Senior Manager, Security Architecture and Operations

Senior Manager, Security Architecture and Operations
RBC North Tower, Toronto, ON M5J, Canada

Job Description
Posted Thursday, June 4, 2026 at 4:00 AM | Expires Friday, June 19, 2026 at 3:59 AM

We are hiring a Senior Manager, Security Architecture and Operations!

Full-time

$130,000-$150,000

Hours of Work: 8:30 a.m. – 5:00 p.m.

Office

Location:

Toronto, ON

Great location! Steps away from the main public transit station

What we offer:

Highly competitive compensation package which includes base salary, bonus, benefits, and career advancement opportunities. Eligibility for benefits is dependent on the terms of employment.

The Opportunity
A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate will contribute to the management and continuous improvement of multiple security programs. The position entails the development, implementation, and maintenance of the security controls, through people, processes, and technology, across the organization.

Required Skills

Knowledgeable about architecture & design principles, network security, application security, vulnerability management, and incident management principles.

Assess the threat landscape and work internally to protect the organization from risk.

Must be highly technical and possess at least 8 years' experience in security operations and system design across on‑premise infrastructure, cloud infrastructure, applications, and user endpoint infrastructure.

Effective and dynamic communicator.

Primary Duties and Responsibilities

Maintain secure, resilient enterprise‑grade processes in tandem with various IT stakeholders, such as Information Security, IT Infrastructure and Operations, Application Development, etc.

Maintain oversight of security systems and security configuration administration to adequately respond to risk to enterprise systems and accounts, both on‑premise and the cloud.

Actively monitor, assess, and recommend tactical and strategic initiatives based on new and emerging threats.

Prepare period reports to Information Security and IT Leadership to showcase the current security posture of our Information Security Program.

Protect systems in compliance with Information security policies and standards such as ISO 27001 and SOC
2.

Manage a team of Information Security professionals across multiple programs.

Influence internal and external partners to ensure they build solutions consistent with the organization's planned policies, programs, architectural recommendations, and Information Security standards, including within the cloud.

Attend regular technical project and implementation meetings and serve as the security ambassador to guide secure application and infrastructure configurations, for on‑premise and cloud systems.

Manage the day‑to‑day activities of threat and vulnerability management, recommend treatment plans, and communicate information about risks.

Support in the documentation of risks and mitigating controls, including policy/procedure updates.

Security Operations and Incident Management Program

Lead the implementation, configuration, and daily operation of Information Security technologies that are implemented in First National’s environments.

Act as a key figure in incident response to track occurrence and resolution, with strict documentation and reporting as well as engagement within the department; and within the organization, from a technical standpoint.

Orchestrate the incident response process within the department, and work with key stakeholders within the department to respond, resolve and recover from the incident.

Manage third‑party security partners, ensure objectives are met, and work in partnership to continuously improve security operations processes.

Act as an active participant within Incident Tabletop exercises.

Streamline, mature and automate (where applicable), the Incident Response playbooks and processes within the organization.

Vulnerability Management Program

Analyze threat and vulnerability feeds data for applicability to the environment and perform compensating…