Senior Manager, Information Security - Information Technology Services

Competition Number: 26.09.234

Category:
Full-Time Continuing (35 hours per week)

Salary: $106,018 to $143,323 per annum

Closing Date:
October 1, 2026

Mac Ewan University is seeking a Senior Manager, Information Security for a full-time continuing opportunity with Information Technology Services.

Reporting to the Senior Director, the Senior Manager provides leadership in the operational delivery of IT security operations and governance, risk, and compliance functions. You will strengthen the University's cyber security posture by overseeing day-to-day security processes, managing vulnerability assessments and security controls, and coordinating operational incident response activities in partnership with the Senior Director. Additionally, you will lead a team of technical professionals, maintain core security technologies and monitor capabilities, and support compliance with privacy, regulatory, and institutional requirements.

Through proactive risk management and continuous operational improvement, you play a key role in safeguarding the University's data and technology assets.

Key responsibilities include:

• Leading and managing staff, including assigning and monitoring workload, preparing schedules, responding to emerging issues, approving timesheets and time off requests;
• Fostering an environment of continuous learning and improvement, and encouraging team members to share ideas and feedback;
• Mentoring and developing staff using a supportive approach, including performance management, quality of service, and work output; ensuring staff are well trained, competent, and supported to be successful in their roles;
• Coordinating and leading Cyber Security Incident Response Team (CSIRT) operational activities, including activating the team and managing response workflows and communication during incidents, supporting the Senior Director as the institutional cyber incident lead, and promptly escalating high-impact decisions;
• Maintaining the Cyber Incident Response Plan and leading regular tabletop exercises to validate readiness;
• Collaborating with the Safety, Security, and Emergency Management department to align incident response activities with crisis management and business continuity structures (including the Emergency Operations Centre);
• Overseeing the delivery, operation, integration, and security of Security Operations and Governance Risk and Compliance infrastructure and services, ensuring they are scalable, reliable, and aligned with institutional needs (e.g., vulnerability management, Managed Security Services Provider (MSSP) security operations centre, endpoint detection and response, information protection, and IT risk register);
• Establishing and monitoring service level agreements (SLAs), managing vendor relationships, and ensuring Sec Ops and GRC service providers meet expectations for quality, security, and cost-effectiveness;
• Building a culture of cyber security awareness across the institution through training, communications, and consistent practices;
• Collaborating with IT units and the IT and Facilities Project Management Offices to integrate security considerations into cross-functional projects, providing technical guidance, and sharing knowledge and best practices; and
• Maintaining current knowledge of emerging information security technologies and best practices, evaluating their applicability to the University, and identifying opportunities to enhance service delivery through continuous improvement, innovation, and the sharing of knowledge across the team.

You will have:

• Significant experience in network, cloud, and application security, along with hands-on experience using cyber security tools such as SIEM and EDR;
• A strong understanding of risk assessment, incident response, and regulatory compliance, particularly within the context of Canadian public sector and post-secondary legislation such as Protection of Privacy Act (POPA) and Access to Information Act (ATIA);
• Knowledge and understanding of change management and process techniques, with the ability to lead/direct change management activities related to cloud services and architecture;
• Familiarity with established security frameworks, including ISO 27000-series, NIST Cybersecurity Framework (CSF), ISACA COBIT 2019, and ITIL 4, provides a foundation for applying structured governance and service management practices;
• Technical proficiency coupled with a customer-focused approach;
• Proven leadership and management skills, including the ability to lead, mentor,…