Vulnerability Risk Lead — Hybrid & Flexible Work

Kinaxis; Toronto; Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Flexible vacation

Flexible work options

Well-being programs

Virtual fitness classes

Mentorship and career development

Job summary

Kinaxis is seeking a Vulnerability Management Specialist to own the enterprise vulnerability program. You will discover, prioritize by risk, and drive remediation for Kinaxis assets within a global security team.

This role collaborates with Corporate IT, SaaS Operations, Cloud Platform Engineering, Product Development and Business Systems to reduce attack surfaces. The incumbent will configure the platform, translate threat intel into actionable priorities, and lead remediation with clear

Qualifications

• Bachelor’s degree or equivalent experience in information security or IT
• 3–5 years in IT operations/security; high-tech global org preferred
• Industry certifications such as CompTIA Security+, CySA+, GIAC are desirable
• Understanding governance and control frameworks related to vulnerability management is a plus

Responsibilities

• Administer and tune the vulnerability management platform across Kinaxis assets
• Prioritize remediation based on risk, CVSS, asset criticality, and business context
• Coordinate remediation with IT, Cloud, and Product teams to meet SLAs
• Produce quarterly vulnerability reports and maintain runbooks and standards

Skills

Security concepts

Threat intelligence

Vulnerability management

Cross-functional collaboration

Risk assessment

Education

Bachelor’s degree in Information Security, Computer Science, Information Management Systems, or similar

Industry certifications (CompTIA Security+, CySA+, GIAC)

Tools

Vulnerability management platform

CMDB

EDR

Job description

Kinaxis is seeking a Vulnerability Management Specialist to own the enterprise vulnerability program. You will discover, prioritize by risk, and drive remediation for Kinaxis assets within a global security team.

This role collaborates with Corporate IT, SaaS Operations, Cloud Platform Engineering, Product Development and Business Systems to reduce attack surfaces. The incumbent will configure the platform, translate threat intel into actionable priorities, and lead remediation with clear