Manager, Information Security

Description:

About Us

The Faculty of Arts & Science is the heart of Canada’s leading university and one of the world's most comprehensive and diverse academic divisions. The strength of Arts & Science derives from our combined teaching and research excellence in the humanities, sciences and social sciences across 29 departments, seven colleges and 46 interdisciplinary centres, institutes and programs.  We can only realize our mission with the dedication and excellence of engaged staff and faculty. The faculty’s diversity of opportunities and perspectives reflects the local and global landscape and the need for curiosity, innovative thinking, and collaboration. At Arts & Science, we take pride in our legacy of innovation and discovery that has changed how we think about the world. The Faculty’s divisional IT team, Information & Instructional Technology (IIT) provides divisional IT services and support across the Faculty including day to day computing and infrastructure fulfillment as well as data centre and public web services and application development. Working collaboratively with central University IT and local departmental IT teams, IIT supports teaching, research, and administrative operations through secure, reliable, and modern technology solutions.

Your Opportunity

Reporting to the Executive Director, Information & Instructional Technology, and with a dotted-line relationship to the University's Chief Information Security & Digital Trust Officer (CISDTO), the Manager, Information Security provides strategic and operational leadership for the Faculty's information security and IT risk management programs. The Manager, Information Security is responsible for developing, implementing, and advancing a coordinated, division-wide approach to information security and technology risk. Working collaboratively with institutional security leadership, divisional IT, and departmental IT teams, the incumbent strengthens the Faculty's security posture while supporting the diverse needs of teaching, research, and administration. The role combines strategic planning, security program development, risk assessment and program management, technical expertise, incident coordination, and stakeholder engagement. It also supports the responsible adoption of emerging technologies, including artificial intelligence, automation, and cloud services, in alignment with University policies, standards, and governance requirements. As a member of the Faculty's IT leadership team, the  Manager, Information Security fosters a proactive, collaborative, and risk-aware security culture while balancing security requirements with academic and operational priorities.

Key Responsibilities

Information Security Strategy and Risk Management

• Lead the development, implementation, and continuous improvement of divisional information security and IT risk management programs.
• Establish security priorities, assess vulnerabilities, identify risks, and recommend appropriate controls and remediation strategies.
• Support the adoption and implementation of University information security policies, standards, governance requirements, and industry best practices.
• Develop security reporting, risk assessments, performance measures, and recommendations to support informed leadership decisions.
• Advise on security and risk considerations associated with emerging technologies, including AI, automation, cloud platforms, and digital innovation.

Security Operations and Incident Management

• Coordinate divisional security incident response, investigations, escalation, and remediation in collaboration with institutional security teams and departmental IT.
• Support security assessments, technical investigations, vulnerability management, and risk reduction initiatives.
• Collaborate with functional IT Managers and teams to strengthen operational resilience, security controls, and business continuity readiness.
• Review proposed technology solutions and projects to identify security risks and recommend appropriate safeguards.

Leadership and Program Delivery

• Lead and manage assigned security personnel, resources, priorities, projects, and operational activities.
• Develop and oversee security initiatives, including planning, budgeting, procurement, vendor management, implementation, and performance reporting.

Collaboration, Governance and Security Awareness

• Build strong working relationships with Faculty leadership, departmental IT teams, institutional security teams, and other stakeholders.
• Promote a consistent and collaborative approach to information security and risk management across the Faculty.
• Provide expert security advice to academic and administrative units on technology initiatives, risk mitigation, and compliance requirements.
• Support security awareness, education, and engagement initiatives for faculty, staff, and students.

Required Qualifications

Education

• University degree in Computer Science, Engineering, Information Technology, or an equivalent combination of education and relevant experience.
• Graduate degree and professional certifications such as CISSP, CISM, CISA, CRISC, PMP, or equivalent are considered assets.

Experience

Information Security and Risk Management

• Minimum eight (8) years of progressively responsible experience in information technology, with significant experience in information security, IT risk management, and security program development.
• Demonstrated experience developing, implementing, and improving information security policies, standards, controls, and risk management practices.
• Strong experience assessing security risks across enterprise technology environments, including endpoints, servers, networks, cloud services, applications, vendor solutions and identity systems.
• Experience coordinating security incidents, investigations, vulnerability assessments, and remediation activities.
• Experience with security monitoring, threat detection, defense-in-depth strategies, and security assessment tools.
• Experience supporting compliance reviews, security audits, and the implementation of security governance requirements.

Technology and Infrastructure

• Minimum eight (8) years of experience in an IT operations, infrastructure, or technology support environment.
• Strong understanding of enterprise IT architecture, networking, cloud platforms, infrastructure security, and business-critical applications.
• Experience with Microsoft enterprise technologies, including Azure, Microsoft Entra ID, and associated security and identity management capabilities.
• Knowledge of change management, configuration management, and technology lifecycle practices.
• Familiarity with the security and governance considerations associated with artificial intelligence, automation, and emerging technologies.

Leadership and Management

• Minimum eight (8) years of experience in a formal people management or technology leadership role.
• Demonstrated success leading and mentoring technical teams, managing competing priorities, and delivering complex initiatives.
• Experience with project and program management, financial planning, budgeting, procurement, vendor management, and contract oversight.
• Proven ability to collaborate with diverse stakeholders and influence outcomes across decentralized or complex organizational environments.

Skills and Competencies

• Strong strategic thinking, leadership, organizational, and decision-making abilities.
• Excellent interpersonal, relationship management, and communication skills.
• Ability to translate complex technical and security issues into clear, practical recommendations for senior leadership and non-technical stakeholders.
• Strong analytical, problem-solving, risk assessment, and incident management capabilities.
• Ability to manage multiple priorities, respond effectively to urgent issues, and exercise sound judgment under pressure.
• Strong commitment to collaboration, confidentiality, professionalism, and service excellence.
• Ability to navigate complex organizational structures, build consensus, and escalate issues appropriately.
• Demonstrated commitment to equity, diversity, and inclusion.

Additional Assets

• Experience working in a large, decentralized organization, preferably within higher education or a research-intensive environment.
• Familiarity with IT Service Management and ITIL practices, including platforms such as ServiceNow.
• Familiarity with AI security governance, cloud security assessments, and enterprise technology risk management.
• LEAN, Six Sigma, or related process improvement experience.

Other Requirements

• Availability to respond to critical security incidents outside regular working hours, when required.
• Ability to manage sensitive and confidential information with discretion and integrity.

Closing Date: 11/06/2026, 11:59PM ET
Employee Group: Salaried 
Appointment Type : Budget - Continuing 
Schedule:
Pay Scale Group & Hiring Zone:
PM 5 -- Hiring Zone: $125,319 - $146,206 -- Broadband Salary Range: $125,319 - $208,864
Job Category: Administrative / Managerial

Lived Experience Statement
Candidates who are members of Indigenous, Black, racialized and 2SLGBTQ+ communities, persons with disabilities, and other equity deserving groups are encouraged to apply, and their lived experience shall be taken into consideration as applicable to the posted position.

Job descriptions are available upon request for internal applicants.