Manager, Security Compliance & Engineering Ontario

Overview

Manager, Security Compliance & Engineering

Next Horizon is here. Fueled by investments in talent and technology, our bold strategy to transform is nearly complete.

At Gore Mutual, we’ve always set ourselves apart as a modern mutual that does good. Now, we’re proudly building on that legacy to transform our company—and our industry—for the better.

Our path forward sharpens our focus on business performance, driven by leading technology, innovation and an agile, high-performing culture. With Gore Mutual and Beneva announcing their intent to merge in 2026, we’ll be uniting two well-established, financially strong, and trusted brands to become the strongest mutual insurer in Canada, ensuring Canadians have purpose-driven insurance options for generations to come. Come join us.

Working within IT Security, the Manager, Security Compliance and Engineering will be responsible for leading efforts to manage the Company’s governance and compliance responsibilities related to 3rd Party Risk, regulatory compliance, security policy development and maintenance of the associated workflows and processes.

The role will also manage a team of technical analysts and engineers responsible for vulnerability management, threat hunting, best-of-class security tooling and practices, and collaborating closely with key stakeholders on security initiatives across Gore Mutual.

Manage the company’s documented security governance and compliance program

• Create, review, implement and update company-wide information security policies and procedures in alignment with the Enterprise Security Risk Framework.
• Review internal security policies and guidance to ensure alignment with industry standards and frameworks such as NIST & CIS.
• Perform internal compliance assessments against standards such as the PCI-DSS and regulatory entities such as AMF and PIPEDA.
• Monitor IT systems for compliance with security policy.
• Managing security audits and vulnerability and threat assessments

Operate the 3rd Party Risk Management Framework

• Co-ordinate with the ERM Team to ensure alignment with the 3rd Party Risk Framework
• Conduct security assessments of third parties.
• Review vendor security controls and certifications.
• Monitor third-party data breaches or cyber threats.
• Advise on remediation plans for security gaps identified in third-party systems.
• Continually evaluate and modernize 3rd party risk management policies and practices to ensure currency with threat landscape and risk trends.

Lead the security engineering program, implement and develop new security solutions to address key risks and enable ongoing maturity of the company’s security posture.

• Understand and baseline our infrastructure security stance.
• Lead and participate in technical design and product discussions with leaders across the organization and company.
• Collaborate with security leadership to define strategy, roadmap, OKRs, priorities, and key metrics for the Security Engineering team.
• Maintain architecture diagrams and documentation as environment evolves.
• Hire, develop and lead an inclusive, engaged, and high performing team.

Maintain currency with the latest security risks and disclosures and ensure the company's infrastructure is sufficiently protected.

• Work with other IT and Security teams to keep a holistic view of risks within Gore Mutual environments.
• Update and monitor threat intelligence feeds for technologies used by Gore Mutual.
• Operate the vulnerability management program, working with Infrastructure teams to monitor and provide target SLAs for patch management.

Manage Delivery of Security Projects across the Company’s Technology stack

• Work with Information Technology, Project Management Office and Procurement to oversee delivery of key security projects.
• Apply project management methodologies to ensure adherence to scope, timelines and budget.
• Maintain JIRA and other project tracking tools as necessary
• Document, report on and manage project progress, risks and issues

• Diploma or bachelor's degree in information technology/security management with relevant experience
• 10+ years of experience as a Manager of a technical team in a…