About Mod OpMod Op is a full-service advertising agency able to offer clients a full suite of solutions. Mod Op can offer you access to low-cost, high-quality health care options and a team of enthusiastic, collaborative and motivated coworkers who see career development and personal development as intertwined.
At Mod Op, we’re more than just an agency—we’re a team of forward-thinking professionals who are passionate about driving client success. We believe in fostering meaningful relationships, collaborating across disciplines, and delivering impactful solutions that help businesses grow. If you are a strategic thinker with a passion for building lasting client partnerships, we’d love to hear from you. Join us and be part of a company that values innovation, creativity, and excellence in everything we do.

About the role
The Systems and Data Security Manager is a hands‑on IT security position responsible for operating and maintaining the organization’s security controls across systems, cloud infrastructure, data, and development environments. Reporting to the Senior IT Director, this role owns day‑to‑day security operations, SOC 2 Type II compliance execution, cloud and identity security, and security monitoring.
This role also leads the implementation and automation of compliance and security processes to increase efficiency, visibility, and scalability across the organization.
The position works closely with Development and the compliance‑focused IT team to ensure controls are effective, documented, and continuously validated.
What you’ll doSecurity Governance & Compliance
- Manage day‑to‑day operation of an established SOC 2 Type II control workplace
- Own continuous evidence collection, documentation, and audit readiness
- Coordinate third‑party assessments, including penetration testing,



and track remediation through completion
- Maintain security policies, procedures, and control documentation as systems change
- Work directly with auditors, Development, and the compliance‑focused IT team to support audits and close findings
- Create, assign, audit, and revoke IAM roles and service accounts across cloud platforms, ensuring least‑privilege access
- Conduct vendor risk assessments, including security reviews and documentation tracking
- Oversee infrastructure vulnerability scanning and enforce patch management SLAs across cloud and hosted environments
- Lead and document quarterly access reviews across systems and cloud platforms
- Implement and manage compliance automation platforms such as Vanta, Drata, or Secureframe
- Automate evidence collection, access reviews, and compliance reporting processes
- Build and maintain compliance dashboards to provide leadership visibility into control health and audit readiness
- Measure and report efficiency gains achieved through compliance and security automationIdentity & Cloud Security
- Operate and maintain security controls for Microsoft Entra ID, AWS and Google Cloud Platform environments
- Manage identity, access, and privilege controls across cloud and enterprise systems, including GCP IAM roles, policies and service accounts
- Ensure secure configuration, hardening, and access reviews are performed regularlySecurity Monitoring & Incident Response
- Manage Entra ID,



AWS and GCP security logging, monitoring, and alerting
- Investigate and respond to security alerts and incidents
- Perform root cause analysis and implement corrective actions
- Investigate and remediate access‑related incidents, including misconfigured roles or unauthorized permissions
- Leverage AI‑powered security tools for threat detection, anomaly identification, and alert triageDevelopment & AI Security
- Implement and maintain security controls within development and automated build and deployment processes
- Partner with Development on vulnerability management, code scanning, and application security
- Apply security controls and governance for AI systems, including data access, model usage, and risk managementApplication Usage & Budget Management
- Monitor application usage and spend across agency‑hosted environments for internal and client‑facing applications
- Define acceptable usage thresholds and budget bands for applications and environments
- Implement alerts, automation, and reporting for usage or cost variances
- Investigate, resolve, and document usage and budget variances
- Own application budgets related to hosted environments and route issues or overages to appropriate stakeholdersAgency & Client Onboarding & Offboarding
- Support onboarding of new agencies and clients by evaluating applications, technologies, and usage requirements
- Assess security, compliance, and SOC 2 Type II impact to existing environments
- Estimate infrastructure usage and cost impact and align onboarding to established usage and budget bands
- Support client data ingestion, migration and validation, ensuring security and data integrity
- Manage client offboarding activities, including sunsetting services an

📌 Systems And Data Security Manager (Toronto)
🏢 Mod Op
📍 Toronto