Senior Manager, Information Security Information Technology Services

MacEwan International; Edmonton; Hybrid; CAD 106,000 - 143,000; Full time

Job summary

MacEwan University is seeking a Senior Manager, Information Security for a full-time continuing role within Information Technology Services. You will lead the operational delivery of security operations, governance, risk, and compliance, strengthening the university's cyber security posture.

You will oversee vulnerability assessments, security controls, incident response, and team leadership, ensuring adherence to privacy, regulatory, and institutional requirements while driving continuous

Qualifications

• Bachelor’s degree in Computer Science, Information Systems or related field.
• Information Security certifications such as CISSP, CISM, CRISC, CISA from ISACA, ISC2 or similar body.
• Minimum of 10 years of progressively responsible experience in information security, including at least 5 years in a leadership role managing enterprise-wide information security programs.
• Minimum of 5 years hands-on experience with information security mitigation and remediation activities.

Responsibilities

• Lead and manage a staff; assign workload, schedule, and timesheets.
• Foster continuous learning and improvement within the team.
• Mentor and develop staff; performance management and training.
• Coordinate Cyber Security Incident Response Team (CSIRT) activities and incident response workflows.
• Maintain Cyber Incident Response Plan and conduct tabletop exercises.
• Collaborate with Safety, Security, and Emergency Management to align incident response with business continuity.
• Oversee delivery, operation, and security of security and governance, risk, and compliance infrastructure and services.
• Establish SLAs, manage vendor relationships, ensure quality and cost-effectiveness.
• Promote cyber security awareness through training and communications.
• Collaborate with IT units to integrate security into cross-functional projects.

Skills

Network security

Cloud security

EDR

SIEM

Risk assessment

Incident response

Regulatory compliance

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

Job description

Full-Time Continuing (35 hours per week) $106,018 to $143,323 per annum October 1, 2026

About Us

MacEwan University is where caring faculty help people connect their passions to their future paths. Located in the heart of Edmonton's diverse and dynamic downtown community, and on the traditional lands of Treaty 6 First Nations and homelands of the Métis people, MacEwan is known for exceptional undergraduate learning. With its dedication to teaching excellence, informed by scholarly research, innovation, and creative activity, MacEwan provides an exceptional collaborative and supportive learning environment with a commitment to human rights, environmental sustainability, and opportunities for community engagement. We are committed to creating an equitable, diverse, inclusive, and welcoming community for all peoples, cultures, and identities.
Our comprehensive undergraduate university offers 55 programs to more than 20,000 full- and part-time students in business, communications, community and human services, design, fine and performing arts, health, humanities, natural science, nursing, public safety, and social science. Through a wide array of experiential learning opportunities, and strategic relationships in the community, we partner with others to produce graduates of stature. Along with a robust grounding in their chosen disciplines, MacEwan students are given durable life skills that prepare them to take on the world.

MacEwan University is seeking a Senior Manager, Information Security for a full-time continuing opportunity with Information Technology Services.

Reporting to the Senior Director, the Senior Manager provides leadership in the operational delivery of IT security operations and governance, risk, and compliance functions. You will strengthen the University’s cyber security posture by overseeing day-to-day security processes, managing vulnerability assessments and security controls, and coordinating operational incident response activities in partnership with the Senior Director. Additionally, you will lead a team of technical professionals, maintain core security technologies and monitor capabilities, and support compliance with privacy, regulatory, and institutional requirements. Through proactive risk management and continuous operational improvement, you play a key role in safeguarding the University’s data and technology assets.

Key responsibilities include:

• Leading and managing staff, including assigning and monitoring workload, preparing schedules, responding to emerging issues, approving timesheets and time off requests;


• Fostering an environment of continuous learning and improvement, and encouraging team members to share ideas and feedback;


• Mentoring and developing staff using a supportive approach, including performance management, quality of service, and work output; ensuring staff are well trained, competent, and supported to be successful in their roles;


• Coordinating and leading Cyber Security Incident Response Team (CSIRT) operational activities, including activating the team and managing response workflows and communication during incidents, supporting the Senior Director as the institutional cyber incident lead, and promptly escalating high-impact decisions;


• Maintaining the Cyber Incident Response Plan and leading regular tabletop exercises to validate readiness;


• Collaborating with the Safety, Security, and Emergency Management department to align incident response activities with crisis management and business continuity structures (including the Emergency Operations Centre);


• Overseeing the delivery, operation, integration, and security of Security Operations and Governance Risk and Compliance infrastructure and services, ensuring they are scalable, reliable, and aligned with institutional needs (e.g., vulnerability management, Managed Security Services Provider (MSSP) security operations centre, endpoint detection and response, information protection, and IT risk register);


