Senior Manager, Security Operations Centre

Venture outside the ordinary – TMX Careers. The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross‑functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action?

Senior Manager, SOC (6‑month contract) is responsible for the design, planning, testing, implementation, and administration of industry‑accepted information security principles, practices, and systems to ensure the protection of all information assets processed, stored, or transmitted across the organization. This role continuously evaluates the effectiveness of current information security solutions, monitors for and mitigates security risks, determines the root causes of security violations, and implements robust procedures to prevent future incidents in a 24x7x365 environment.

Additionally, the Senior Manager provides expert advisory and assistance to internal system users regarding enterprise information security matters.

• Lead the implementation, configuration, and operation of information security technologies that are implemented across the TMX Group Limited.
• Influences internal partners to ensure they build solutions consistent with the organization's planned policies, programs, architectural recommendations, and information security standards.
• Support the ongoing security control processes within the enterprise which includes security technologies, networks, information systems, and endpoints.
• Analyzes threat and vulnerability feeds and analyzes data for applicability to TMX’s environment including the identification and resolution of false positive findings in assessment results, as well as perform compensating controls analysis and validate the efficacy of existing controls.
• Understanding of threat models, impact levels, and the different approaches and methodologies i.e. black/grey/white box testing.
• Lead investigations of potential security incidents using forensically sound methods and techniques.
• Develop and implement information security operations metrics, measurement criteria and reporting to ensure compliance and continuous improvement.
• Perform operational risk analysis of different solution options and propose a security solution for the business problem that balances potential loss with the cost of the solution.

• Education:
  
  Bachelor’s degree in Computer Technology, Computer Science, or a related field of study.
• Certifications:
  
  At least one industry‑recognized professional security designation is required: CISSP, SSCP, CISM, CRISC, GIAC GCIH, or equivalent.
• Experience:
  
  Minimum of 5 years of dedicated experience managing Security Operations.
• Framework Knowledge:
  Deep understanding of industry security standards, including NIST CSF, ISO
  27001, and PCI DSS.
• Technical Mastery:
  Proven track record deploying and operating core security capabilities, including SIEM, Endpoint Protection, Endpoint Detection and Response (EDR), and vulnerability management platforms.
• Incident Management:
  Solid, hands‑on experience handling complex cybersecurity incidents and breach management protocols.
• Threat Intelligence:
  Strong experience implementing and managing threat intelligence tools and data feeds.
• Infrastructure Knowledge:
  Robust understanding of cybersecurity technologies such as firewalls, intrusion detection/protection systems (IDS/IPS), email security, web security, DDoS prevention, wireless security, Identity & Access Management (IAM) systems, 2FA, certificate/key management, and HSM.
• Communication:
  Exceptional communication skills with a proven ability to articulate complex security concepts to stakeholders at all levels…