Senior Manager, Cybersecurity Operations

LCBO (Liquor Control Board of Ontario); Toronto; Hybrid; CAD 96,000 - 179,000; Full time

Benefits offered by this job

Health/Dental Benefits

Employee & Family Assistance Program

Defined Benefit Pension

Discounts on products and services via

Job summary

LCBO in Toronto is seeking a Senior Manager, Cybersecurity Operations to lead threat intelligence programs, oversee incident response, and drive security operations across the organization. You will mentor a team of cybersecurity professionals and coordinate with external partners to strengthen defenses.

You will leverage the Microsoft security ecosystem, manage budgets and contracts, and report security posture to executive leadership, while aligning security goals with business objectives and

Qualifications

• 5 years of cybersecurity leadership/IT risk management experience.
• Experience in incident response.
• Knowledge of MITRE ATT&CK framework.
• Experience with Microsoft security ecosystem (Defender XDR, Sentinel, Entra).
• Familiarity with PCI-DSS compliance.
• Budget management for cybersecurity initiatives.
• Professional certifications: CRISC, CISA, CISM, CISSP.
• Understanding of Ontario and Canadian privacy laws.

Responsibilities

• Oversee threat intelligence and CTEM programs.
• Lead cybersecurity incident response activities and investigations.
• Manage external MSSP and security vendors.
• Develop and track security metrics and executive reporting.
• Align cybersecurity operations with business goals.
• Lead strategic procurement and contracts.

Skills

Cybersecurity leadership

Incident response

MITRE ATT&CK

Security tools

Microsoft security

PCI-DSS compliance

Budget management

Professional certifications

Ontario & Canadian privacy law

Education

CRISC/CISA/CISM/CISSP

Tools

Firewalls

Vulnerability Management

Web Gateway/Proxy

Web Application Firewall

Secure Code Review

DLP

SIEM

EDR/XDR

Certificate Management

Security Awareness Training

Job description

Location Address: 100 Queens Quay East, 9th Floor, Toronto

Number of Openings: 1

Pay: $96,244.00 - $178,668.00

Senior Manager, Cybersecurity Operations #LI-Onsite

About the Role

Are you passionate about overseeing strategic operations and developing a team of cybersecurity professionals? Reporting to the Director, Cybersecurity, you will advance threat intelligence, optimize security tools, manage proactive threat hunting programs, and refine security reporting and incident response strategies in the event of security breaches. As senior manager. you will provide leadership for the information security operations team and external partners, focusing on strategic aspects of security operations, procurement, and contracts. Your work will involve critical decision-making responsibilities, long-term planning, and a substantial contribution to our overall security posture. You will help develop team capabilities and align cybersecurity operations goals with broader business goals. If you have strong cybersecurity experience and enjoy leading a team, then this is the role for you!

About the Role

Cyber Security Operations Leadership Manage threat intelligence and Continuous Threat Exposure Management (CTEM) programs, leveraging the Microsoft security ecosystem and emerging capabilities such as Frontier AI to identify, prioritize, and mitigate cyber threats. Lead cybersecurity incident response activities, including containment, eradication, recovery, forensic investigations, incident response planning, and post-incident reviews to drive continuous improvement. Evaluate the effectiveness of security controls across information and technology systems and adjust security measures in response to emerging threats, vulnerabilities, and attack techniques. Lead a team of cybersecurity professionals while providing direction and oversight to Managed Service Providers and other security partners. Establish team and individual goals, monitor performance, and foster a culture of collaboration, innovation, and continuous improvement. Oversee the cybersecurity operations function to ensure proactive threat detection, incident management, and operational resilience.

Partnership and Resource Management

Maintain cybersecurity documentation, including incident response strategies, procedures, guidelines, and related artefacts. Develop and refine cybersecurity metrics and executive reporting, working with the Managed Security Service Provider (MSSP) to deliver meaningful operational insights. Be the primary liaison for the MSSP, third-party security vendors, and incident response providers, supporting vendor, contract, and budget management. Collaborate with the Director, Cybersecurity on strategy, governance, security architecture planning, and operational security requirements. Support the threat risk assessment (TRA) process and manage the periodic review and maintenance of the Incident Response Plan (IRP). Contribute operational threat intelligence to cybersecurity awareness initiatives, including GRC-led training and phishing simulation programs. Deploy, integrate, and configure new cybersecurity solutions and enhancements in accordance with established standards and procedures. Partner with the Director, Cybersecurity and the GRC team to implement policies that protect sensitive information and ensure compliance with applicable legal and regulatory requirements.

Compliance and Reporting

Ensure compliance with relevant regulatory requirements, industry standards, and best practices. Prepare and present regular reports on the state of cyber security operations, including key metrics, trends, and incidents, to senior management and stakeholders. Provides evidence to audit and risk teams as required. Work with internal auditors and external assessors during security audits and assessments.

About You

• 5 years’ experience in any combination of cybersecurity or information security, information technology, or IT risk management, including experience leading teams or service providers.
• Experience in incident response.
• Familiarity with the MITRE ATT&CK framework.
• Previous experience managing any or all the following types of tools: Firewalls, Vulnerability Management, Web Gateway/Proxy, Web Application Firewalls, Secure Code Review, CASB, DLP, Email Gateway, SIEM, AV/EDR/XDR, Certificate Management and Security Awareness Training.
• Experience with the Microsoft security ecosystem, including Microsoft Defender XDR, Sentinel, Entra, Purview, and Security Copilot.
• Experience with Payment Card Industry (PCI-DSS) compliance.
• Experience in managing budgets, as cybersecurity initiatives often require significant financial resources.
• Professional certification such as CRISC, CISA, CISM, CISSP.
• Understanding of relevant Ontario provincial and Canadian Federal information security and information privacy legislation.

Benefits

• Health/Dental Benefits
• Access to an Employee & Family Assistance Program
• a Defined Benefit Pension
• Discounts on products and services via Workperks.

There is a world of opportunities at the LCBO… Join an organization where you can be challenged while achieving your true potential. A place where you can make a positive impact supporting Ontario business and communities. Discover a safe, healthy, diverse, inclusive, and accountable workplace where your wellbeing is our top priority. At the LCBO, your contributions are respected and valued. Be part of our journey as we invest in people and technology to transform an organization. There really is a world of opportunities at the LCBO. We foster a culture of inclusion and belonging, so everyone feels valued, respected, and heard.

The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility of Ontarians with Disabilities Act.

Work Hours: 36.25

Union / Non-Union: Non-Union

Job Posting End Date: September 16, 2026

The LCBO is an equal opportunity employer and committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act.

The LCBO (Liquor Control Board of Ontario) is an Ontario government enterprise and one of the world’s largest buyers and retailers of beverage alcohol. Through more than 650 retail stores, catalogues, special order services and more than 389 LCBO Convenience Outlets (LCOs) , which provide cost effective, convenient and socially responsible access for rural consumers, the LCBO offers nearly 24,000 products annually to consumers and licensed establishments from more than 80 countries.

For job searches in a specific location, please use the search field on the careers site.