• Establishing and monitoring service level agreements (SLAs), managing vendor relationships, and ensuring SecOps and GRC service providers meet expectations for quality, security, and cost-effectiveness;


• Building a culture of cyber security awareness across the institution through training, communications, and consistent practices;


• Collaborating with IT units and the IT and Facilities Project Management Offices to integrate security considerations into cross-functional projects, providing technical guidance, and sharing knowledge and best practices; and


• Maintaining current knowledge of emerging information security technologies and best practices, evaluating their applicability to the University, and identifying opportunities to enhance service delivery through continuous improvement, innovation, and the sharing of knowledge across the team.

Skills

You will have:

• Significant experience in network, cloud, and application security, along with hands‑on experience using cyber security tools such as SIEM and EDR;


• A strong understanding of risk assessment, incident response, and regulatory compliance, particularly within the context of Canadian public sector and post-secondary legislation such as Protection of Privacy Act (POPA) and Access to Information Act (ATIA);


• Knowledge and understanding of change management and process techniques, with the ability to lead/direct change management activities related to cloud services and architecture;


• Familiarity with established security frameworks, including ISO 27000-series, NIST Cybersecurity Framework (CSF), ISACA COBIT 2019, and ITIL 4, provides a foundation for applying structured governance and service management practices;


• Technical proficiency coupled with a customer-focused approach;


• Proven leadership and management skills, including the ability to lead, mentor, and develop staff and foster a positive, productive, and cohesive team environment;


• Commitment to delivering high-quality customer service and improving user satisfaction;


• Strong communication and leadership abilities to effectively guide a diverse team and collaborate with stakeholders at all levels, translating technical concepts into clear, actionable insights;


• Strong interpersonal and teamwork skills to work with an extensive array of individuals both internal and external to the University;


• Excellent analytical, planning, organizational, time management, decision-making and problem-solving skills with keen attention to detail;


• The ability to Lead by example and serves as a positive role model;


• Strong communication skills, both verbal and written, with the ability to convey complex technical information to non-technical end-users;


• The ability to evaluate and formulate recommendations, implementation, and integration;


• Strong project leadership skills; and


• A proactive approach to continuous improvement and operational excellence.

Qualifications

• A minimum of a Bachelor’s Degree in Computer Science, Information Systems or a related field.


• Information Security certifications such as CISSP, CISM, CRISC, CISA from ISACA, ISC2 or similar body.


• A minimum of 10 years of progressively responsible experience in information security, including a minimum of 5 years in a leadership role managing enterprise-wide information security programs.


• A minimum of 5 years of hands‑on experience with information security mitigation and remediation activities.


• Proven experience with cloud-based technology solutions and working with systems in cloud environments like Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP) as well as leading the migration from legacy technologies to modern platforms.


• Strong background in information security and governance, with experience leading control effectiveness and design reviews, and ensuring compliance with privacy standards Protection of Privacy Act (POPA) and Access to Information Act (ATIA).


• Leadership experience in a unionized environment is considered an asset.


• An equivalent combination of education and experience may be considered.

Position Requirements

• This position is on campus only.

When you become part of the MacEwan University team, you will enjoy a competitive salary. Our total compensation package includes:

This position is included under the Out of Scope employee policy (D1015). Applications sourced through this process may be considered for similar opportunities within MacEwan University.

All qualified candidates are encouraged to apply; however,Canadians and permanent residents will be given priority.

MacEwan University is committed to fostering the principles of equity, diversity, and inclusion within our community, and we are dedicated to removing barriers that have been historically encountered and are currently experienced by some members of our society. We welcome and encourage applications from Indigenous peoples, racialized persons, visible minorities, women, persons with disabilities, sexual and gender minorities, and members of all equity-deserving groups. We believe that the diversity of our students, staff, and faculty serves as a strength of our institution and benefit to society. We are committed to ensuring full and inclusive participation for all in our community.

Accessibility Statement

We strive to provide an inclusive and barrier-free work environment, beginning with the hiring process. If you require accommodation, we want to ensure you have the support you need to showcase your abilities. Please contact [e-mail] and we will support you to the best of our ability.

Personal Information Collection Notification

The personal information collected through MacEwan University’s application for employment and is used to determine your qualifications for employment. If your application progresses to the next stage of the hiring process, this information may be shared with non-HR members of the hiring committee and interview panel. This collection is authorized by section 4(c) of the Protection of Privacy Act. For questions about the collection of personal information, contact Human Resources at [e-mail] or phone [phone].