Vulnerability Risk Manager – Remediation & Strategy

Kinaxis; Quebec; Hybrid; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible vacation

Flexible work options

Well-being programs

Virtual fitness classes

Mentorship programs

Hackathons

Job summary

Kinaxis is seeking a Vulnerability Management Specialist to lead enterprise vulnerability management across Kinaxis assets, including SAAS environments. You will translate threat intelligence into risk-based priorities and coordinate remediation with cross-functional teams to reduce exposure.

We expect 3–5 years in IT security, a relevant degree, and strong communication skills. The role offers hybrid work arrangements and opportunities to shape security programs at Kinaxis.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Management Systems, or equivalent.
• 3–5 years in IT Operations or IT Security within a global organization.
• Certifications such as CompTIA Security+, CySA+, or GIAC (GEVA/GCED) preferred.
• Understanding of governance frameworks (NIST CSF, NIST SP 800-40/53, ISO 27000 series, CIS Controls, SOC 1/2, PCI-DSS) preferred.
• Strong written and verbal communication skills.

Responsibilities

• Administer and tune the enterprise vulnerability management platform for Kinaxis assets.
• Apply risk-based prioritization using threat intel and CVSS metrics.
• Coordinate remediation with Corporate IT, Cloud Services and Product teams to close tickets.
• Produce quarterly vulnerability reports and maintain runbooks.
• Design and operate AI-assisted workflows for vulnerability enrichment and reporting with proper controls.

Skills

Strong communicator

Education

Bachelor’s degree in Information Security or related field

Job description

Kinaxis is seeking a Vulnerability Management Specialist to lead enterprise vulnerability management across Kinaxis assets, including SAAS environments. You will translate threat intelligence into risk-based priorities and coordinate remediation with cross-functional teams to reduce exposure.

We expect 3–5 years in IT security, a relevant degree, and strong communication skills. The role offers hybrid work arrangements and opportunities to shape security programs at Kinaxis.