Manager of Information Technology Security

Start : Immediate
Toronto, Ontario

Position Responsibilities:

To manage a team of 3-4 Security analysts, performing the following tasks:

• Manage day-to-day operations of the in-place security solutions and identify, investigate and resolve security breaches detected by those systems;
• Manage the implementation of new security solutions, and vulnerability audits and assessments;
• Manage the creation and or maintenance of policies, standards, baselines, guidelines and procedures.
• Manage the IT Disaster Recovery Plan. Ensure that all new IT systems are covered by a plan.
• Direct and coordinate tests of the Disaster Recovery Plan, ensure documentation and plans are updated, as may be warranted by test results.
• Direct the planning and design of the corporate Business Continuity Plan.
• Ensure that your team monitors all in-place security solutions for efficient and appropriate operations. Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise and implement measures for appropriate resolution of anomalies.
• Manage the collaboration with the other IT groups, perform the deployment, integration and initial configuration of all new IT security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's IT security documents specifically.
• Manage the design and execute vulnerability assessments, penetration tests and security audits.
• Ensure that the creation of enterprise IT security documents (policies, standards, baselines, guidelines and procedures)is done in a timely fashion as technology changes.

Education and Background Requirements:

At least 3 years (ideally 5+) of management of an IT team

At least 2 years (ideally more) of managing an IT Security team.
Hands-on experience as a security analyst.
University degree in the field of computer science

If you have one or more of the following certifications: CompTIA Security+; GIAC Information Security Fundamentals; Microsoft Certified Systems Administrator: Security; Associate of (ISC)2 this is a very strong asset but not a requirement for the position.
CISSP & CISA certifications they would be very strong assets for this position.