Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving chance into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Ready to be part of the action? The Cloud Security Engineer is responsible for researching, deploying, and maintaining security technologies that support our defense-in-depth strategy in accordance with TMX regulations and guidelines. Reporting to the Manager of Security Engineering, the Cloud Security Engineer is responsible for the design, planning, testing, implementation, and administration of industry-accepted cybersecurity principles, practices, and systems. This role ensures the protection of information assets processed, stored, or transmitted across TMX Group’s multi-cloud instances. As a vital member of the Information Security Team, you will act as the key liaison between Security Engineering, Cloud Technology, and Infrastructure Support teams to drive security alignment, risk mitigation, and compliance. Job Location: Hybrid (2-3 days/week in office) - based in Toronto, ON. Key Accountabilities Cloud Security Operations & Operations Support: Lead the implementation, configuration,



and day-to-day operation of cybersecurity technologies within TMX Group multi-cloud environments across various business units. Architecture & Resilient Design: Assist in designing and implementing resilient information security architecture and controls for optimal threat protection, continuous monitoring, and effective Incident Response in the cloud. Vulnerability Analysis & Threat Intelligence: Analyze threat and vulnerability feeds for applicability to TMX’s cloud footprint; perform compensating controls analysis, validate control efficacy, and resolve false-positive finding assessment results. Cross-Functional Collaboration & Influence: Act as the primary liaison between Security Engineering and Cloud Infrastructure teams, influencing internal partners to ensure cloud solutions align with TMX policies, architectural standards, and security programs. Risk Management & Compliance Monitoring: Monitor and advise on IT-related security compliance, partnering with stakeholders to execute risk management workflows that identify, remediate, and report on cloud security risks. Automation & Continuous Improvement: Develop and implement key security metrics, measurement criteria, and automated governance to ensure ongoing compliance, control verification, and proactive threat mitigation. Stakeholder Support & Guidance: Advise internal teams on emerging cloud threats, regulatory expectations, and standard methodologies while providing mentorship to technical partners. Must Have(s) Cloud Platform Expertise: Hands-on experience securing at least one major cloud provider (AWS, Azure, or GCP), with deep technical knowledge of native security configurations, compute, storage, and network models. Identity & Access Management (IAM): Proven ability to design and manage Role-Based Access Controls (RBAC), Attribute-Based Access Controls (ABAC), federation (SAML/OIDC), Single Sign-On (SSO), and strictly enforce least privilege in multi-

📌 Cloud Security Engineer (Toronto)
🏢 TMX Group
📍 Toronto