Lead, Cyber Resilience & Offensive Security

Kinvie; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive discretionary bonus

RRSP matching program

Medical, dental, vision, life and long

Employee Share Purchase Plan

Maternity/Parental top-up

Generous vacation and personal days

Virtual events and career development

Job summary

EQ Bank is seeking a Senior Offensive Security professional to design and execute cyber resilience testing, including red team exercises and threat simulations. You will shape security controls, collaborate with multiple teams, and drive continuous improvement of the cyber program.

The role requires 7+ years in IT with 3–5 years in offensive security, solid MITRE framework experience, and relevant certifications. Hybrid work in Toronto with an emphasis on cross-functional delivery and governance.

Qualifications

• 7+ years of technical IT experience with 3–5 years in offensive security roles.
• Strong knowledge of cyber controls testing frameworks such as MITRE.
• Certifications such as OSCP, OSCE, GPEN, GXPN, CEH, CISSP, CISM are highly preferred.

Responsibilities

• Design and execute the bank’s Cyber Resilience Testing program (red team exercises, cyber threat simulations).
• Provide input to testing of EQ Bank’s Enterprise Cyber Security Controls and roadmap prioritization activities.
• Drive cross-functional collaboration to achieve program objectives.
• Maintain standards, procedures and guidelines for domains under purview.
• Develop and manage measures to ensure effective monitoring, control, adequacy and compliance.
• Develop and managing means of measured performance of control processes and technologies.
• Provide technical guidance for team and stakeholders.

Skills

Offensive security

MITRE framework

Security automation

Team leadership

Cross-functional collaboration

Analytical skills

OSCP

OSCE

GPEN

GXPN

CEH

CISSP

CISM

Education

College diploma or university degree in computer science

Tools

Automation tooling

Security tooling & scripting

Job description

Join a Challenger

At EQ, we're remaking banking so every Canadian gets ahead, every day. Serving nearly 4 million Canadians from coast to coast, we offer a wide variety of financial services from banking and lending, to trust and credit union solutions.

We've been at this since 1970, challenging the conventions of traditional banking with smarter, faster, and more connected financial experiences.

What's kept us moving?

The people behind it all: challengers who ask better questions, push back on old assumptions, and look for a better way forward.

If you're driven to help reshape how banking works for Canadians and the businesses that power our economy, this could be your next big opportunity.

We can’t wait to get to know you!

The Work

This roleisresponsible for theDesigning,planning andexecutingthebank’s CyberResilience Testingand offensive securityprogram, commonly referred to as “red team exercises”.This roledevelops and manages processes thatidentifycontinuous red team and infrastructure penetration test objectives through the course of the yearwhile also planning execution of threat simulation activities.This role facilitates the communication and presentation oftechnicalcyber controleffectivenesstokey stakeholders.

The Core Responsibilities!

• Design and executethe bank’s Cyber Resilience Testing programe.g.Red team exercises, cyber threat simulations.
• Provides input to theeffectivenesstestingofEQBank’s Enterprise Cyber Security Controlsand cyber roadmap prioritization activities.
• Drive cross-functional collaboration to achieve objectives of the programsin purview.
• Responsible for maintaining the standards,proceduresand guidelines for domains under purview.
• Develop and managemeasures to ensure effective monitoringcontroladequacyand compliance for areasunder purview
• Developing andManagingmeans of measuredperformance of control processes and technologiesfor areas under purview.
• Provide technical guidance for teamand subject matter advise to stakeholders.

Let’s Talk About You!

• A college diploma or university degreein computer science (or related course)or Industry recognized certifications (e.g.CISSP)
• Minimum of7years oftechnical ITexperiencewith at least 3-5 years specifically focused on offensive securityroles.
• Strong knowledge ofcyber controls testing frameworks such as MITRE Framework
• One or more of the following certifications are highly preferred: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert), GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CEH (Certified Ethical Hacker), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager)
• Strongengineeringand automation experience,priorhands-onSecurity automationexperienceis desired.

Non-Technical Skills

• Ability to build and maintain strong working relationships with cross-functional teams and stakeholders. Collaboration is key to integrating offensive security insights across the organization.
• Strong analytical and problem-solving skills with the ability to think critically and strategically;this roleneedsto analyze reports to identify patterns and assessweaknesses.
• People and team managementabilities.
• Technical roadmap development and execution.
• Ownership & Accountability

What we offer [For full-time permanent roles]

Competitive discretionary bonus

Market leading RRSP match program

Medical, dental, vision, life, and disability benefits

Employee Share Purchase Plan

Maternity/Parental top-up while you care for your little one

Generous vacation policy and personal days

Virtual events to connect with your fellow colleagues

Professional development and comprehensive Career Development program

A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

The incumbent will be working hybrid and in office time will be spent working from EQ Bank’s additional office space located at2200-25 Ontario Street, Toronto, ON.

Equity, Diversity & Inclusion

EQ is committed to building an inclusive, accessible environment where every employee feels valued, respected, and supported. We believe our organization is stronger — and our people thrive — when we honour and celebrate diverse experiences, identities, and perspectives. We’re equally committed to supporting your growth, both professionally and personally.

We provide a barrier‑free recruitment process and work environment. If you require accommodations at any stage, we will work with you to ensure you can bring your best self to the process and beyond.

As part of our recruitment process, EQ uses AI to help screen, assess, and/or select applicants for this position. All AI-enabled outputs are reviewed and validated by our talent team. All candidates considered for hire must successfully complete a criminal background check and credit check. While we appreciate every application, an EQ recruiter will contact only those whose skills and experience most closely match the requirements of the role. EQB Inc. (TSX: EQB) is the parent company of Equitable Bank, the country's seventh-largest Schedule I bank by assets, which operates EQ Bank, Canada's Challenger Bank™. EQB Inc. serves nearly 4 million Canadians and manages approximately $150 billion in combined assets under management and administration. To learn more, visit eqb.investorroom.com and eqbank.ca.