Senior Cybersecurity Ops & Vulnerability Lead (24/7 SOC)

CAAT Pension Plan; Canada; On-site; CAD 151,000 - 189,000; Full time

Job summary

CAAT Pension Plan is seeking a Senior Manager, Security Operations & Vulnerability Management to lead and mature the organization’s SOC and cyber resilience programs. You will guide threat detection, incident response, and vulnerability management across cloud, on-prem, and SaaS environments, collaborating with architecture, DevOps, and governance teams.

The role requires a CISSP and substantial leadership experience directing 24/7 security operations, with a strong focus on metrics, playbooks,

Qualifications

• University degree or diploma in cybersecurity, computer science, or related field.
• Seven to ten years of progressive cybersecurity experience, including leadership in SOC, DFIR, Threat Detection, and Vulnerability Management.“
• CISSP designation is required.
• Excellent written and verbal communication skills for executive audiences.

Responsibilities

• Oversee and mature CAAT’s Security Operations Centre (SOC) to 24/7 operation.
• Lead incident response, threat hunting, and forensics readiness across enterprise environments.
• Drive vulnerability lifecycle management, risk prioritization, and remediation across cloud, apps, and infrastructure.
• Ensure compliance with ISO27001/27002, NIST CSF, ITIL, and Canadian standards; manage audits and vendor relationships.

Skills

SOC leadership

DFIR

Threat detection

Vulnerability management

Cloud security (Azure & AWS)

Security governance (ISO 27001/NIST)

Clear communication

Education

Bachelor's degree in cybersecurity or related field

Tools

EDR/XDR

SIEM

SOAR

PAM

DLP

CI/CD security tooling

Job description

CAAT Pension Plan is seeking a Senior Manager, Security Operations & Vulnerability Management to lead and mature the organization’s SOC and cyber resilience programs. You will guide threat detection, incident response, and vulnerability management across cloud, on-prem, and SaaS environments, collaborating with architecture, DevOps, and governance teams.

The role requires a CISSP and substantial leadership experience directing 24/7 security operations, with a strong focus on metrics, playbooks,