Senior Manager Information Security

Faculty/Division:
Faculty of Arts & ScienceDepartment:
Information and Instructional TechnologyCampus:
St. George (Downtown Toronto)Position Number:
00055831Existing Vacancy:
YesDescription
About Us
The Faculty of Arts & Science is the heart of Canada’s leading university and one of the world’s most comprehensive and diverse academic divisions. The strength of Arts & Science derives from our combined teaching and research excellence in the humanities, sciences and social sciences across 29 departments, seven colleges and 46 interdisciplinary centres, institutes and programs. We can only realize our mission with the dedication and excellence of engaged staff and faculty. The faculty’s diversity of opportunities and perspectives reflects the local and global landscape and the need for curiosity, innovative thinking, and collaboration. At Arts & Science, we take pride in our legacy of innovation and discovery that has changed how we think about the world. The Faculty’s divisional IT team, Information & Instructional Technology (IIT) provides divisional IT services and support across the Faculty including day to day computing and infrastructure fulfillment as well as data centre and public web services and application development. Working collaboratively with central University IT and local departmental IT teams, IIT supports teaching, research, and administrative operations through secure, reliable, and modern technology solutions.Reporting to the Executive Director, Information & Instructional Technology, and with a dotted-line relationship to the University’s Chief Information Security & Digital Trust Officer (CISDTO), the Senior Manager, Information Security provides strategic and operational leadership for the Faculty's information security and IT risk management programs. The Senior Manager, Information Security is responsible for developing, implementing, and advancing a coordinated, division-wide approach to information security and technology risk. Working collaboratively with institutional security leadership, divisional IT, and departmental IT teams, the incumbent strengthens the Faculty's security posture while supporting the diverse needs of teaching, research, and administration. The role combines strategic planning, security program development, risk assessment and program management, technical expertise, incident coordination, and stakeholder engagement. It also supports the responsible adoption of emerging technologies, including artificial intelligence, automation, and cloud services, in alignment with University policies, standards, and governance requirements. As a member of the Faculty's IT leadership team, the Senior Manager, Information Security fosters a proactive, collaborative, and risk-aware security culture while balancing security requirements with academic and operational priorities.Key Responsibilities
Information Security Strategy and Risk Management
Lead the development, implementation, and continuous improvement of divisional information security and IT risk management programs.Establish security priorities, assess vulnerabilities, identify risks, and recommend appropriate controls and remediation strategies.Support the adoption and implementation of University information security policies, standards, governance requirements, and industry best practices.Develop security reporting, risk assessments, performance measures, and recommendations to support informed leadership decisions.Advise on security and risk considerations associated with emerging technologies, including AI, automation, cloud platforms, and digital innovation.Security Operations and Incident Management
Coordinate divisional security incident response, investigations, escalation, and remediation in collaboration with institutional security teams and departmental IT.Support security assessments, technical investigations, vulnerability management, and risk reduction initiatives.Collaborate with functional IT Managers and teams to strengthen operational resilience, security controls, and business continuity readiness.Review proposed technology solutions and projects to identify security risks and recommend appropriate safeguards.Leadership and Program Delivery
Lead and manage assigned security personnel, resources, priorities, projects, and operational activities.Develop and oversee security initiatives, including planning, budgeting, procurement, vendor management, implementation, and performance reporting.Collaboration, Governance and Security Awareness
Build strong working relationships with Faculty leadership, departmental IT teams, institutional security teams, and other stakeholders.Promote a consistent and collaborative approach to information security and risk management across the Faculty.Provide expert security advice to academic and administrative units on technology initiatives, risk mitigation, and compliance requirements.Support security awareness, education, and engagement initiatives for faculty, staff, and students.Required Qualifications
Education
University degree in Computer Science, Engineering, Information Technology, or an equivalent combination of education and relevant experience.Graduate degree and professional certifications such as CISSP, CISM, CISA, CRISC, PMP, or equivalent are considered assets.Experience
Information Security and Risk Management
