IT Portfolio Manager, Information Security

TCHC; Canada; Hybrid; CAD 124,000 - 136,000; Full time

Benefits offered by this job

Vacation days

Personal days

OMERS pension

Health benefits

Employee assistance

Job summary

TCHC is seeking an IT Portfolio Manager, Information Security, to lead planning, governance, and delivery of strategic technology initiatives across ITS. You will coordinate cross-functional teams, manage risks and finances, and report to leadership to ensure alignment with enterprise objectives.

The role requires 7+ years in cybersecurity or IT portfolio management, PMP, and strong governance and executive reporting skills. Hybrid work and competitive benefits are offered.

Qualifications

• University degree in CS/IT/Business Administration or related field.
• PMP certification is required.
• 7+ years in cybersecurity, information security, risk, audit, or IT portfolio management.
• Experience coordinating security assessments and audit remediation.
• Strong experience in executive reporting and governance facilitation.
• Experience with risk management frameworks (NIST CSF, ISO 27001, COBIT, CIS Controls).

Responsibilities

• Develop and maintain integrated portfolio plans, governance structures, roadmaps, milestones, reporting cycles, and delivery plans.
• Coordinate cross-functional initiatives, manage scope, risks, dependencies, and actions through governance processes.
• Lead steering meetings, working groups, and executive updates with concise materials.
• Maintain documentation for initiatives in enterprise repositories and portfolio tools.
• Generate standard and ad hoc reports to support leadership reviews and decision-making.
• Coordinate with technical teams, business owners, and vendors to ensure timelines and deliverables.

Skills

Cybersecurity

Executive reporting

Stakeholder management

Governance facilitation

Vendor management

Education

University degree in CS/IT/Business

PMP certification

Tools

NIST CSF

ISO 27001

COBIT

CIS Controls

Job description

Vacancy Type: Full-time Permanent

Salary/HourlyRange: $123,900 - $136,290

Work Details (Days/Hours): Monday – Friday 36.25 hours per week

Hybrid Eligible: Yes

Affiliation: Non-Union: Management

Divisionand Department: ITS – Information and Technology Services

Location: 729 Petrolia Road, Toronto

Number of Vacancies: 1

Existing/New Job: New

Grade: 08

Vacancy Status: Existing

Candidate List or Eligibility List: Candidate List

What we offer

In addition to a competitive salary and a rewarding career where you can truly make a difference, we offer a comprehensive package that meets the various needs of our diverse employees, including:

• Ability to participate in inclusive employee-led networks to educate, inspire, amplify voices, build relationships and provide development opportunities;
• Minimum four (4) weeks of paid annual vacation days, increasing with years of service;
• Four (4) paid personal days;
• Defined benefit pension plan with OMERS, includes 100-per-cent employer matching;
• Health and dental benefits, including a health spending account available upon your start date;
• Employee and family assistance program;
• Maternity and parental leave top up (93% of base salary);
• Training and development programs including tuition reimbursement of $1500 per calendar year.
• Fitness membership discount;

This job offers the opportunity to work from home as part of a hybrid work arrangement. This arrangement will allow you to work some days at a TCHC work location and the rest of the time from home. The amount of time required to work at a TCHC work location is flexible, while considering operational and service delivery requirements.

Make a difference

The IT Portfolio Manager, Information Security, is responsible for leading the planning, coordination, governance support, and delivery of strategic technology and business initiatives across TCHC.

The incumbent leads and coordinates a portfolio of assigned initiatives spanning portfolio delivery, operational enablement, stakeholder coordination, process improvement, vendor engagement, reporting, and the implementation of enterprise capabilities, standards, and workplans.

The role provides integrated portfolio leadership across business and technical stakeholders, ensuring assigned initiatives are prioritized, governed, tracked, and delivered in alignment with TCHC's enterprise objectives, approved plans, organizational priorities, and reporting requirements.

This role is critical to translating strategic priorities into structured delivery plans, strengthening portfolio governance and reporting, and enabling collaboration across ITS, business divisions, external partners, and vendors. The Portfolio Manager works closely with leadership to provide visibility into portfolio health, risks, dependencies, financial performance, and executive reporting needs.

What you’ll do

Portfolio Governance and Delivery:

• Develop and maintain integrated Portfolio plans, governance structures, roadmaps, milestones, reporting cycles, and delivery plans for assigned initiatives.
• Coordinate cross-functional initiatives by managing scope, dependencies, risks, issues, decisions, and action items through structured governance and escalation processes.
• Ensure portfolio artifacts are current, complete, and aligned with TCHC policies, enterprise standards, and approved delivery methodologies.
• Lead steering meetings, working groups, and executive updates by preparing concise decision materials, status summaries, and escalation items.
• Maintain complete documentation for assigned initiatives in approved enterprise repositories and portfolio tracking tools.

