Senior Manager, Security Engineering Toronto, ON (Hybrid) Reports to: Director, Enterprise Architecture About this Role Rates.Ca operates high-traffic, regulated financial and insurance platforms where security, data protection, and operational resilience are core business requirements. The Senior Manager, Security Engineering will: Reduce real security risk over time Embed security and compliance into engineering workflows without slowing delivery Lead cyber‑incident readiness and response, including cyber‑insurance coordination Use AI responsibly to improve security signal quality, speed, and coverage What You Will Lead Security Engineer and cross‑functional security initiatives Secure SDLC standards and enforcement across product teams Third‑party risk management and vendor security oversight Cyber‑incident command for security events (in partnership with Ops) Data governance guardrails in collaboration with Platform and Engineering Core Responsibilities Security Engineering & Secure SDLC Own Secure SDLC standards and tooling embedded into CI/CD and delivery workflows Drive threat modeling, design reviews, and security architecture decisions Ensure security findings are actionable, prioritised, and resolved predictably Balance risk reduction with delivery velocity using a risk‑based approach Compliance, Risk & Third‑Party Security Lead compliance maturity aligned to PCI DSS, NIST CSF, and similar frameworks Own audit readiness, evidence collection, and remediation tracking Lead third‑party security risk assessments for critical vendors and integrations Translate regulatory and insurer requirements into practical engineering controls Cyber Resilience & Incident Response Own cyber‑incident readiness, response playbooks, and escalation paths Act as security incident commander during breaches and major security events Coordinate with: Engineering Operations Legal & Privacy o Executive leadership Cyber‑insurance carriers and forensics partners Ensure post‑incident learning drives systemic improvement AI‑Augmented Security Security Engineering at Rates.Ca is AI‑enabled by design.



You are expected to: Govern enterprise use of AI across Engineering from a security and risk lens Use AI to: Triage and prioritise security findings Explain vulnerabilities and remediation paths to software engineers Reduce noise in alerts and security telemetry Accelerate audit evidence preparation and incident documentation Ensure all AI‑assisted security outputs are: Reviewable by humans Auditable and traceable Acceptable to regulators and insurers (AI accelerates analysis – humans remain accountable for security decisions) OKRs & KPIs (Performance‑Critical) Primary OKR Ownership Embed security, compliance, and data governance into delivery without slowing it down. KPIs You Own (Trend‑Based) Critical and high‑severity vulnerability exposure (open vs SLA) Percentage of security issues detected pre‑production Audit findings count and severity Third‑party risk assessment coverage and residual risk trend Secure SDLC coverage across services Cyber‑incident readiness and response effectiveness AI‑Related Outcomes Improved signal‑to‑noise in vulnerability management Faster, higher‑quality incident analysis and documentation No security or compliance incidents caused by AI misuse; improving these trends over time is a core performance expectation. What You Bring 12+ years in security engineering, application security, or cloud security Experience leading security engineers or security programs at scale Cloud security (AWS) Secure SDLC and CI/CD security Incident response and breach handling Experience operating in regulated environments Comfort owning decisions during high‑pressure security incidents Experience with PCI DSS, NIST CSF,



or similar frameworks Experience coordinating cyber‑insurance response and forensics Familiarity with modern engineering stacks (Node/Vue, PHP/Drupal, cloud‑native) Experience using or governing AI‑assisted security tooling Why Join Us? We’re a team of curious minds who love to learn, build, and grow together. We value transparency, ownership, and continuous improvement. You’ll have the freedom to innovate and the support to thrive. Benefits You get your Birthday off! This role requires two in‑office days per week (Tuesday and Thursday), with an additional Wednesday in the office every other week 4 weeks of "Work from Anywhere Program" every year Full employer‑paid advantages RRSP Matching Program with Wealthsimple Annual holiday festivities, free lunches and so much more Helping you help others with our paid volunteer programs Employee satisfaction survey for you to voice your opinion on working at Rates.Ca Group Ltd. Free access to LinkedIn Learning Lounge and games room - ping‑pong, pool, foosball, and more! The compensation package consists of a competitive salary, benefits, and an incentive bonus. Rates.Ca Group Ltd. and its subsidiaries are committed to being an Equal Opportunity Employer. We provide equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories such as sexual orientation. We believe that diversity, equity and inclusion are critical to our mission - creating a foundation for a creative workplace that leads to innovation and growth. We value diversity and strive to create an inclusive, accessible workplace where all individuals feel valued, respected, and heard. We are committed to working with and providing accommodations to candidates and employees with physical or mental disabilities. If you require accommodation in order to search for a job opening or to complete any part of the application or hiring process, please send an email to #J-18808-Ljbffr

📌 Senior Manager, Security Engineering (Toronto)
🏢 Rates.ca
📍 Toronto