At the University of Waterloo, we create and promote a culture where everyone can reach their full potential. As an employee, you get support & opportunities that empower you to advance your career. Explore how we can bring big ideas to life, together. The University is a welcoming workplace for those of all abilities, interests, and expertise. As part of our workforce, you can do what you do best, every day. Learn more about our recruitment process.

Job Requisition ID: 2026-03490 Time Type: Full time Employee Group: Staff Job Category: IT Security Employment Type: Permanent Department: Information Systems and Technology
- Information Security Services Hiring Range: $113,285.63
- $141,607.03 Posting Information: This posting is for an existing vacancy. The internal posting deadline for this position is November 12, 2026, at 11:59PM.

Job Description

Primary Purpose This position is accountable for ensuring the effective operation of the Information Security Operations Centre (SOC) to support the information security objectives of the University. The incumbent provides leadership for information security monitoring, incident response and related operations, ensuring service objectives are met. The position provides operational and technical leadership to the information security operations team and advises senior leadership on information security risks, priorities, and opportunities.

Key Accountabilities

Establishes priorities and leads the ongoing development of network security monitoring, network access control and security incident response at the University by: Identifying threats to the campus IT infrastructure, assessing their potential impact, and developing strategies to detect, and mitigate those threats.



Participating in security architecture development to ensure threats and information security risks are appropriately assessed and addressed. Ensuring that the technology and capabilities employed by Information Security Services evolve in response to the changing threat landscape, technological developments and University requirements. Advising senior leadership on significant information security risks, operational priorities, and recommended mitigation strategies. Collaborating with campus stakeholders to develop and promulgate information security standards. Working with ISS and IST leadership to respond to audit findings as appropriate. Ensures the effective utilization, deployment, and development of human and capital resources for information security operations at the University Hires and develops the information security operations team. Coaches, trains and develops employees to enable their career development and maintain the specialized capabilities by the function. Conducts regular reviews with direct reports and establishes performance expectations and priorities. Allocates resources and establishes priorities to maintain effective service delivery and respond to changing operational requirements. Leads the ongoing operations and performance of the information security operations function Ensures resources are available to respond to requests of the SOC.



Establishes and continuously improves operational processes and procedures related to information security. Monitors performance and identifies opportunities to improve service effectiveness, quality and responsiveness. Coordinates resources and activities across relevant IT functions to support effective resolution of security incidents and operational issues. May be required to act operationally as Chief Information Security Officer, in their absence. Provides specialized technical leadership and expertise for information security operations in the areas of: Security Monitoring Incident Response Forensics Network access controls (e.g. Firewalls, ACLs, NAC, etc.) SSL/TLS Certificate Support Compliance scanning and reporting Threat intelligence Information sharing with other institutions and partner organization Security risk assessment and mitigation Security operations processes and controls Provides leadership and direction in response to significant information security risks and incidents by Providing technical and operational leadership during security incidents. Assessing the nature, severity and potential impact of security incidents and determining appropriate response and escalation. Coordinating with relevant technical and institutional stakeholders to support timely resolution and mitigation. Conducting post-incident reviews and identifying opportunities to strengthen security controls, processes and capabilities. Providing advice and recommendations to senior leadership regarding significant security risks, incidents and required actions.

Required Qualifications

Education University degree in a computing discipline together with relevant experience, or an equivalent combination of education and experience. Technical security certification (e.g. GIAC) is an asset.

📌 Manager, Information Security Operations (London)
🏢 University of Waterloo
📍 London