Select how often (in days) to receive an alert:

At Sonova, we envision a world where everyone can enjoy the delight of hearing. This vision inspires us and fuels our commitment to developing innovative solutions that improve hearing health and human connection - from personal audio devices and wireless communication systems to hearing aids and cochlear implants. We're dedicated to providing outstanding customer experiences through our global audiological care services, ensuring that everyone has the chance to engage fully with the world around them.

Guided by a culture of continuous improvement that fosters resilience and self-motivation, our team is united by a shared commitment to excellence and a deep sense of pride in our work, each of us playing a vital role in creating meaningful change,

Here you’ll find a diverse range of opportunities that span both consumer and medical solutions and the freedom to shape your career while making an impact on the lives of others. Join us in our mission to create a more connected world, where every voice is heard and every story matters.

Senior IT Cyber Security Specialist Senior IT Security Specialist

Are you passionate about cybersecurity and reducing organizational risk through proactive vulnerability management? We are seeking a Senior IT Security Specialist, Vulnerability Operations to play a critical role in identifying, assessing, prioritizing, and managing vulnerabilities across Sonova's global technology environment.

This hands-on cybersecurity role is responsible for driving the vulnerability management lifecycle, partnering with technical and business stakeholders to ensure risks are effectively communicated, monitored, and remediated. You'll leverage automation,



threat intelligence, and AI-assisted capabilities to strengthen Sonova's security posture and continuously improve vulnerability operations.

What You'll Do

Lead vulnerability management activities, including scanning, analysis, risk assessment, reporting, and remediation tracking across enterprise environments.

Partner with application owners, infrastructure teams, service providers, and security stakeholders to prioritize and address vulnerabilities based on business risk.

Drive remediation efforts by coordinating patch management activities and supporting teams through critical vulnerability resolution.

Utilize threat intelligence, exploitability data, and business context to prioritize security risks and improve decision-making.

Leverage automation and AI-assisted tools to enhance vulnerability analysis, prioritization, and operational efficiency.

Monitor and manage Sonova's external attack surface to identify emerging exposure risks and strengthen security defenses.

Develop and deliver vulnerability management training and guidance to technical stakeholders and business partners.

Create executive and operational reporting on vulnerability trends, risk exposure, remediation progress, and compliance status.

Collaborate with internal and external partners to improve vulnerability management processes,



technologies, and security practices.

Support security investigations and compliance-related activities when required.

What You'll Bring

Education

Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience

One or more of the following certifications is preferred:

GIAC (GCIH or similar), CISA, CompTIA Security+, Certified Ethical Hacker (CEH), CCNA, Comparable cybersecurity certifications

Experience

Hands-on experience in vulnerability management, cybersecurity operations, or security risk management

Experience working with vulnerability management tools such as Nessus, Qualys, or similar platforms

Experience coordinating remediation efforts across multiple technical teams

Familiarity with cloud environments, including IaaS, PaaS, and SaaS platforms

Experience working with external vendors and managed security service providers

Technical Skills

Strong understanding of vulnerability management frameworks and best practices

Knowledge of security standards and frameworks, including OWASP, NIST, and CIS Benchmarks

Solid understanding of networking concepts, including TCP/IP, DNS, VPNs, and related protocols

Experience with Windows, Linux, Unix, and macOS environments

Familiarity with web application security tools and vulnerabilities, including Burp Suite and OWASP ZAP

Experience with patch management processes and platforms

Proficiency with collaboration and workflow tools such as Jira, Confluence, Microsoft Teams, and Slack

Strong analytical and problem-solving abilities

Ability to evaluate risk and communicate

📌 Senior IT Cyber Security Specialist (Kitchener)
🏢 Sonova Group
📍 Kitchener