Senior Manager, Cyber Security Operations

Title: Senior Manager, Cyber Security Operations

Employee Working Location: Partially Virtual / Hybrid (Canada)

Employment Status: Permanent Full-time

The Canadian Red Cross (Red Cross) is an inspirational not-for-profit organization that helps people and communities in Canada and around the world in times of need and supports them in strengthening their resilience. As one of Canada's Best Employers 2026, we are committed to having an accessible, diverse, inclusive, and barrier-free work environment.

In this role, you will:

• Lead the Cyber Security Operations program for the Canadian Red Cross, ensuring the protection of information assets, systems, applications, and technology services from evolving cyber threats.

• Provide leadership, coaching, performance management, and career development for a team of security professionals responsible for cyber operations, compliance, risk management, and security governance.

• Develop and execute cyber security strategies, roadmaps, policies, standards, and programs aligned with organizational objectives, risk tolerance, and technology priorities.

• Lead cyber security operations programs, including incident response, threat management, vulnerability management, and remediation activities to reduce organizational risk and improve operational resilience.

• Oversee managed cyber security operations services, including security monitoring, threat detection, incident response coordination, and cyber defence capabilities delivered through internal teams and external service providers.

• Partner with technology and business stakeholders to advance security governance, compliance, audit, and risk management initiatives, ensuring effective risk management and alignment with regulatory requirements, industry best practices, and organizational standards.

• Participate in the organization's Third-Party Risk Management (TPRM) program by performing cyber security reviews of third-party suppliers, identifying technology risks, and providing recommendations to support vendor risk management decisions.

• Lead the implementation and continuous improvement of cyber security frameworks, controls, and best practices, including alignment with recognized standards such as PCI, NIST, SOC2, ISO 27001, and related frameworks.

• Collaborate with technology teams, business stakeholders, and external partners to ensure security requirements are incorporated into technology solutions, projects, and operational processes.

• Manage vendor relationships, contracts, and service providers to ensure the effective delivery of security services and capabilities.

• Partner with business stakeholders and technology teams to promote cybersecurity awareness, secure practices, and a culture of security across the organization.

• Identify and champion opportunities for continuous improvement, operational effectiveness, service quality, and the adoption of new technologies and ways of working.

What we are looking for:

• A university degree or college diploma in Computer Science, Information Security, Information Technology, Engineering, Business, or a related discipline, or an equivalent combination of education and experience.

• A minimum of 8 years of progressive information technology and cyber security experience, including demonstrated experience leading teams and security programs within complex enterprise environments.

• Demonstrated experience leading cyber security operations, incident response, risk management, compliance, governance, and security programs within complex enterprise environments.

• Strong knowledge of information security frameworks, standards, and best practices, including PCI, NIST, SOC2, ISO 27001, and ITIL.

• Experience managing security incidents, vulnerability management programs, audits, and compliance initiatives.

• Proven leadership skills with the ability to build, develop, and motivate high-performing teams while fostering a culture of accountability, collaboration, and continuous improvement.

• Strong business acumen and the ability to communicate complex technical and security concepts to executive leadership, business stakeholders, and technical teams.

• Experience managing vendors, contracts, managed service providers, and supporting third-party cyber security risk assessment activities.

• Professional security certifications such as CISSP, CISM, CISA, or equivalent are considered strong assets.

• Fluency in English is required; French is an asset.

Working Conditions:

• Occasional work outside regular business hours may be required to support cyber security incidents, critical operational issues, planned maintenance activities, or emergency response operations.

• Limited travel within Canada may be required to support technology initiatives, operational activities, organizational meetings, or emergency response efforts.

• Work involves managing multiple priorities, responding to changing threats and risks, and operating in a dynamic environment with evolving business and operational requirements.

• As we work with and support people and communities in Canada and around the world, applicants whose first language is not English may be required to perform the responsibilities of the role in English.

• Eligibility to work in Canada: At this time, we welcome applications from candidates eligible to work in Canada. If you are not a citizen or permanent resident of Canada, carefully review your visa to determine whether you are eligible to work in the role.

• If selected for this role, you will be required to complete a successful pre-employment screening process, including a satisfactory Enhanced Police Information Check (E-PIC).

Posted until 11:59 PM EDT on November 9, 2026