Minimum eight (8) years of progressively responsible experience in information technology, with significant experience in information security, IT risk management, and security program development.Demonstrated experience developing, implementing, and improving information security policies, standards, controls, and risk management practices.Strong experience assessing security risks across enterprise technology environments, including endpoints, servers, networks, cloud services, applications, vendor solutions and identity systems.Experience coordinating security incidents, investigations, vulnerability assessments, and remediation activities.Experience with security monitoring, threat detection, defense-in-depth strategies, and security assessment tools.Experience supporting compliance reviews, security audits, and the implementation of security governance requirements.Technology and Infrastructure
Minimum eight (8) years of experience in an IT operations, infrastructure, or technology support environment.Strong understanding of enterprise IT architecture, networking, cloud platforms, infrastructure security, and business-critical applications.Experience with Microsoft enterprise technologies, including Azure, Microsoft Entra ID, and associated security and identity management capabilities.Knowledge of change management, configuration management, and technology lifecycle practices.Familiarity with the security and governance considerations associated with artificial intelligence, automation, and emerging technologies.Leadership and Management
Minimum eight (8) years of experience in a formal people management or technology leadership role.Demonstrated success leading and mentoring technical teams, managing competing priorities, and delivering complex initiatives.Experience with project and program management, financial planning, budgeting, procurement, vendor management, and contract oversight.Proven ability to collaborate with diverse stakeholders and influence outcomes across decentralized or complex organizational environments.Skills and Competencies
Strong strategic thinking, leadership, organizational, and decision-making abilities.Excellent interpersonal, relationship management, and communication skills.Ability to translate complex technical and security issues into clear, practical recommendations for senior leadership and non-technical stakeholders.Strong analytical, problem-solving, risk assessment, and incident management capabilities.Ability to manage multiple priorities, respond effectively to urgent issues, and exercise sound judgment under pressure.Strong commitment to collaboration, confidentiality, professionalism, and service excellence.Ability to navigate complex organizational structures, build consensus, and elevate issues appropriately.Demonstrated commitment to equity, diversity, and inclusion.Additional Assets
Experience working in a large, decentralized organization, preferably within higher education or a research-intensive environment.Familiarity with IT Service Management and ITIL practices, including platforms such as ServiceNow.Familiarity with AI security governance, cloud security assessments, and enterprise technology risk management.LEAN, Six Sigma, or related process improvement experience.Other Requirements
Availability to respond to critical security incidents outside regular working hours, when required.Ability to manage sensitive and confidential information with discretion and integrity.Closing Date:
11/06/2026, 11:59PM ETEmployee Group:
SalariedAppointment Type:
Budget - ContinuingSchedule:PM 5 -- Hiring Zone: $125,319 - $146,206 -- Broadband Salary Range: $125,319 - $208,864Job Category:
Administrative / ManagerialLived Experience Statement
Candidates who are members of Indigenous, Black, racialized and 2SLGBTQ+ communities, persons with disabilities, and other equity deserving groups are encouraged to apply, and their lived experience shall be taken into consideration as applicable to the posted position.Diversity Statement
The University of Toronto embraces Diversity and is building a culture of belonging that increases our capacity to effectively address and serve the interests of our global community. We strongly encourage applications from Indigenous Peoples, Black and racialized persons, women, persons with disabilities, and people of diverse sexual and gender identities. We value applicants who have demonstrated a commitment to equity, diversity and inclusion and recognize that diverse perspectives, experiences, and expertise are essential to strengthening our academic mission.As part of your application, you will be asked to complete a brief Diversity Survey. This survey is voluntary. Any information directly related to you is confidential and cannot be accessed by search committees or human resources staff. Results will be aggregated for institutional planning purposes. For more information, please see Statement
The University strives to be an equitable and inclusive community, and proactively seeks to increase diversity among its community members. Our values regarding equity and diversity are linked with our unwavering commitment to excellence in the pursuit of our academic mission.The University is committed to the principles of the Accessibility for Ontarians with Disabilities Act (AODA). As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities.If you require any accommodations at any point during the application and hiring process, please contact View email address on ca.hrm.tc University of Toronto has implemented a process to substantiate Indigenous Membership/Citizenship/Enrolment for candidates who identify as Indigenous. For more information about this process, please refer to the Indigenous Substantiation Website.
#J-18808-Ljbffr