Senior IT Vulnerability Management Specialist

Sonova; Kitchener; Hybrid; CAD 173,000 - 230,000; Full time

Benefits offered by this job

Flexible hybrid model

Wellness benefit

Competitive compensation with employer

Pension contribution match

Mentorship program

Career development plans

Diversity and inclusion

Job summary

Sonova is actively seeking a Senior IT Vulnerability Management Specialist to lead vulnerability management across its global technology environment. The role emphasizes proactive risk reduction, automation, and collaboration with stakeholders to drive remediation and strengthen security posture.

The position supports flexible hybrid work in Canada. It involves reporting on trends, ensuring compliance, and guiding technical teams through remediation and training.

Qualifications

• Experience in vulnerability management lifecycle and security operations.
• Ability to communicate risk to technical and non-technical audiences.
• Familiarity with cloud environments (IaaS, PaaS, SaaS).
• Experience coordinating remediation across multiple teams.

Responsibilities

• Lead vulnerability management activities including scanning, analysis, risk assessment, reporting and remediation tracking.
• Collaborate with application owners, infrastructure teams, and security stakeholders to prioritize fixes.
• Coordinate patch management and remediation efforts.
• Use threat intelligence and exploitability data to prioritize risks.
• Leverage automation and AI-assisted tools to improve analysis and efficiency.
• Monitor external attack surface and strengthen defenses.

Skills

Vulnerability management

Cybersecurity operations

Risk assessment

Automation

Threat intelligence

AI-assisted tooling

Patch management

Education

Bachelors in CS/IT/Cybersecurity

Tools

Nessus

Qualys

Jira

Confluence

Job description

Select how often (in days) to receive an alert:

At Sonova, we envision a world where everyone can enjoy the delight of hearing. This vision inspires us and fuels our commitment to developing innovative solutions that improve hearing health and human connection - from personal audio devices and wireless communication systems to hearing aids and cochlear implants. We're dedicated to providing outstanding customer experiences through our global audiological care services, ensuring that everyone has the opportunity to engage fully with the world around them.

Here you’ll find a diverse range of opportunities that span both consumer and medical solutions and the freedom to shape your career while making an impact on the lives of others. Join us in our mission to create a more connected world, where every voice is heard and every story matters.

Senior IT Vulnerability Management Specialist

Are you passionate about cybersecurity and reducing organizational risk through proactive vulnerability management? We are seeking a Senior IT Security Specialist, Vulnerability Operations to play a critical role in identifying, assessing, prioritizing, and managing vulnerabilities across Sonova's global technology environment.

This hands-on cybersecurity role is responsible for driving the vulnerability management lifecycle, partnering with technical and business stakeholders to ensure risks are effectively communicated, monitored, and remediated. You'll leverage automation, threat intelligence, and AI-assisted capabilities to strengthen Sonova's security posture and continuously improve vulnerability operations.

What You'll Do

• Lead vulnerability management activities, including scanning, analysis, risk assessment, reporting, and remediation tracking across enterprise environments.
• Partner with application owners, infrastructure teams, service providers, and security stakeholders to prioritize and address vulnerabilities based on business risk.
• Drive remediation efforts by coordinating patch management activities and supporting teams through critical vulnerability resolution.
• Utilize threat intelligence, exploitability data, and business context to prioritize security risks and improve decision-making.
• Leverage automation and AI-assisted tools to enhance vulnerability analysis, prioritization, and operational efficiency.
• Monitor and manage Sonova's external attack surface to identify emerging exposure risks and strengthen security defenses.
• Develop and deliver vulnerability management training and guidance to technical stakeholders and business partners.
• Create executive and operational reporting on vulnerability trends, risk exposure, remediation progress, and compliance status.
• Collaborate with internal and external partners to improve vulnerability management processes, technologies, and security practices.
• Support security investigations and compliance-related activities when required.

What You'll Bring

Education

• Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience

One or more of the following certifications is preferred:

• GIAC (GCIH or similar), CISA, CompTIA Security+, Certified Ethical Hacker (CEH), CCNA, Comparable cybersecurity certifications

Experience

• Hands-on experience in vulnerability management, cybersecurity operations, or security risk management
• Experience working with vulnerability management tools such as Nessus, Qualys, or similar platforms
• Experience coordinating remediation efforts across multiple technical teams
• Familiarity with cloud environments, including IaaS, PaaS, and SaaS platforms
• Experience working with external vendors and managed security service providers

Technical Skills

• Strong understanding of vulnerability management frameworks and best practices
• Knowledge of security standards and frameworks, including OWASP, NIST, and CIS Benchmarks
• Solid understanding of networking concepts, including TCP/IP, DNS, VPNs, and related protocols
• Experience with Windows, Linux, Unix, and macOS environments
• Familiarity with web application security tools and vulnerabilities, including Burp Suite and OWASP ZAP
• Experience with patch management processes and platforms
• Proficiency with collaboration and workflow tools such as Jira, Confluence, Microsoft Teams, and Slack
• Strong analytical and problem-solving abilities
• Ability to evaluate risk and communicate complex technical concepts to both technical and non-technical audiences
• Strong decision-making and prioritization skills
• Highly organized, detail-oriented, and process-driven
• Self-motivated with a continuous learning mindset
• Collaborative, service-oriented, and skilled at building trusted relationships
• Passion for continuous improvement and operational excellence

Language

• Strong written and verbal communication skills in English

A minimum of 200Mb/sec download and 10Mb/sec upload speed internet connectivity is required to support any remote/hybrid employee functionality at Sonova

What we offer:

• Exciting and challenging work environment
• Collaborative culture
• Opportunities for continuous self-improvement
• Opportunities for flexible hybrid model work environment
• A company that values diversity and inclusion
• Rich benefits plan including wellness benefit, paramedical (massage therapist, naturopath, etc.) and competitive compensation including variable component and employer match on pension contributions
• Mentorship program and career development plans

This role's pay range is $124,000 – $165,000. This role is also bonus eligible.

Sonova Canada is now a certified Great Place to Work® May 2024- May 2025.

Sonova is an equal opportunity employer.

We team up. We grow talent. We collaborate with people of diverse backgrounds to win with the best team in the market place. We guarantee every person equal treatment in regard to employment and opportunity for employment, regardless of a candidate’s ethnic or national origin, religion, sexual orientation or marital status, gender, genetic identity, age, disability or any other legally protected status.

Recruitment Fraud Warning

We have become aware of fraudulent recruitment activities in which individuals falsely claim to represent Sonova or recruitment agencies acting on our behalf. These individuals may contact potential candidates by email, messaging services or other channels and may offer employment opportunities or recruitment-related services, such as CV preparation or review, in exchange for payment.

Sonova will never ask candidates to pay fees or make payments as part of our recruitment process. We also do not require candidates to purchase recruitment, CV preparation, training or similar services as a condition of applying for or obtaining employment with us.

Please exercise caution if you receive an unsolicited communication claiming to relate to a vacancy at Sonova, particularly if it requests payment, financial information or other sensitive personal information.

If you are uncertain whether a recruitment communication is genuine, please verify the vacancy through our official careers page or contact us through the contact details published on our website.

Sonova accepts no responsibility for fraudulent communications or transactions made by individuals or organisations falsely claiming to represent us.