Security Operations Lead – Information & Corporate Security

CPP Investments; Toronto; Hybrid; CAD 120,000 - 170,000; Full time

Job summary

CPP Investments in Toronto is seeking a Lead, Security Operations, Information & Corporate Security to strengthen security monitoring, incident response, and risk reporting. You will work with security professionals across the organization to identify and respond to security risks and support a resilient security program.

You will oversee technologies such as SIEM, EDR, DLP, threat intelligence, vulnerability management, and cloud security, and collaborate with internal stakeholders and external

Qualifications

• Undergraduate degree or college diploma in a related field.
• 6+ years of information or cyber security experience.
• Relevant certifications such as CISSP, CISA, CISM or similar.

Responsibilities

• Lead security operations activities, including monitoring, incident response, remediation, and coordination with established security frameworks.
• Develop security reporting dashboards and analyze metrics to identify risks and trends.
• Support operation and oversight of security technologies (SIEM, EDR, DLP, threat intel, vulnerability management, CAS, cloud security).
• Provide security advice and assessments on risks, controls, and technologies.
• Collaborate with internal stakeholders and external vendors to advance security objectives.

Skills

Security operations

Incident response

Security monitoring

Cloud security

Threat intelligence

Communication skills

Education

Undergraduate degree

Tools

SIEM

EDR

DLP

Firewalls

Vulnerability management

Security orchestration

Job description

CPP Investments in Toronto is seeking a Lead, Security Operations, Information & Corporate Security to strengthen security monitoring, incident response, and risk reporting. You will work with security professionals across the organization to identify and respond to security risks and support a resilient security program.

You will oversee technologies such as SIEM, EDR, DLP, threat intelligence, vulnerability management, and cloud security, and collaborate with internal stakeholders and external