Security Manager

Terago; Toronto; On-site; CAD 120,000 - 170,000; Full time

Job summary

Terago is seeking a Security Manager to lead and mature the organization's cybersecurity program across cloud, identity, data, networks, endpoints, and servers. You will partner with Engineering, Operations, Legal and Compliance to translate cyber risk into actionable priorities and measurable controls.

You will own security governance, cloud and network defense, AI governance, and operations, driving policy, incident response, vendor oversight, and executive reporting.

Qualifications

• Five or more years of progressive experience in cybersecurity or security program leadership.
• Experience in telecom or large-scale infrastructure environments is an asset.
• Hands-on expertise with Azure and Microsoft 365 security, including Entra ID, Conditional Access, MFA, Defender, Purview, and privileged access management.

Responsibilities

• Own and maintain the cybersecurity strategy, roadmap, risk register, policies, standards, exceptions, and executive dashboard.
• Define a security baseline, track progress with meaningful metrics, and drive continuous improvement.
• Align security with Zero Trust principles and applicable telecom/privacy requirements.
• Lead security across cloud, networks, and infrastructure including Azure, Defender, and VPNs.
• Strengthen identity controls with MFA and least privilege; oversee patching and hardening.
• Establish guardrails for AI use and manage data protection and privacy controls.
• Lead security monitoring, incident response, and vendor oversight; manage SOC performance and budgets.

Skills

Security leadership

Azure/M365 security

Identity & access management

Threat & vulnerability management

Policy governance

Tools

Check Point

Fortinet

SIEM

Job description

The Security Manager is a hands-on leader who will strengthen and mature the organization’s cybersecurity program across cloud platforms, Microsoft 365, identity, data, networks, endpoints, Windows and Linux servers, AI-enabled services, and telecom and fixed-wireless operations. Working closely with Engineering, Operations, HR, Legal, Privacy, Compliance, and external service providers, this role turns cyber risk into practical priorities, measurable controls, and clear reporting for senior leadership.

Key Accountabilities

1. Security Governance and Architecture

• Own and maintain the cybersecurity strategy, roadmap, risk register, policies, standards, exceptions, and executive dashboard.
• Define a clear security baseline, track progress through meaningful metrics, and drive continuous improvement across the organization.
• Align security architecture and controls with Zero Trust principles, and applicable telecom and privacy requirements.

2. Cloud, Network and Infrastructure Defense

• Lead security across Azure, Microsoft 365, Entra ID, Defender, Purview, Key Vault, Azure Policy, privileged access, applications, secrets, APIs, and security logging.
• Strengthen identity and access controls through MFA, Conditional Access, Privileged Identity Management, least privilege, and regular access reviews.
• Oversee firewalls, VPNs, IDS/IPS, network segmentation, and fixed-wireless and cloud interconnections, including the lifecycle of Check Point and Fortinet platforms.
• Set and enforce standards for Windows and Linux hardening, vulnerability management, remediation, and patching service levels.

3. AI Governance and Data Protection

• Establish practical guardrails for approved AI use and identify Shadow AI, Shadow IT, unsanctioned SaaS, and unmanaged devices through cloud, DNS, firewall, application-control, and endpoint telemetry.
• Protect proprietary code, customer and network data, and personal information through data loss prevention, tenant and data isolation, least privilege, and insider-risk controls.
• Assess third-party AI and SaaS services for data retention, model training, privacy, copyright, and security risk before approval and throughout the vendor lifecycle.

4. Security Operations, Incident Response and Vendor Oversight

• Lead security monitoring, detection, triage, and response across cloud, identity, networks, endpoints, servers, and SaaS environments.
• Maintain and test incident-response, ransomware, and AI-related playbooks, including escalation paths, executive communications, and post-incident reviews.
• Manage SOC performance, including log coverage, alert quality, investigation standards, and service-level commitments.
• Oversee third-party security risk, audits, customer security questionnaires, cyber-insurance requirements, remediation plans, and the cybersecurity budget.

What You’ll Bring

• Five or more years of progressive experience in cybersecurity, including responsibility for security operations, risk management, or security program leadership. Experience in telecom or large-scale infrastructure environments is an asset.
• Hands-on expertise with Azure and Microsoft 365 security, including Entra ID, Conditional Access, MFA, Defender, Purview, and privileged access management.
• Practical experience with Check Point and Fortinet technologies, network security controls, SIEM platforms, endpoint protection, and Windows and Linux hardening.
• Knowledge of NIST, CIS Controls, ISO 27001, Zero Trust, incident response, vulnerability management, and policy and exception governance.
• Experience identifying and controlling Shadow IT and Shadow AI, implementing DLP, and defining responsible AI security guardrails.
• Ability to translate complex technical risk into clear business impact, practical recommendations, and concise executive reporting.
• Knowledge of applicable Canadian privacy, data-protection, and telecom obligations.

Skills, Knowledge & Abilities

• A collaborative, accountable leadership style with strong judgment, communication, and influence across technical and business teams.
• Ability to effectively manage multiple and complex priorities in a fast-paced environment, consistently delivering against a strategic business plan.
• Solutions oriented with excellent ability in developing and implementing new strategies and procedures to drive innovation.
• Excellent interpersonal and communication skills, with strong background in managing relationships with internal and external stakeholders.

TERAGO is an Equal Opportunity Employer and welcomes and encourages applications from all interested and qualified candidates. TERAGO will provide accommodations throughout the recruitment, selection, and/or assessment process to applicants with disabilities. If selected to participate in the recruitment, selection and/or assessment process, please inform TERAGO staff of the nature of any accommodation(s) that you may require in respect of any materials or processes used to ensure your equal participation.