Senior Manager - IT Security Operations

Enercare Inc.Markham, ON, Canada

3 days ago

Job type

Full-time

Job description

Enercare Inc. is one of Canada’s largest home and commercial services companies, providing leading products and services in heating, cooling, plumbing, electrical, water heating and water purification. Our purpose is to provide energy-efficient products and services to our customers, so together we can take action for a greener tomorrow, starting in our homes and buildings.

We are a company that believes strongly in the health, safety and wellness of our people. Enercare is a place where careers are made. We take pride in caring for and continually striving to make a positive impact in the communities we operate in. In our values and our ambitions, we embrace change, and support our team members along the way.

Nationally, Enercare Inc. operates under several brands including Enercare, Service Experts, HydroSolution, Pioneer Plumbing & Heating, and Syles Mechanical Services, servicing Canadians in Ontario, Manitoba, Saskatchewan, Alberta, British Columbia, Quebec and New Brunswick. We are united through our joint commitment to excellent customer service to the Canadians we service every day, and our mission to contribute to a resilient, sustainable future. Enercare Inc. Is wholly owned by Brookfield Infrastructure Partners LP (“Brookfield”), a global leader in the management of alternative assets across real estate, infrastructure, renewable power, and private equity.

Summary :

The Senior IT Security Manager is a vital role responsible for establishing and maintaining the enterprise vision, strategy and program to ensure Enercare’s information assets and technologies are adequately protected from internal and external security threats. The role will manage cyber risks and ensure compliance with relevant standards and regulations. This leader will promote a culture of cyber security safety awareness and have significant influence across the organisation including senior leadership.

Responsibilities

Spearhead the development and execution of a comprehensive IT security program to ensure the alignment of the organisation's security objectives and strategies, while actively contributing to overall business technology planning.
Ensure the organisation complies with relevant government and industry regulations including PCI-DSS, PIPEDA, as well as applicable ISO standards. Maintain a continual awareness of the regulatory landscape to ensure the organisation's policies and procedures clearly meet all applicable requirements.
Proactively track and handle data breaches, cyber attacks, and security incidents by implementing robust incident response strategies. Utilise comprehensive risk management procedures and evaluations to identify, assess, and remediate security risks and vulnerabilities.
Develop and implement robust IT security strategies for vendor selection and evaluation, ensuring that their IT security controls comprehensively protect the confidentiality, integrity, and availability of Enercare’s data.
Conduct thorough research and stay continuously updated on emerging IT security trends, evolving cyber threats, best practices, and regulations; proactively recommend and implement the most suitable security products and technologies.
Provide visionary leadership to the information security team, including strategic personnel recruitment, comprehensive training, and effective mentoring. Develop and nurture talent within the team, championing a culture of high performance, continuous improvement, and collaboration towards achieving business goals.
Take full accountability for the security operations budget and ensure the provisioning of efficient and highly effective IT security services for the organisation.
Foster an organisational culture of cyber security awareness and strict compliance with policies and regulations, ensuring that all employees fully understand their roles in maintaining security and protecting sensitive information from common cyber threats such as phishing, vishing, best practices for email security, secure browsing, etc.

Qualifications

Bachelor’s degree or higher in computer science, information technology, cyber security or a related field.

Minimum of 15 years of experience in a combination of information security, risk management and relevant IT positions.

Recognised Information Security certifications including but not limited to CISSP, CISM, CCSP.

At least 10 years in a senior Information Security function with proven track record in implementing advanced security controls and technologies across different layers of infrastructure, such as network, endpoint systems, cloud, Microsoft 365, SIEM, IDS / IPS and solutions which adopted models such as Zero-Trust and Defence-in-Depth.

Extensive knowledge of security frameworks, standards, and best practices such as NIST, ISO, PCI-DSS and a strong understanding of business impact of security tools, technologies and policies.

Demonstrated ability to secure Cyber security investments through selling the need to deliver protection layers in the infrastructure and has persuasively promoted a culture where security was seen as an enabler of business acceleration rather than a roadblock.

Proven ability to assess and build the IT Security Roadmap with clear security goals and objectives; details of security controls, technologies and which provides a framework for continuous monitoring and improvement of security practices.

Working experience in AI-Powered Tools that enhances threat detection and response capabilities.

Has shown exceptional proficiency in written and oral communication skills, with the ability to develop strong rapport and credibility across the organization. Persuasively promote ideas and proposals, and effectively communicate with key stakeholders.

Has demonstrated a proactive and adaptable attitude, excelling under pressure and effectively manage challenging situations.

Enercare is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, colour, ancestry, national origin, religion, sex, age, sexual orientation, gender identity, citizenship, marital status, disability, pregnancy, military status, protected veteran status or other characteristics protected by applicable law. Enercare’s recruitment process includes accommodation for applicants with disabilities in accordance with applicable provincial accessibility laws and regulations. All accommodations will take into account the applicant’s accessibility needs due to disability and are available upon request.