Manager, IT Operations & Security

Information Technology Full Time Thornhill, ON Hybrid $110,000 - $130,000 CAD per year

Highclere Capital is a growing, Ontario-based mortgage finance company focused on providing innovative lending solutions to underserved borrowers across Canada. Operating in a regulated financial services environment, we place a strong emphasis on security, compliance, service excellence, and responsible growth.

As a remote-first organization with an expanding in-office presence, we are building a culture rooted in accountability, collaboration, and a shared commitment to doing the right thing for our brokers, partners, and team members.

We are seeking an experienced Manager, IT Operations & Security to oversee and support all technology operations across the organization. This role is responsible for day-to-day IT operations, oversight of our Managed IT Service Provider (MSP), advancing information security initiatives, and ensuring compliance with Canadian regulatory and cybersecurity requirements.

The ideal candidate understands the demands of operating in a regulated Canadian financial services environment, particularly with respect to data privacy, security, business continuity, and audit readiness. This is a hands‑on leadership role that combines operational ownership with security and compliance accountability.

• Serve as the primary escalation point for internal IT support requests
• Oversee end‑user computing, device provisioning, user lifecycle management, and software licensing
• Maintain IT asset inventory, monitoring, and lifecycle planning
• Ensure uptime and reliability across critical business applications (LOS, CRM, POS, underwriting tools, etc.)

• Manage the relationship with our MSP and ensure service levels meet expectations
• Review operational and security reports; track KPIs and escalated issues as needed
• Coordinate infrastructure projects, security initiatives, and escalated support cases

• Support development, documentation, and testing of business continuity and disaster recovery plans
• Conduct annual tabletop and recovery exercises to ensure readiness
• Maintain continuity procedures that comply with provincial and federal oversight expectations

• Maintain and enhance the company’s Information Security Program and supporting policies
• Ensure compliance with Canadian privacy legislation, including PIPEDA and applicable provincial laws
• Oversee access controls, MFA enforcement, network security requirements, and privileged account processes
• Coordinate cybersecurity awareness training and phishing simulations
• Lead risk assessments, vulnerability management, and incident response readiness

• Prepare documentation for internal and external audits, regulatory examinations, and vendor reviews
• Serve as the primary IT contact for auditors, regulators, investors, and third‑party partners
• Track remediation activities and ensure corrective actions are completed promptly

• Maintain and update IT policies, standards, procedures, and governance frameworks
• Support IT budgeting, vendor selection, contract evaluations, and license management
• Assist with system integrations and management of mortgage‑related platforms
• Evaluate opportunities for modernization, automation, and responsible use of AI across business functions

• 5+ years of experience in IT operations, IT management, or cybersecurity
• Experience working in a regulated environment (financial services, lending, fintech, or similar)
• Experience managing MSP or third‑party IT vendor relationships
• Strong knowledge of Microsoft 365, SharePoint, Entra /Azure AD, endpoint administration, and cloud security fundamentals
• Familiarity with audit processes and regulatory compliance expectations
• Strong communication skills and ability to work cross‑functionally

• Experience with Canadian mortgage industry systems (e.g., Filogix Expert, Newton Velocity, Mortgage
  
  BOSS, or similar platforms)
• Knowledge of SOC reports, NIST…