The posting
At CAAT, we’re passionate about what we do. And it shows!
Here, you’ll find a cultural spark in everything we do – from the way we partner with members and employers, to the way we work, collaborate, and grow. It doesn’t just feel different at CAAT. It is different. We’re one of the fastest-growing pensions in the country for a reason. We challenge the status quo, making a real impact on the hundreds of employers we serve – from education institutions to major corporations and household brands. And we’re just getting started. Driven by core values and a shared purpose, we’re fierce champions for better retirement security, known for our can-do culture where everyone plays a role in bringing our vision to life. If this sounds like a fit, we’d love you to be a part of it.
About the Role:
Reporting to the Senior Director, Cybersecurity Operations and Vulnerability Management, the Senior Manager, Security Operations & Vulnerability Management leads CAAT’s enterprise security operations, threat detection, incident response, offensive security, SOC modernization, vulnerability lifecycle management, and cyber resilience programs. The successful incumbent will be overseeing and maturing CAAT’s Security Operations Centre (SOC), leading advanced threat hunting, orchestrating major incident response activities, and ensuring robust vulnerability identification, prioritization, and remediation across applications, infrastructure, and cloud environments.
As the Newest Member of our Team, You’ll:
- Develop and execute SOC modernization roadmap including AI-enabled analytics, automation, cloud-native monitoring, and detection-as-code adoption.
- Define and manage KPIs, KRIs, and maturity metrics for threat detection and incident response, and vulnerability exposure reduction
- Provide planned oversight over operational security engineering, aligning SOC capabilities with business risks, technology roadmaps, and enterprise objectives
- Build and oversee a scalable 24/7 SOC operating model, including staffing strategy, SLAs, escalation pathways, and operational coverage.
- Partner with enterprise architecture, infrastructure, cloud, and DevOps teams to embed security-by-design
- Lead analysis of emerging threats, AI-enabled attacks, supply-chain risks, and cloud-native exploitation trends.
- Govern daily SOC performance ensuring continuous improvement
- Serve as incident commander for major security events while overseeing the enterprise-wide incident response program, including playbook development, escalation processes, and forensics readiness.
- Oversee high-quality forensic investigations and post-incident reviews, integrating insights into architecture, operations, and governance to strengthen organizational resilience.
- Ensure compliance with ISO27001/27002, NIST, CSF, ITIL, and relevant Canadian standards; lead audit and control validation, compliance efforts
- Oversee MSSP (Managed Security Service Provider) contracts, performance monitoring, and continuous service improvement and manage cybersecurity vendor relationships to ensure alignment with CAAT’s operational model and verify that third-party security services deliver measurable value and meet quality standards
- Lead red team adversary emulations and oversee purple team exercises to enhance detection fidelity and control effectiveness.
- Lead the end-to-end vulnerability lifecycle across cloud, infrastructure, identity, network, applications, and SaaS, ensuring controls and misconfiguration management are integrated into CI/CD pipelines and the secure SDLC.
- Deliver executive-ready reporting on threats, SOC performance, vulnerability trends, and cyber risk posture while clearly communicating complex security concepts to senior leadership and providing expert advisory to enable risk-based decision-making.
To Succeed, You Bring:
- A university degree or diploma in cybersecurity, computer science, or a related field, or an equivalent combination of education and experience.
- A minimum of seven (7) to ten (10) years of progressive cybersecurity experience, including four (4) plus years in leadership roles managing SOC, DFIR (Digital Forensics and Incident Response), Threat Detection, and Vulnerability Management functions within mid-to-large enterprise environments.
- CISSP (Certified Information Systems Security Professional) designation is required
- Proven experience establishing, scaling, or managing a 24×7 or follow-the-sun SOC model, including staffing strategies, shift alignment, escalation models, and operational KPIs.
- Strong background in offensive security practices, including red teaming, threat emulation, adversary simulation, or collaboration with penetration testing teams to inform defensive strategies.
- Experience integrating AI/ML-driven security capabilities, such as automated threat detection models, AI-enhanced analytics, anomaly detection, or using AI tools to improve SOC efficiency and response accuracy.
- Hands-on expertise with enterprise security technologies, including EDR/XDR, SIEM, SOAR, vulnerability management platforms, firewalls, DLP, PAM, and cloud-native security tools.
- Advanced understanding of modern attacker tactics and behaviors, leveraging frameworks such as MITRE ATT&CK, cyber kill chain, and intelligence-led defense methodologies.
- Strong cloud security knowledge across Azure and AWS environments, including IAM, workload protection, cloud monitoring, and securing CI/CD pipelines.
- Working knowledge of information security governance frameworks, including ISO 27001/27002, NIST CSF, ITIL, and relevant Canadian regulatory requirements.
- Excellent written and verbal communication skills, with the ability to translate technical concepts for diverse audiences, including senior leadership and non-technical stakeholders.
- CCSP, CEH, GCIH, OSCP, CISM, or similar advanced security credentials are nice to have.
The target hiring salary for this position is $150,800 – $188,500. Placement within our salary range will be based on factors such as internal equity, market conditions, and the candidate’s experience, skills, and qualifications relevant to the role.
At CAAT, we believe innovation, passion, and purpose are ingredients for a great work environment. We’re incredibly proud of our people and the remarkable impact they have as catalysts for change. We’re committed to attracting and keeping great talent, which means competitive compensation, exceptional benefits, and an environment where people can grow and thrive. When you work with CAAT, you’ll enjoy:
- Opportunities to Build a Better You: We never stand still. As we grow, so do you. Enjoy a place that provides endless opportunities to learn and master your skills while cultivating new ones.
- Comprehensive & Holistic Care: Be at your best with a Total Rewards program that feeds and prioritizes your physical, mental, and financial wellness. From flexible work arrangements, comprehensive benefits to wellness incentives, and a defined benefit pension plan – we have you covered.
- A Place to Collaborate and Win: We’ve built a lively environment where creativity and open communication thrive. It’s why we’re consistently recognized as one of ‘Canada’s Most Admired Corporate Cultures’, one of ‘Greater Toronto’s Top Employers’, and one of the ‘Best Places to Work’.
- Work that Truly Matters. You’re giving Canadians the opportunity for better retirement security, and organizations the chance to do more.
If you believe that Canadians deserve a future where a secure lifetime retirement income contributes to their financial and overall well-being, then CAAT could be the right fit for you. Start your journey with us today. Apply now.
Learn more about us by visiting www.caatpension.ca/careers
No artificial intelligence tools are used to screen, assess, or select applicants for this position. Artificial intelligence tools may be used to help recruiters identify potential candidates on external platforms. All hiring decisions are made by human reviewers.
Diversity, Equity, Inclusion, and Belonging (DEIB):
DEIB at CAAT means we respect and value the broadest range of experiences, geographies, gender, ethnicities, backgrounds, and perspectives as key elements of our culture. Our vision is to provide an environment where employees can bring their best, professional, authentic, selves to work.
CAAT Pension Plan is an equal opportunity employer, and we will accommodate any needs under the Accessibility for Ontarians with Disabilities Act and the Ontario Human Rights Code. Hiring processes will be modified to remove barriers to accommodate those with disabilities, if requested. Should any applicant require accommodation through the application processes, please contact us at [email protected] or call Human Resources at 416-673-9000 for assistance.
Vacancy:
This posting is for an existing vacancy
