PositionManager, Application SecurityOverviewThe Manager, Application Security will lead the organization’s application security program, ensuring secure design, development, and deployment of applications. This role requires deep technical expertise in threat modeling, secure coding practices, and advanced security testing methodologies, including SAST, SCA, DAST, and penetration testing. The manager will collaborate with engineering, DevOps, and product teams to embed security into the SDLC and drive continuous improvement.What you will doDefine and execute the application security roadmap aligned with business objectives.Manage and mentor a team of application security engineers and analysts.Establish KPIs and metrics for security posture and program success.Integrate security controls into CI/CD pipelines.Oversee threat modeling for critical applications and architectures.Manage SAST and DAST tools.Coordinate and review penetration testing activities for web, mobile, and API applications with vendors and internal stakeholders.Identify, assess, and prioritize application security risks.Ensure compliance with OWASP Top 10, NIST, ISO 27001, and regulatory requirements.Provide executive-level reporting on vulnerabilities and remediation progress.Partner with development teams to promote secure coding practices.Deliver training and awareness programs on application security.Act as a subject matter expert for application security across the organization.What you will bringBachelor’s degree in Computer Science, Information Security, or related field.7+ years in application security or software development with security focus.3+ years in a leadership or managerial role.Hands‑on experience with threat modeling, SAST, DAST, and penetration testing.Technical Skills:Proficiency with tools like Veracode,



Checkmarx, Burp Suite, OWASP ZAP, and similar.Strong understanding of secure coding principles and vulnerability remediation.Familiarity with cloud security (AWS, Azure, GCP).Certifications (Preferred): CISSP, CSSLP, OSCP, GWAPT, or equivalent.Core CompetenciesStrategic thinking and ability to influence at all levels.Excellent communication and stakeholder management skills.Strong analytical and problem‑solving abilities.Salary$107,800 - $157,800annually (base salary only, without bonuses or commissions).BenefitsCareer Development: opportunities for advancement, access to learning programs, and up to $2,000 annually toward education reimbursement.Health & Wellness: flexible health and dental perks, plus a $5,000 mental health benefit.Time Off: in addition to regular vacation and personal days, support for a community volunteer day.Financial Security: company-matching pension plan, share ownership program, and additional investment options.Rewards and Recognition: employee recognition programs, service milestone celebrations, employee discounts, and more.Community Emphasis: workplace where employees feel connected and supported through ERGs, mentorship programs, social clubs and events.Equal Opportunity StatementWe’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact [email protected]. All information provided will be handled in accordance with applicable laws and Canada Life policies.Legal NoticeCanada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.ContactRequisition ID: 5810Category: Digital TechnologyLocation: Toronto, Ontario, ON, M5T 3M3Date: Apr 15, 2026#J-18808-Ljbffr

📌 Manager, Application Security - $107,800 - $157,800 A Year (Winnipeg)
🏢 Canada Life
📍 Winnipeg