Senior Manager, Security Architecture and OperationsRBC north tower, Toronto, ON M5J, CanadaJob DescriptionPosted Thursday, June 4, 2026 at 4:00 a.M. | Expires Friday, June 19, 2026 at 3:59 a.M.We are hiring a Senior Manager, Security Architecture and Operations!Reporting To: AVP, Information SecurityFull‑timeSalary Range: $130,000-$150,000Hours of Work: 8:30 a.M. – 5:00 p.M.Grade: 16.4The OpportunityA strategic and integral member of the Information Security Team, reporting to the AVP, Information Security, is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate will contribute to the management and continuous improvement of multiple security programs. The position entails the development, implementation, and maintenance of security controls through people, processes, and technology across the organization.Required SkillsKnowledgeable about architecture & design principles, network security, application security, vulnerability management, and incident management principles.Assess the threat landscape and work internally to protect the organization from risk.At least 8 years of experience in security operations and system design across on‑premise infrastructure, cloud infrastructure, applications, and user endpoints infrastructure.Effective and dynamic communicator.Primary Duties and ResponsibilitiesMaintain secure, resilient enterprise‑grade processes in tandem with various IT stakeholders.Maintain oversight of security systems and security configuration administration for on‑premise and cloud systems.Actively monitor, assess, and recommend tactical and strategic initiatives based on emerging threats.Prepare reports to Information Security and IT Leadership to showcase the current security posture.Protect systems in compliance with Information security policies and standards such as ISO 27001 and SOC 2.Manage a team of Information Security professionals across multiple programs.Influence internal and external partners to ensure solutions align with the organization’s policies, programs, architectural recommendations, and Information Security standards.Attend technical project and implementation meetings and serve as security ambassador for on‑premise and cloud systems.Manage threat and vulnerability management activities, recommend treatment plans,



and communicate information about risks.Support documentation of risks and mitigating controls, including policy updates.Security Operations and Incident Management ProgramLead the implementation, configuration, and daily operation of Information Security technologies in First National environments.Act as a key figure in incident response, tracking occurrence and resolution with strict documentation and reporting.Orchestrate the incident response process within the department, working with key stakeholders.Manage third‑party security partners, ensuring objectives are met and continuously improving processes.Participate in Incident Tabletop exercises.Streamline, mature, and automate Incident Response playbooks and processes.Vulnerability Management ProgramAnalyze threat and vulnerability feeds for applicability, perform compensating control analysis, and validate efficacy of existing controls.Lead the team to perform security research, analysis, assessments, and support penetration testing and remediation actions.Coordinate periodical penetration testing and remediation tracking.Conduct application and network vulnerability assessments to identify vulnerabilities and develop remediation plans.Guide and assist IT stakeholders during remediation.Develop and mature the Offensive Security Program, including web application penetration testing and red/purple teaming.Application Security ProgramEnsure coverage and remediation of secure code review with Application Development stakeholders (SAST & DAST).Integrate security controls within the development pipeline to provide early security control gates.Define, develop, socialize, and execute long‑term application security roadmap with IT groups.Assist in evaluation, selection, onboarding,



and management of AppSec vendors and tools.Perform periodic threat modeling and maintain the model for currency and tracking risk remediation.Assess IT control elements to mitigate security risks regarding confidentiality, integrity, and availability.Audit and Compliance ManagementSupport the Information Security Department to provide evidence for audits and remediations.Guide and supervise compliance to ensure controls function properly.Advise on development and implementation of Information Security metrics and reporting.Perform compliance reporting to assure coverage and effectiveness of controls.Conduct secure configuration audits, certificate scanning, firewall rule base reviews, and WAF configurations.Education / Certification / Experience Requirements3+ years of experience with Microsoft Azure platform capabilities, best practices, and security toolsets.3+ years of security system administration and engineering experience in on‑premise and/or cloud infrastructure.2+ years of SOC experience or responding to cyber security investigations.Certifications such as CCSP, CISSP, or CISM are preferred.Experience with MS Sentinel and Microsoft security products such as Defender for Endpoint, Defender for Identity, Defender for Cloud.Experience in incident response and forensics is a strong asset.Familiarity with MITRE ATT&CK framework.Fundamental network security understanding.Skills and AttributesTrack record of planning and executing complex work efforts.Strong interpersonal communication, analysis, and writing skills.Ability to align management and leadership strategies in projects.Effective collaboration with business unit and IT department managers.Superior verbal and written communication skills.Team player.BenefitsHighly competitive compensation package which includes base salary, bonus, benefits, and career advancement opportunities. Eligibility for benefits is dependent on employment terms.Equal Opportunity EmployerFirst National is an equal prospect employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation, or any other category protected by law.First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at [email protected] if you need an accommodation at any point in the recruitment process.#J-18808-Ljbffr

📌 Senior Manager, Security Architecture And Operations - C$130,000 - C$150,000 A Year (Winnipeg)
🏢 First National
📍 Winnipeg