Senior Manager, Security Architecture and Operations

Senior Manager, Security Architecture and Operations

RBC north tower, Toronto, ON M5J, Canada

Posted Thursday, June 4, 2026 at 4:00 a.m. | Expires Friday, June 19, 2026 at 3:59 a.m.

We are hiring a Senior Manager, Security Architecture and Operations!

Reporting To: AVP, Information Security

Full‑time

Salary Range: $130,000-$150,000

Hours of Work: 8:30 a.m. – 5:00 p.m.

Grade: 16.4

A strategic and integral member of the Information Security Team, reporting to the AVP, Information Security, is responsible for ensuring the security, integrity, and availability of First National information assets. The candidate will contribute to the management and continuous improvement of multiple security programs. The position entails the development, implementation, and maintenance of security controls through people, processes, and technology across the organization.

• Knowledgeable about architecture & design principles, network security, application security, vulnerability management, and incident management principles.
• Assess the threat landscape and work internally to protect the organization from risk.
• At least 8 years of experience in security operations and system design across on‑premise infrastructure, cloud infrastructure, applications, and user endpoints infrastructure.
• Effective and dynamic communicator.

• Maintain secure, resilient enterprise‑grade processes in tandem with various IT stakeholders.
• Maintain oversight of security systems and security configuration administration for on‑premise and cloud systems.
• Actively monitor, assess, and recommend tactical and strategic initiatives based on emerging threats.
• Prepare reports to Information Security and IT Leadership to showcase the current security posture.
• Protect systems in compliance with Information security policies and standards such as ISO 27001 and SOC 2.
• Manage a team of Information Security professionals across multiple programs.
• Influence internal and external partners to ensure solutions align with the organization’s policies, programs, architectural recommendations, and Information Security standards.
• Attend technical project and implementation meetings and serve as security ambassador for on‑premise and cloud systems.
• Manage threat and vulnerability management activities, recommend treatment plans, and communicate information about risks.
• Support documentation of risks and mitigating controls, including policy updates.

• Lead the implementation, configuration, and daily operation of Information Security technologies in First National environments.
• Act as a key figure in incident response, tracking occurrence and resolution with strict documentation and reporting.
• Orchestrate the incident response process within the department, working with key stakeholders.
• Manage third‑party security partners, ensuring objectives are met and continuously improving processes.
• Participate in Incident Tabletop exercises.
• Streamline, mature, and automate Incident Response playbooks and processes.

• Analyze threat and vulnerability feeds for applicability, perform compensating control analysis, and validate efficacy of existing controls.
• Lead the team to perform security research, analysis, assessments, and support penetration testing and remediation actions.
• Coordinate periodical penetration testing and remediation tracking.
• Conduct application and network vulnerability assessments to identify vulnerabilities and develop remediation plans.
• Guide and assist IT stakeholders during remediation.
• Develop and mature the Offensive Security Program, including web application penetration testing and red/purple teaming.

• Ensure coverage and remediation of secure code review with Application Development stakeholders (SAST & DAST).
• Integrate security controls within the development pipeline to provide early security control gates.
• Define, develop, socialize, and execute long‑term application security roadmap with IT groups.
• Assist in evaluation, selection, onboarding, and management of App Sec vendors and tools.
• Perfo…