Manager, Cyber Security

HTS Engineering - Heat Transfer Solutions; Toronto; On-site; CAD 150,000 - 170,000; Full time

Job summary

KORE Solutions in Toronto is seeking a Manager of Cyber Security to lead governance, risk, and incident response across the organization. You will oversee security operations, vulnerability management, and alignment with SOC 2, ISO 27001, and NIST standards while collaborating with IT Ops and business units.

The role requires hands-on leadership, strategic planning, and the ability to translate security risks into actionable plans, ensuring robust security posture and continuous improvement.

Qualifications

• Experience leading cybersecurity governance, risk, and compliance programs.
• Ability to oversee security operations, incident response, and vulnerability management.
• Strong leadership, communication, and stakeholder-management skills.

Responsibilities

• Lead cybersecurity governance, risk management, and compliance efforts across the organization.
• Oversee security operations, incident response, and vulnerability management activities.
• Develop metrics and dashboards to measure security performance and maturity for audits and leadership.
• Collaborate with IT Ops, Business Solutions, and development teams to embed security into solutions.
• Promote security awareness and a culture of security best practices across the organization.

Skills

Leadership

Strategic thinking

Communication

Stakeholder management

Project management

Security expertise

Tools

EDR/XDR

SIEM

Forensics

Vulnerability scanners

Cloud Security

Firewalls

Job description

Founded in 2015 in Toronto, Canada, KORE Solutions is a subsidiary company of HTS and an innovative technology solutions and services provider with a strong focus on the HVAC manufacturer’s representative industry. With a variety of offerings including business intelligence software, help service support, and more, KORE delivers end-to-end solutions that empower our partners and clients to build their successful business.

At KORE, communication and collaboration is our top priority. As a team member, you’ll be working closely with all departments to develop our software, TRAX, and the infrastructure surrounding it. We have a strong teamwork-oriented culture, meaning you’re surrounded by resources who want you to succeed. Your contributions will also have a direct impact. You’ll be providing meaningful change to the company and serve to enhance our processes.

Job Mandate

Reporting to the Head of Cyber Security, the Manager of Cyber Security is responsible for leading and managing key components of the organization’s cybersecurity program, working closely with the Head of Cyber Security to execute security strategies, initiatives, and priorities. The role provides leadership across cybersecurity governance, risk management, security operations, vulnerability management, incident response, compliance, and security assurance. The Manager oversees the implementation and effectiveness of security controls, identifies and manages cyber risks, leads security improvement initiatives, and ensures alignment with regulatory requirements, industry standards, and organizational policies. The role works collaboratively with ITOps, Support Services, Business Solutions and other business stakeholders to strengthen the organization’s cybersecurity posture, address emerging threats, support security awareness, and drive continuous improvement in the overall security program.

Major Responsibilities

Cybersecurity Strategy Execution and Program Delivery

• Partner with the Head of Cyber Security to execute the organization's cybersecurity strategy, roadmap, and security improvement initiatives.
• Translate cybersecurity strategies and objectives into actionable programs, operational plans, and measurable outcomes.
• Lead assigned cybersecurity projects and initiatives that improve security maturity, reduce risk, and enhance operational resilience.
• Provide regular updates to the Head of Cyber Security on security posture, risks, challenges, initiatives, and opportunities for improvement.
• Identify opportunities to enhance cybersecurity processes, capabilities, and services.

Security Operations Management

• Manage day-to-day cybersecurity operations, ensuring effective monitoring, detection, response, and remediation of security events.
• Oversee incident response activities, including investigation, containment, recovery, root cause analysis, and lessons learned.
• Manage vulnerability management processes, including vulnerability identification, prioritization, remediation tracking, and reporting.
• Ensure cybersecurity controls and operational processes remain effective and aligned with organizational requirements.
• Must have hands on experience with Tools – EDR/XDR, SIEM, Forensics, Vulnerability scanners, Cloud Security, Firewalls

Cybersecurity Governance, Risk, and Compliance

• Support the Head of Cyber Security in maintaining cybersecurity governance frameworks, policies, standards, and procedures.
• Manage security documentation and evidence requirements for audits, assessments, and compliance activities.
• Support ongoing compliance programs, including SOC 2, ISO 27001, NIST, and other applicable security frameworks.
• Develop and maintain cybersecurity metrics, dashboards, and KPIs to measure security performance and improvement.
• Assist with security risk assessments and development of risk mitigation plans.

