Senior Manager, Information Security
University of Toronto
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Job summary
University of Toronto, St. George campus, is seeking a Senior Manager, Information Security to lead the division's security program, risk management, and incident response.
The role collaborates with IIT, central IT, and departmental teams to strengthen security posture while supporting teaching, research, and administration. The position requires eight years of IT security/risk management experience, strong leadership, and the ability to translate complex issues for senior leadership.
Qualifications
- University degree in Computer Science, Engineering, Information Technology or equivalent
- Graduate degree and professional certifications such as CISSP, CISM, CISA, CRISC, PMP, or equivalent assets
Responsibilities
- Develop and continuously improve divisional information security and IT risk management programs.
- Assess vulnerabilities, risks and recommend controls/remediation strategies.
- Advise on security posture with emerging technologies including AI, cloud platforms, and digital innovation.
- Coordinate security incidents, investigations, vulnerability assessments, and remediation.
- Lead security initiatives including planning, budgeting, procurement, vendor management, and reporting.
Skills
Education
Tools
Job description
Date Posted: 10/16/2026
Req ID: 50591
Faculty/Division: Faculty of Arts & Science
Department: Information and Instructional Technology
Campus: St. George (Downtown Toronto)
Position Number: 00055831
Existing Vacancy: Yes
The Faculty of Arts & Science is the heart of Canada’s leading university and one of the World's most comprehensive and diverse academic divisions. The strength of Arts & Science derives from our combined teaching and research excellence in the humanities, sciences and social sciences across 29 departments, seven colleges and 46 interdisciplinary centres, institutes and programs. We can only realize our mission with the dedication and excellence of engaged staff and faculty. The faculty’s diversity of opportunities and perspectives reflects the local and global landscape and the need for curiosity, innovative thinking, and collaboration. At Arts & Science, we take pride in our legacy of innovation and discovery that has changed how we think about the world. The Faculty’s divisional IT team, Information & Instructional Technology (IIT) provides divisional IT services and support across the Faculty including day to day computing and infrastructure fulfillment as well as data centre and public web services and application development. Working collaboratively with central University IT and local departmental IT teams, IIT supports teaching, research, and administrative operations through secure, reliable, and modern technology solutions.
Reporting to the Executive Director, Information & Instructional Technology, and with a dotted-line relationship to the University's Chief Information Security & Digital Trust Officer (CISDTO), the Senior Manager, Information Security provides strategic and operational leadership for the Faculty's information security and IT risk management programs. The Senior Manager, Information Security is responsible for developing, implementing, and advancing a coordinated, division-wide approach to information security and technology risk. Working collaboratively with institutional security leadership, divisional IT, and departmental IT teams, the incumbent strengthens the Faculty's security posture while supporting the diverse needs of teaching, research, and administration. The role combines strategic planning, security program development, risk assessment and program management, technical expertise, incident coordination, and stakeholder engagement. It also supports the responsible adoption of emerging technologies, including artificial intelligence, automation, and cloud services, in alignment with University policies, standards, and governance requirements. As a member of the Faculty's IT leadership team, the Senior Manager, Information Security fosters a proactive, collaborative, and risk-aware security culture while balancing security requirements with academic and operational priorities.
- Lead the development, implementation, and continuous improvement of divisional information security and IT risk management programs.
- Establish security priorities, assess vulnerabilities, identify risks, and recommend appropriate controls and remediation strategies.
- Support the adoption and implementation of University information security policies, standards, governance requirements, and industry best practices.
- Develop security reporting, risk assessments, performance measures, and recommendations to support informed leadership decisions.
- Advise on security and risk considerations associated with emerging technologies, including AI, automation, cloud platforms, and digital innovation.
- Coordinate divisional security incident response, investigations, escalation, and remediation in collaboration with institutional security teams and departmental IT.
- Support security assessments, technical investigations, vulnerability management, and risk reduction initiatives.
- Collaborate with functional IT Managers and teams to strengthen operational resilience, security controls, and business continuity readiness.
- Review proposed technology solutions and projects to identify security risks and recommend appropriate safeguards.
- Lead and manage assigned security personnel, resources, priorities, projects, and operational activities.
- Develop and oversee security initiatives, including planning, budgeting, procurement, vendor management, implementation, and performance reporting.
- Build strong working relationships with Faculty leadership, departmental IT teams, institutional security teams, and other stakeholders.
- Promote a consistent and collaborative approach to information security and risk management across the Faculty.
- Provide expert security advice to academic and administrative units on technology initiatives, risk mitigation, and compliance requirements.
