The posting
At the University of Waterloo, we create and promote a culture where everyone can reach their full potential. As an employee, you get support & opportunities that empower you to advance your career. Explore how we can bring big ideas to life, together. The University is a welcoming workplace for those of all abilities, interests, and expertise. As part of our workforce, you can do what you do best, every day.
Learn more about our recruitment process.
Job Requisition ID:
2026-03490
Time Type:
Full time
Employee Group:
Staff
Job Category:
IT Security
Employment Type:
Permanent
Department:
Information Systems and Technology - Information Security Services
Hiring Range:
$113,285.63 - $141,607.03
Posting Information: This posting is for an existing vacancy.
The internal posting deadline for this position is November 12, 2026, at 11:59PM.
Job Description:
Primary Purpose
This position is accountable for ensuring the effective operation of the Information Security Operations Centre (SOC) to support the information security objectives of the University. The incumbent provides leadership for information security monitoring, incident response and related operations, ensuring service objectives are met. The position provides operational and technical leadership to the information security operations team and advises senior leadership on information security risks, priorities, and opportunities.
Key Accountabilities
Establishes priorities and leads the ongoing development of network security monitoring, network access control and security incident response at the University by:
- Identifying threats to the campus IT infrastructure, assessing their potential impact, and developing strategies to detect, and mitigate those threats.
- Participating in security architecture development to ensure threats and information security risks are appropriately assessed and addressed.
- Ensuring that the technology and capabilities employed by Information Security Services evolve in response to the changing threat landscape, technological developments and University requirements.
- Advising senior leadership on significant information security risks, operational priorities, and recommended mitigation strategies.
- Collaborating with campus stakeholders to develop and promulgate information security standards.
- Working with ISS and IST leadership to respond to audit findings as appropriate.
Ensures the effective utilization, deployment, and development of human and capital resources for information security operations at the University
- Hires and develops the information security operations team.
- Coaches, trains and develops employees to enable their professional development and maintain the specialized capabilities by the function.
- Conducts regular reviews with direct reports and establishes performance expectations and priorities.
- Allocates resources and establishes priorities to maintain effective service delivery and respond to changing operational requirements.
Leads the ongoing operations and performance of the information security operations function
- Ensures resources are available to respond to requests of the SOC.
- Establishes and continuously improves operational processes and procedures related to information security.
- Monitors performance and identifies opportunities to improve service effectiveness, quality and responsiveness.
- Coordinates resources and activities across relevant IT functions to support effective resolution of security incidents and operational issues.
- May be required to act operationally as Chief Information Security Officer, in their absence.
Provides specialized technical leadership and expertise for information security operations in the areas of:
- Security Monitoring
- Incident Response
- Forensics
- Network access controls (e.g. Firewalls, ACLs, NAC, etc.)
- SSL/TLS Certificate Support
- Compliance scanning and reporting
- Threat intelligence
- Information sharing with other institutions and partner organization
- Security risk assessment and mitigation
- Security operations processes and controls
Provides leadership and direction in response to significant information security risks and incidents by
- Providing technical and operational leadership during security incidents.
- Assessing the nature, severity and potential impact of security incidents and determining appropriate response and escalation.
- Coordinating with relevant technical and institutional stakeholders to support timely resolution and mitigation.
- Conducting post-incident reviews and identifying opportunities to strengthen security controls, processes and capabilities.
- Providing advice and recommendations to senior leadership regarding significant security risks, incidents and required actions.
Required Qualifications
Education
- University degree in a computing discipline together with relevant experience, or an equivalent combination of education and experience.
- Technical security certification (e.g. GIAC) is an asset.
Experience
- 7-9 years of progressive experience in in information security, network security, and/or systems administration. Experience in a security administration role is preferred.
- 3-5 years of experience leading or managing technical staff
Knowledge/Skills/Abilities
- Advanced experience with: network intrusion detection/prevention systems, log management/security information and event management (SIEM), network firewalls, public key infrastructure (PKI), network packet capture tools, network threat intelligence, systems administration (Unix/Linux and/or Windows), vulnerability scanning tools, TCP/IP and related communications protocols.
- Advanced knowledge of: people management practices, performance management, resource planning, operational planning and service delivery within a technical environment.
Equity Statement
The University of Waterloo acknowledges that much of our work takes place on the traditional territory of the Neutral, Anishinaabeg, and Haudenosaunee peoples. Our main campus is situated on the Haldimand Tract, the land granted to the Six Nations that includes six miles on each side of the Grand River. Our active work toward reconciliation takes place across our campuses through research, learning, teaching, and community building, and is coordinated within the Office of Indigenous Relations.
The University values the diverse and intersectional identities of its students, faculty, and staff. The University regards equity and diversity as an integral part of academic excellence and is committed to accessibility for all employees. The University of Waterloo seeks applicants who embrace our values of equity, anti-racism and inclusion. As such, we encourage applications from candidates who have been historically disadvantaged and marginalized, including applicants who identify as First Nations, Métis and/or Inuk (Inuit), Black, racialized, a person with a disability, women and/or 2SLGBTQ+.
Positions are open to qualified candidates who are legally entitled to work in Canada.
The University of Waterloo is committed to accessibility for persons with disabilities. If you have any application, interview, or workplace accommodation requests, please contact Human Resources at [email protected] or 519-888-4567, ext. 45935.