Security Architecture and Technology Enablement

• Provide cybersecurity guidance and recommendations for infrastructure, applications, cloud services, and technology initiatives.
• Partner with IT Operations, Business Solutions, and development teams to integrate security into technology solutions.
• Support Secure DevOps (DevSecOps) practices by promoting security throughout the software development lifecycle.
• Support security reviews for emerging technologies, including artificial intelligence initiatives and AI governance requirements.

Security Service Delivery and Operational Improvement

• Support the continued development and maturity of cybersecurity service delivery capabilities.
• Assist in defining repeatable processes, operational procedures, and service standards that improve quality, efficiency, and scalability.
• Partner with the Head of Cyber Security to advance cybersecurity capabilities, including Managed Security Services (MSSP) offerings where applicable.
• Identify opportunities for automation, process optimization, and improved service delivery.

Security Awareness and Culture

• Support the development and delivery of cybersecurity awareness initiatives.
• Promote security best practices through training, communications, presentations, and engagement activities.
• Encourage a culture of security awareness and shared responsibility across the organization.

Third-Party and Vendor Security

• Support third-party security assessments and vendor risk management activities.
• Review security requirements for external providers and technology partners.
• Collaborate with vendors and partners to address security risks and improve security outcomes.

Cybersecurity Strategy Execution and Program Delivery

• Partner with the Head of Cyber Security to execute the organization's cybersecurity strategy, roadmap, and security improvement initiatives.
• Translate cybersecurity strategies and objectives into actionable programs, operational plans, and measurable outcomes.
• Lead assigned cybersecurity projects and initiatives that improve security maturity, reduce risk, and enhance operational resilience.
• Provide regular updates to the Head of Cyber Security on security posture, risks, challenges, initiatives, and opportunities for improvement.
• Identify opportunities to enhance cybersecurity processes, capabilities, and services.

Security Operations Management

• Manage day-to-day cybersecurity operations, ensuring effective monitoring, detection, response, and remediation of security events.
• Oversee incident response activities, including investigation, containment, recovery, root cause analysis, and lessons learned.
• Manage vulnerability management processes, including vulnerability identification, prioritization, remediation tracking, and reporting.
• Ensure cybersecurity controls and operational processes remain effective and aligned with organizational requirements.
• Must have hands on experience with Tools – EDR/XDR, SIEM, Forensics, Vulnerability scanners, Cloud Security, Firewalls

Cybersecurity Governance, Risk, and Compliance

• Support the Head of Cyber Security in maintaining cybersecurity governance frameworks, policies, standards, and procedures.
• Manage security documentation and evidence requirements for audits, assessments, and compliance activities.
• Support ongoing compliance programs, including SOC 2, ISO 27001, NIST, and other applicable security frameworks.
• Develop and maintain cybersecurity metrics, dashboards, and KPIs to measure security performance and improvement.
• Assist with security risk assessments and development of risk mitigation plans.

Security Architecture and Technology Enablement

• Provide cybersecurity guidance and recommendations for infrastructure, applications, cloud services, and technology initiatives.
• Partner with IT Operations, Business Solutions, and development teams to integrate security into technology solutions.
• Support Secure DevOps (DevSecOps) practices by promoting security throughout the software development lifecycle.
• Support security reviews for emerging technologies, including artificial intelligence initiatives and AI governance requirements.

Security Service Delivery and Operational Improvement

• Support the continued development and maturity of cybersecurity service delivery capabilities.
• Assist in defining repeatable processes, operational procedures, and service standards that improve quality, efficiency, and scalability.
• Partner with the Head of Cyber Security to advance cybersecurity capabilities, including Managed Security Services (MSSP) offerings where applicable.
• Identify opportunities for automation, process optimization, and improved service delivery.