- Support security awareness, education, and engagement initiatives for faculty, staff, and students.
University degree in Computer Science, Engineering, Information Technology, or an equivalent combination of education and relevant experience. Graduate degree and professional certifications such as CISSP, CISM, CISA, CRISC, PMP, or equivalent are considered assets.
- Minimum eight (8) years of progressively responsible experience in information technology, with significant experience in information security, IT risk management, and security program development.
- Demonstrated experience developing, implementing, and improving information security policies, standards, controls, and risk management practices.
- Strong experience assessing security risks across enterprise technology environments, including endpoints, servers, networks, cloud services, applications, vendor solutions and identity systems.
- Experience coordinating security incidents, investigations, vulnerability assessments, and remediation activities.
- Experience with security monitoring, threat detection, defense-in-depth strategies, and security assessment tools.
- Experience supporting compliance reviews, security audits, and the implementation of security governance requirements.
- Minimum eight (8) years of experience in an IT operations, infrastructure, or technology support environment.
- Strong understanding of enterprise IT architecture, networking, cloud platforms, infrastructure security, and business-critical applications.
- Experience with Microsoft enterprise technologies, including Azure, Microsoft Entra ID, and associated security and identity management capabilities.
- Knowledge of change management, configuration management, and technology lifecycle practices.
- Familiarity with the security and governance considerations associated with artificial intelligence, automation, and emerging technologies.
- Minimum eight (8) years of experience in a formal people management or technology leadership role.
- Demonstrated success leading and mentoring technical teams, managing competing priorities, and delivering complex initiatives.
- Experience with project and program management, financial planning, budgeting, procurement, vendor management, and contract oversight.
- Proven ability to collaborate with diverse stakeholders and influence outcomes across decentralized or complex organizational environments.
- Strong strategic thinking, leadership, organizational, and decision-making ability.
- Excellent interpersonal, relationship management, and communication skills.
- Ability to translate complex technical and security issues into clear, practical recommendations for senior leadership and non-technical stakeholders.
- Strong analytical, problem-solving, risk assessment, and incident management capabilities.
- Ability to manage multiple priorities, respond effectively to urgent issues, and exercise sound judgment under pressure.
- Strong commitment to collaboration, confidentiality, professionalism, and service excellence.
- Ability to navigate complex organizational structures, build consensus, and escalation issues appropriately.
- Demonstrated commitment to equity, diversity and inclusion.
- Experience working in a large, decentralized organization, preferably within higher education or a research-intensive environment.
- Familiarity with IT Service Management and ITIL practices, including platforms such as ServiceNow.
- Familiarity with AI security governance, cloud security assessments, and enterprise technology risk management.
- LEAN, Six Sigma, or related process improvement experience.
- Availability to respond to critical security incidents outside regular working hours, when required.
- Ability to manage sensitive and confidential information with discretion and integrity.
Closing Date: 11/06/2026, 11:59PM ET
Employee Group: Salaried
Appointment Type: Budget - Continuing
Schedule:
Pay Scale Group & Hiring Zone:
PM 5 -- Hiring Zone: $125,319 - $146,206 -- Broadband Salary Range: $125,319 - $208,864
Job Category: Administrative / Managerial
Candidates who are members of Indigenous, Black, racialized and 2SLGBTQ+ communities, persons with disabilities, and other equity deserving groups are encouraged to apply, and their lived experience shall be taken into consideration as applicable to the posted position.
The University of Toronto embraces Diversity and is building a culture of belonging that increases our capacity to effectively address and serve the interests of our global community. We strongly encourage applications from Indigenous Peoples, Black and racialized persons, women, persons with disabilities, and people of diverse sexual and gender identities. We value applicants who have demonstrated a commitment to equity, diversity and inclusion and recognize that diverse perspectives, experiences, and expertise are essential to strengthening our academic mission. As part of your application, you will be asked to complete a brief Diversity Survey. This survey is voluntary. Any information directly related to you is confidential and cannot be accessed by search committees or human resources staff. Results will be aggregated for institutional planning purposes. For more information, please see http://uoft.me/UP.
The University strives to be an equitable and inclusive community, and proactively seeks to increase diversity among its community members. Our values regarding equity and diversity are linked with our unwavering commitment to excellence in the pursuit of our academic mission. The University is committed to the principles of the Accessibility for Ontarians with Disabilities Act (AODA). As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. If you require any accommodations at any point during the application and hiring process, please contact uoft.careers@utoronto.ca.
Information Security, Risk Management, Information Technology, IT Manager, Military Intelligence, Technology, Finance, Government
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
