SENIOR SPECIALIST DIGITAL TRUST (VULNERABILITY MANAGEMENT)

City of Toronto; Toronto; Vor Ort; CAD 126.000 - 176.000; Vollzeit

Zusammenfassung

City of Toronto is seeking a Senior Specialist Digital Trust (Vulnerability Management) to lead the vulnerability management program across IT and OT. The role focuses on identifying, prioritizing, and remediating vulnerabilities, with a strong emphasis on Tenable product suites and cross-team collaboration.

The successful candidate will drive end-to-end vulnerability lifecycle, develop enterprise metrics, report to senior management, and coordinate with patch management and external providers.

Qualifikationen

• Extensive vulnerability management experience in IT and OT environments.
• Experience with vulnerability assessment tools, preferably Tenable products.
• Strong ability to lead and mentor staff on vulnerability initiatives.
• Knowledge of information security best practices and risk management.
• Excellent stakeholder communication and collaboration across teams.

Aufgaben

• Leads development, deployment and management of a Vulnerability Management program.
• Collaborates with IT teams and external service providers for VM operations.
• Delivers technical capabilities and guidance for vulnerability management in IT/OT.
• Implements enterprise VM strategy across IT and OT environments.
• Performs and interprets vulnerability assessments on a schedule.
• Drives end-to-end vulnerability lifecycle from discovery to closure.
• Prioritizes vulnerabilities and provides timely reports to stakeholders.
• Ensures remediation in coordination with patch management teams.
• Leads reporting including Key Risk Indicators (KRIs).
• Develops enterprise metrics for vulnerabilities and remediation progress.

Kenntnisse

Vulnerability management

Tenable products

IT security

Leadership

Stakeholder management

OT/ICS security

Risk assessment

Regulatory compliance

Ausbildung

Post-secondary degree in Business, Information Technology, or a related discipline

Tools

Tenable products

Jobbeschreibung

Select how often (in days) to receive an alert: Create Alert

SENIOR SPECIALIST DIGITAL TRUST (VULNERABILITY MANAGEMENT)

Amendment # 1
October 19, 2026 Posting period has been extended.

Job ID: 67534
Job Category: Information & Technology
Division & Section: Toronto Cyber Security, Cyber Operations
Work Location: Metro Hall, 55 John St., Toronto, ON M5V 0C4
Job Type & Duration: Full-time,Permanent Vacancy
Salary Range: $126,000.00 - $176,140.00
Shift Information: Monday to Friday, 35 hours per week
Affiliation: Non-Union
Number of Positions Open: 1
Posting Period: 19-Oct-2026 to 02-Nov-2026

JOB SUMMARY:

To support the execution of the Chief Information Security Officer's (CISO) mandate, cyber vision and strategy, developing, enhancing and supporting Vulnerability Management program and initiatives to all City divisions, agencies and corporations.

The role will ensure timely identification, analysis, prioritization and remediation of vulnerabilities across IT and OT environment, aligning with industry best practice and regulatory frameworks.

MAJOR RESPONSIBILITIES:

• Leads the development, deployment and management of a Vulnerability Management program with a strong focus on Tenable’s product suite.
• Works in partnership with other IT teams and external service providers in the operation of the VM program.
• Delivers expert technical capabilities and guidance for vulnerability management services for IT and OT environments.
• Collaborates and enforces the implementation of an enterprise Vulnerability Management strategy for IT and OT environment.
• Performs, reviews and interprets vulnerability assessments based on established schedule.
• Drives the end-to-end vulnerability lifecycle from discovery to closure.
• Identifies and prioritizes all vulnerabilities and provides timely vulnerability assessment reports to key stakeholders.
• Collaborates with stakeholders to ensure vulnerabilities are understood and remediated promptly.
• Ensures timely follow up with patch management and vulnerability remediation in coordination with support teams.
• Leads and delivers reporting and metrics including Key Risk Indicators (KRIs).
• Develops and reports enterprise-level metrics for vulnerabilities and remediation progress.
• Understands, demonstrates, and educates stakeholders on the real-world impact of threats and vulnerability exploitation in a given environment.
• Leads the development of metrics to accurately track the current state of the VM program, trends, compliance and key performance indicators.
• Prepares and delivers metrics and reports for senior management to show efficiency and compliance of security functions.
• Provides technical leadership and subject matter expertise on vulnerability management risks, remediation strategies, security controls, and technology solutions. Collaborates with technical teams and stakeholders to support the successful delivery of enterprise cybersecurity initiatives.
• Contributes to the development and continuous improvement of vulnerability management strategies, standards, processes and roadmaps to strengthen the City's cybersecurity program and support effective risk management.

QUALIFICATIONS/CERTIFICATIONS:

• Post-secondary degree in Business, Information Technology, or a related discipline, or an equivalent combination of education and experience.
• Extensive experience in vulnerability management within IT and OT environments.
• Experience with Vulnerability Management technologies, methodologies and operational procedures.
• Experience working with vulnerability assessment and scanning tools, preferably Tenable products.
• Experience with vulnerability prioritization, risk assessment, remediation tracking and reporting.
• Demonstrated ability to provide technical leadership, guidance, and mentorship to staff and project teams in the delivery of vulnerability management initiatives.
• Knowledge of Microsoft desktop and server operating systems and related technologies.
• Demonstrated knowledge of SCADA and Operational Technology (OT) systems, with the ability to lead technical discussions and provide subject matter expertise.
• Demonstrated knowledge of information security best practices, methodologies, and techniques.
• Strong stakeholder management, influencing, and communication skills, with the ability to collaborate effectively across technical teams, business partners, leadership, clients, and vendors.
• Strong problem-solving and critical-thinking skills, with the ability to exercise sound judgment and resolve complex technical issues.
• Strong analytical, organizational, and time management skills, with the ability to manage multiple priorities, projects, and deadlines in a fast-paced environment.
• Self-motivated and proactive team player with the ability to take initiative and work independently.
• Ability to work effectively within large-scale transformational initiatives and complex cybersecurity environments.

Please Note:

As a condition of employment, the successful candidate will be required to undergo and maintain a satisfactory police record check, background screening, psychological assessment, and any other security clearances deemed necessary. This requirement reflects the highly sensitive and confidential nature of the information managed by the Toronto Cyber Security Division.

A normal work week is 35 hours, however, unforeseen situation may require extended hours of work with little or no prior notice. In case of a cyber incident or breach, rotation shift, continuous extended hours may be required with little or no prior notice.

Equity, Diversity and Inclusion
The City is an equal opportunity employer, dedicated to creating a workplace culture of inclusiveness that reflects the diverse residents that we serve. Learn more about the City’s commitment to employment equity .