Senior IT Manager - Threat and Vulnerability ~Health insurance ~ Vision insurance The Senior Manager of the Vulnerability and Attack Surface Management Team is a critical technical leadership role within our Information Security team with end-to-end responsibility for strategy, oversight and execution of the Company Vulnerability Management and Attack Surface Management capabilities. This role requires a blend of strategic vision, strong leadership, technical expertise, superb communications, outstanding analytical and critical thinking to effectively lead and guide a team of security experts. Continuously build and implement a strategic vision for the Vulnerability and Attack Surface Management program and its capabilities in alignment with organization’s Information Security and Information Technology programs, program goals and business objectives.

Drive all efforts crucial to ensure timely identification, analysis, and remediation of vulnerabilities across all IT assets, including applications, servers, networks, and endpoints. Establish and maintain solid relationships with key partners, including business capabilities, infrastructure, networking, application development, compliance, communications and other executive and non-executive leadership. Continuously evaluate emerging security threats, trends, and technologies for continuous analysis and improvement of the organization’s vulnerability and attack surface management capabilities.

Be responsible for the configuration, operation, and maintenance of vulnerability testing and management platforms, attack surface management technologies,



and other related tooling. Provide technical guidance and support for vulnerability assessments, penetration testing, and attack surface management activities. Maintain comprehensive vulnerability and attack surface management policies, standards, processes and procedures, and documentation thereof.

Lead ongoing execution and advancement of vulnerability scanning and assessment tools, techniques, and procedures. Track and report on the status of vulnerability remediation and attack surface reduction efforts, ensuring compliance with internal policies and external regulatory requirements. Lead, mentor, and develop a team of vulnerability and attack surface management professionals, providing regular performance feedback and career development opportunities.

Ensure compliance with all relevant laws, regulations, and standards related to information security, vulnerability management, and attack surface management. Advanced experience in information security, with at least 5 years in a hands‑on vulnerability management and/or attack surface management role. Understand the nature of vulnerabilities and weaknesses, and can articulate detection and remediation methods for vulnerabilities to technical and non-technical audiences.

Expert‑level understanding of vulnerability and attack surface testing and management techniques, processes and platforms.

Experience in designing, building, testing, implementing and refining workflows of varying complexity. Solid understanding of common security frameworks (e.g., Relevant industry and technical training and/or certifications. #

📌 Senior IT Manager - Threat and Vulnerability (Toronto)
🏢 Tree Top Staffing
📍 Toronto