Security Awareness and Culture

• Support the development and delivery of cybersecurity awareness initiatives.
• Promote security best practices through training, communications, presentations, and engagement activities.
• Encourage a culture of security awareness and shared responsibility across the organization.

Third-Party and Vendor Security

• Support third-party security assessments and vendor risk management activities.
• Review security requirements for external providers and technology partners.
• Collaborate with vendors and partners to address security risks and improve security outcomes.

Leadership and Collaboration

• Provide leadership, coaching, and guidance to cybersecurity team members.
• Foster collaboration across Cyber Security, IT Operations, Business Solutions, Help Desk, and business teams.
• Build strong relationships with stakeholders to ensure security requirements are understood and effectively implemented.
• Demonstrate accountability, ownership, and continuous improvement in all cybersecurity activities.

Strategy & Planning

• Develop and execute the organization’s cybersecurity strategy, roadmap, and priorities.
• Align cybersecurity initiatives with business objectives, risk tolerance, and regulatory requirements.
• Lead cybersecurity risk assessments and establish priorities for risk reduction.
• Define cybersecurity goals, performance metrics, and security maturity targets.
• Develop and manage the cybersecurity program roadmap, budget, resources, and priorities.
• Evaluate emerging threats, technologies, and industry trends to inform security strategy.
• Establish and maintain cybersecurity governance, policies, standards, and frameworks.
• Lead strategic planning for security operations, incident response, vulnerability management, compliance, and risk management.
• Identify security gaps and develop remediation and continuous-improvement plans.
• Partner with IT and business leadership to integrate security into technology and business initiatives.
• Provide cybersecurity risk, performance, and investment recommendations to senior leadership.
• Ensure cybersecurity strategies support business continuity, resilience, and organizational objectives.

Working Conditions

• Work Environment: Work environment consisting of 5 days in the office.
• Fast-Paced Environment: Fast-paced environment with tight deadlines.
• Transportation: Reliable access to personal transportation is a requirement.
• Knowledge of incident response, threat detection, threat hunting, and digital forensics.
• Experience developing and maintaining security controls, policies, standards, and technical baselines.
• Strong understanding of cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Experience with security assessments, vulnerability management, penetration testing, and remediation programs.
• Ability to analyze security metrics, logs, dashboards, risk reports, and threat intelligence.
• Knowledge of security architecture and secure technology design principles.
• Experience managing security tools, configurations, integrations, and technology lifecycles.
• Familiarity with automation, scripting, APIs, and security orchestration to improve operational efficiency.
• Ability to evaluate cybersecurity technologies, conduct technical reviews, and make security investment recommendations.
• Experience developing security KPIs/KRIs, dashboards, and executive-level reporting.
• Strong understanding of business continuity, disaster recovery, and cybersecurity resilience.

Skills

• Strong leadership and people-management skills.
• Excellent strategic thinking and decision-making abilities.
• Strong communication and presentation skills with technical and executive audiences.
• Ability to translate complex cybersecurity risks into business impacts.
• Strong problem-solving, analytical, and critical-thinking skills.
• Ability to prioritize competing risks, projects, and operational demands.
• Strong stakeholder management and cross-functional collaboration skills.
• Ability to build effective relationships with IT, business, risk, audit, legal, and executive teams.
• Strong project and program management skills.
• Ability to manage and resolve security incidents and high-pressure situations effectively.
• Strong negotiation, influencing, and conflict-resolution skills.
• High level of accountability, integrity, and professional judgment.
• Ability to mentor, coach, and develop cybersecurity staff.
• Adaptability and willingness to stay current with emerging threats, technologies, and regulatory requirements.

Salary: $150K-$170K

In accordance with the Accessibility for Ontarians with Disabilities Act, 2005 and the Ontario Human Rights Code, KORE is an equal opportunity employer. We are committed to a workplace of diversity and inclusion. KORE encourages applications from all candidates that represent the full range of communities across Canada. All qualified applicants will be considered for employment without discrimination on the basis of race, colour, age, religion, sexual orientation, gender identity, disability, national or ethnic origin or any other factors prohibited by law. Accommodations are available upon request, for all aspects of the recruiting process and thereafter.