Metrics, Reporting, and Portfolio Operations:

• Develop and maintain portfolio dashboards, metrics, scorecards, and reporting packages for leadership, governance forums, business stakeholders, and project sponsors.
• Establish consistent methods for tracking milestones, commitments, deliverables, risks, issues, decisions, dependencies, and portfolio performance indicators.
• Partners with technical teams, business owners, and service owners to collect data, validate status, and convert operational information into clear executive-level insights.
• Support the administration and optimization of tools used for portfolio tracking, evidence management, reporting, workflow coordination, and documentation.
• Generate standard and ad hoc reports to support strategic planning, operational reviews, audits, and executive decision-making.

Stakeholder Engagement and Communications:

• Build effective working relationships with ITS leaders, business owners, service owners, enabling functions, procurement, finance, external partners, and other stakeholders involved in assigned initiatives.
• Prepare executive briefings, committee materials, communication updates, and stakeholder materials that clearly communicate progress, risks, decisions, dependencies, and required actions.
• Coordinate or support communications, training, adoption, and change management activities in partnership with business units and enabling functions.
• Facilitate workshops, planning sessions, lessons learned reviews, working groups, and stakeholder meetings related to initiative delivery, change adoption, and continuous improvement

Standards, Process, and Continuous Improvement:

• Contribute to the development, review, and maintenance of portfolio standards, templates, procedures, delivery practices, and governance processes.
• Identify opportunities to improve the maturity, efficiency, and consistency of portfolio delivery through better processes, templates, workflows, tools, and reporting approaches.
• Promote adoption of consistent governance, documentation, tracking, and delivery practices across assigned initiatives.
• Support reviews, assessments, and leadership oversight by organizing documentation, tracking action plans, and strengthening information management discipline across the portfolio.

Financial, Vendor, and Investment Management:

• Lead financial management for assigned portfolios and initiatives, including stewardship of capital and operating funding, development of in-year and multi-year financial plans, ongoing reforecasting, variance analysis, and complete, accurate, and timely financial reporting in accordance with TCHC financial policies and controls.
• Coordinate with Finance, Procurement, Legal, and ITS leadership to develop business cases, maintain budget assumptions, adjust funding plans as priorities evolve, and ensure portfolio investments, contracts, statements of work, and renewals remain aligned to approved plans and organizational objectives.
• Monitor third-party deliverables, milestone payments, commitments, and spend against plan; validate financial information for accuracy and completeness; and support monthly, quarterly, in-year, and multi-year reporting, forecasting, and budget review activities.
• Identify and escalation financial, contractual, or delivery risks affecting approved priorities and support mitigation planning.
• Initiative Leadership (as assigned)
• Lead or coordinate assigned enterprise initiatives, improvement portfolios, operational workstreams, implementation projects, readiness activities, reporting enhancements, or change adoption efforts.
• Coordinate work across internal technical teams, business units, external consultants, and security vendors to ensure timelines, dependencies, risks, and deliverables are managed effectively.
• Ensure assigned initiatives maintain accurate schedule, risk, issue, action, decision, dependency, and financial records to support leadership oversight and transparent reporting.
• Support organizational change, communications, training, and adoption activities associated with new processes, tools, capabilities, and portfolio requirements.
• Liaise with external partners and vendors to manage deliverables, commitments, escalations, and integration requirements within assigned portfolio scope.

What you’ll need

• University degree in Computer Science, Information Technology, Business Administration, Public Administration, Project Management, or related discipline. An equivalent combination of education and experience may be considered.
• PMP is required.
• Minimum 7 years of progressive experience in cybersecurity, information security, technology risk, audit, compliance, or IT portfolio/project management, with at least 3 years leading cross-functional security or risk-related initiatives.
• Experience coordinating security assessments, audit remediation, policy and standards work, risk registers, control improvement plans, or security-related transformation initiatives.
• Strong experience in executive reporting, stakeholder management, issue escalation, and governance facilitation across technical and non-technical audiences.
• Experience with information security frameworks and practices such as NIST CSF, ISO 27001, COBIT, CIS Controls, privacy requirements, vulnerability management, identity and access management, security operations, or incident response coordination.
• PfMP, PgMP, COBIT, NIST are preferred