Manager, Cybersecurity Operations

Location: Toronto, 100 Queens Quay East, Toronto, Ontario M5E 1V3, Canada

Job Title: Manager, Cybersecurity Operations

Position Overview

The Cybersecurity Operations Manager provides tactical oversight of the organization’s defensive posture. Serving also as the primary Incident Response (IR) Commander, this position orchestrates crisis management while managing the daily cadence of the Security Operations Center (SOC) to ensure rapid detection and remediation. The role balances deep technical execution, including threat intelligence and forensic postmortems, with the professional presence required to drive cyber strategy, align with frameworks like NISTCSF and MITREATT&CK, and cultivate a vigilant security culture across the enterprise.

What You’ll Do

• SOC Leadership & Performance: Oversee daily security operations and personnel, ensuring high fidelity alerting and streamlined triage processes. Optimize the SIEM, EDR, and SOAR stack to reduce mean time to detect (MTTD) and mean time to respond (MTTR) through advanced correlation rules and automated response workflows.
• Technical Practitioner: Maintain a ‘hands‑on’ approach to security operations, assisting the team in deep‑dive analysis of complex threats and directly contributing to the engineering of the security stack.
• Reporting & Metrics: Communicate operational health through data‑driven dashboards, tracking KPIs and analyst workload, and presenting quarterly updates to leadership.
• IR Command: Act as the primary Incident Response Commander during critical incidents, orchestrating the full lifecycle of containment and recovery. Update robust playbooks and a comprehensive Incident Response Plan (IRP), ensuring enterprise‑wide readiness through regular simulation exercises and maintaining high‑clarity communication channels.
• DevSecOps Integration: Partner with Engineering and DevOps to integrate security controls and best practices directly into CI/CD pipelines.
• Hardening & Best Practices: Support enterprise hardening efforts by collaborating cross‑functionally to define baseline security configurations and implementing industry best practices across workstations, servers, and cloud infrastructure.
• Threat Intelligence: Ingest and analyze global threat data to lead proactive hunting and harden the perimeter against emerging TTPs.
• User Training: Manage the delivery of a modern security awareness program and phishing simulation platform, ensuring all employees recognize and report sophisticated social engineering threats.

Education & Certification

• Degree in Cybersecurity, Computer Science, or equivalent experience.
• Active CISSP or CISM required (GCIH, GCFA, or CCSP highly valued).

Experience

• 7+ years of progressive cybersecurity experience, with at least 3+ years of formal leadership managing a SOC or Cyber Ops team.
• Expert in managing the full incident lifecycle, from detection through remediation and post‑incident reporting.
• Ability to lead cross‑functional teams under high‑pressure conditions, translating complex technical risks for non‑technical stakeholders.
• Mentorship experience: coach, mentor, and elevate technical talent to foster a high‑performance team culture.
• Operationalizing NISTCSF and MITREATT&CK frameworks; working knowledge of compliance standards such as SOC2, GDPR, ISO27001.

Tech Stack Expertise

• Microsoft security ecosystem (M365/Azure, Microsoft Sentinel, Purview, Azure Defender).
• Proficiency in KQL (Kusto Query Language) and developing custom detection logic within Sentinel.

Working Conditions

• Hybrid role.
• Primary escalation point for critical security events; on‑call duties during after‑hours and weekends as needed.

Benefits

• Competitive Total Rewards Program.
• Career growth opportunities.
• Goose Rewards & ICON Rewards.
• Donation matching and paid volunteer time.
• Tools and resources for physical and mental health.

Salary Range

$102,000.00 – $141,000.00 / year. The range is a guideline; final compensation depends on experience, skills, and role alignment.

Vacancy Status

This posting represents an active vacancy for which we are currently hiring.

Equal Opportunity Employer Statement

Canada Goose is an equal opportunity employer and is committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act.