment and operational feasibility. Consulted on risk management, third‑party coordination, and strategic security initiatives.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

• Implement and manage cybersecurity controls, including identity and access management, vulnerability management, and secure configurations.
• Assist with monitoring networks, systems, and user activity to detect and respond to potential cybersecurity threats.
• Participate in incident response and recovery plans, ensuring timely containment, mitigation, and communication.
• Perform vulnerability scanning, patch management, and remediation activities.
• Maintain configuration and change management processes to ensure compliance with security standards.
• Manage access controls, remote access, and enforce multi‑factor authentication.
• Design and validate controls for data at rest and in transit, implement integrity checks, and enforce secure data disposal.
• Collaborate with governance, security architecture, and internal/external partners to align operations with organizational risk strategy.
• Continuously improve detection, protection, and response processes to address evolving threats.
• Ensure compliance with regulatory requirements, maintain audit logs, and provide security reporting to leadership.
• Works a regular and predictable schedule.

PERFORMANCE MEASUREMENTS

• Timely remediation of identified vulnerabilities based on severity.
• Audit results showing compliance with internal policies, regulatory requirements, and frameworks.
• Percentage of changes implemented following approved security and configuration management processes.
• Positive feedback from governance, architecture, and incident response teams on coordination and information sharing.
• Implementation of process enhancements and adoption of new security technologies or practices.
• Timely and accurate submission of security metrics, incident reports, and compliance documentation.

QUALIFICATIONS

EDUCATION / CERTIFICATION: Bachelor’s degree in Cybersecurity or related field or equivalent experience.

Certifications: CISSP, GIAC, Security+, CEH.

REQUIRED KNOWLEDGE: Knowledge of NIST CSF 2.0 or other cybersecurity frameworks.

Understanding of network security, identity and access management, vulnerability management, and SEIM and incident response processes.

Understanding of financial institution risk and operations.

Familiarity with regulatory and compliance requirements.

EXPERIENCE REQUIRED

Minimum three years of experience in cybersecurity operation, penetration testing, or a related field.

Hands‑on experience with SIEM tools, endpoint protection, and intrusion detection/prevention systems.

Proven track record in incident response and threat analysis.

Working knowledge of the framework policy and regulatory environment of information security, especially in financial services.

A demonstrated ability to work collaboratively with a broad range of constituencies essential.

SKILLS AND ABILITIES

Strong problem‑solving and critical‑thinking skills.

Good interpersonal and supervisory skills.

Solid technical expertise skills.

Excellent communication and collaboration abilities for cross‑functional coordination.

Ability to manage multiple priorities in a fast‑paced environment.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.