Manager, Security Operations & Identity New Cambridge, Ontario, Canada

Gore Mutual Insurance Company; Cambridge; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Manager of Security Operations & Identity to lead a dynamic team in safeguarding information systems against cyber threats. This pivotal role involves overseeing incident response, managing identity and access solutions, and driving continuous improvement in security protocols. With a focus on collaboration across departments, you will enhance operational visibility and ensure the organization is well-prepared for emerging threats. Join a forward-thinking company dedicated to transforming the insurance landscape and providing purpose-driven options for Canadians. This is an exciting opportunity to make a significant impact in a rapidly evolving field.

Qualifications

• 10+ years of experience in Incident Response and Cyber Security.
• Proficiency in cybersecurity frameworks and compliance standards.

Responsibilities

• Lead the Security Operations team to protect against cyber threats.
• Manage IAM solutions and ensure effective incident response.

Skills

Incident Response

Cyber Incident Response

Identity and Access Management

Cyber Security Governance

Documentation Skills

Team Management

Communication Skills

Technical Knowledge

Cloud Operations

Education

Community College Degree in Computer Engineering

Post-secondary Training in IT

Tools

SIEM

IAM Tools

Data Warehouse Systems

Job description

Next Horizon is here. Fueled by investments in talent and technology, our bold strategy to transform is nearly complete.

At Gore Mutual, we’ve always set ourselves apart as a modern mutual that does good. Now, we’re proudly building on that legacy to transform our company—and our industry—for the better.

Our path forward sharpens our focus on business performance, driven by leading technology, innovation and an agile, high-performing culture. With Gore Mutual and Beneva announcing their intent to merge in 2026, we’ll be uniting two well-established, financially strong, and trusted brands to become the strongest mutual insurer in Canada, ensuring Canadians have purpose-driven insurance options for generations to come. Come join us.

As the Manager of Security Operations & Identity, you will work as part of the Enterprise Security team to protect the organization’s information systems and networks from cyber threats. This role manages the team responsible for monitoring, analyzing, and responding to security incidents, as well as implementing security measures to safeguard sensitive data and systems. You will work with teams and departments across the company to implement and maintain our security controls, ensure accurate security logging and drive continuous improvement of our security program and supporting documents.

What will you do?

• Relationship Owner for our MDR partner ensuring vendor performance and service delivery is optimized and meeting SLAs.
• Ensure Team has coverage, capacity and skills to effectively investigate and respond to security breaches.
• Create and ensure continuous development of incident response plans and procedures.
• Owner for security emergency response procedures and development of associated playbooks and workflows.
• Lead engagement with other technical and business departments within Gore Mutual to plan for incidents and proactively develop security best practices.

Identity and Access Management (IAM)

• Provide leadership to work with cross functional departments to implement workforce and broker IAM solutions and operating processes.
• Manage the IAM Team, ensuring coverage, capacity and skills development to effectively deliver on the Team’s responsibilities and objectives.
• Provide ownership and operational oversight for IAM/IAG tooling, controls, data, performance metrics and reports.
• Continuously develop and optimize joiner, mover, leaver processes for Gore Mutual’s account lifecycle management.
• Key stakeholder in the modernization of Gore Mutual’s Identity Governance program.

Threat Intelligence and Analysis

• Provide leadership to ensure key individuals on the team (including self) maintain diligence and proficiency on the latest cyber threats, vulnerabilities, and attack vectors.
• Manage the Threat Intelligence function to ensure intelligence data is analyzed and trends & risks are identified quickly with high quality and reliability.
• Provide knowledge and expertise to other departments such as networking and cloud engineering to assist in developing our platforms to reduce our threat exposure to emerging threats.

Operational Visibility

• Develop and continuously improve reporting metrics and dashboards for overall department operational reporting.
• Leverage knowledge of SIEM and other Data Warehouse and analytics systems to do data discovery, high level forensics and general analysis of security telemetry.
• Determine and ensure collection of ongoing SLAs, KPIs and KRIs across all security teams.
• Create monthly, quarterly and yearly reports and dashboards.
• Deliver and present reports including for senior leadership extending information to trends, outcomes and interpretation of data points.

Physical Security

• Co-own, with Facilities and Shared Services, emergency response procedures related to physical security.
• Work with Shared Services and Facilities Department leaders to develop and continuously improve physical security across all the company’s offices and facilities.
• Co-ordinate with business departments to create playbooks and procedures to respond to physical threats.
• Assume a leadership role for Physical Incident Response including for threats, imminent and active situations.

What will you need to succeed?

• Community college degree in Computer Engineering or Information Security.
• 10+ Years experience in below:
• Incident Response / Emergency Response Teams – Lead Incident Handler.
• Cyber Incident Response – Lead Incident Handler.
• Identity and access management - senior analyst/specialist/leader.
• Proficiency in frameworks, compliance, and standards related to cybersecurity (e.g., NIST CSF, OSFI B13, PCI DSS).
• Some of IT Operations / IT Service Management / Infrastructure / Cloud etc. in a senior technical role.
• Team management, performance management, mentoring and coaching.
• Cyber Security Governance and Risk management.
• IT Technical Knowledge with post-secondary training.
• Technical cloud operations and design (Azure and AWS).
• Knowledge of Insurance or Financial Business principles.
• Clear and proficient documentation and communication skills.
• Certified in multiple security Domains (e.g. CISSP, CISM, GIAC-GCIH, GIAC-GSEC etc.).