{"id":3430254,"url":"https://alion.io/job/caat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management","title":"Senior Manager, Cybersecurity Operations & Vulnerability Management","company":{"id":706809,"name":"CAAT Pension Plan","domain":"caatpension.ca","url":"https://alion.io/company/caat-pension-plan","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150800,"max":188500,"currency":"CAD","period":"year","gross":null,"usd_annual":134306},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-02T06:04:46Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"At CAAT, we’re passionate about what we do. And it shows!\nHere, you’ll find a cultural spark in everything we do - from the way we partner with members and employers, to the way we work, collaborate, and grow. It doesn’t just feel different at CAAT. It is different. We’re one of the fastest-growing pensions in the country for a reason. We challenge the status quo, making a real impact on the hundreds of employers we serve - from education institutions to major corporations and household brands. And we’re just getting started. Driven by core values and a shared purpose, we’re fierce champions for better retirement security, known for our can-do culture where everyone plays a role in bringing our vision to life. If this sounds like a fit, we’d love you to be a part of it.\nAbout the Role:\nReporting to the Senior Director, Cybersecurity Operations and Vulnerability Management, the Senior Manager, Security Operations & Vulnerability Management leads CAAT’s enterprise security operations, threat detection, incident response, offensive security, SOC modernization, vulnerability lifecycle management, and cyber resilience programs. The successful incumbent will be overseeing and maturing CAAT’s Security Operations Centre (SOC), leading advanced threat hunting, orchestrating major incident response activities, and ensuring robust vulnerability identification, prioritization, and remediation across applications, infrastructure, and cloud environments.\nAs the Newest Member of our Team, You’ll:\nDevelop and execute SOC modernization roadmap including AI-enabled analytics, automation, cloud-native monitoring, and detection-as-code adoption.\nDefine and manage KPIs, KRIs, and maturity metrics for threat detection and incident response, and vulnerability exposure reduction\nProvide planned oversight over operational security engineering, aligning SOC capabilities with business risks, technology roadmaps, and enterprise objectives\nBuild and oversee a scalable 24/7 SOC operating model, including staffing strategy, SLAs, escalation pathways, and operational coverage.\nPartner with enterprise architecture, infrastructure, cloud, and DevOps teams to embed security-by-design\nLead analysis of emerging threats, AI-enabled attacks, supply-chain risks, and cloud-native exploitation trends.\nGovern daily SOC performance ensuring continuous improvement\nServe as incident commander for major security events while overseeing the enterprise-wide incident response program, including playbook development, escalation processes, and forensics readiness.\nOversee high-quality forensic investigations and post-incident reviews, integrating insights into architecture, operations, and governance to strengthen organizational resilience.\nEnsure compliance with ISO27001/27002, NIST, CSF, ITIL, and relevant Canadian standards; lead audit and control validation, compliance efforts\nOversee MSSP (Managed Security Service Provider) contracts, performance monitoring, and continuous service improvement and manage cybersecurity vendor relationships to ensure alignment with CAAT’s operational model and verify that third-party security services deliver measurable value and meet quality standards\nLead red team adversary emulations and oversee purple team exercises to enhance detection fidelity and control effectiveness.\nLead the end-to-end vulnerability lifecycle across cloud, infrastructure, identity, network, applications, and SaaS, ensuring controls and misconfiguration management are integrated into CI/CD pipelines and the secure SDLC.\nDeliver executive-ready reporting on threats, SOC performance, vulnerability trends, and cyber risk posture while clearly communicating complex security concepts to senior leadership and providing expert advisory to enable risk-based decision-making.\nTo Succeed, You Bring:\nA university degree or diploma in cybersecurity, computer science, or a related field, or an equivalent combination of education and experience.\nA minimum of seven (7) to ten (10) years of progressive cybersecurity experience, including four (4) plus years in leadership roles managing SOC, DFIR (Digital Forensics and Incident Response), Threat Detection, and Vulnerability Management functions within mid-to-large enterprise environments.\nCISSP (Certified Information Systems Security Professional) designation is required\nProven experience establishing, scaling, or managing a 24×7 or follow-the-sun SOC model, including staffing strategies, shift alignment, escalation models, and operational KPIs.\nStrong background in offensive security practices, including red teaming, threat emulation, adversary simulation, or collaboration with penetration testing teams to inform defensive strategies.\nExperience integrating AI/ML-driven security capabilities, such as automated threat detection models, AI-enhanced analytics, anomaly detection, or using AI tools to improve SOC efficiency and response accuracy.\nHands-on expertise with enterprise security technologies, including EDR/XDR, SIEM, SOAR, vulnerability management platforms, firewalls, DLP, PAM, and cloud-native security tools.\nAdvanced understanding of modern attacker tactics and behaviors, leveraging frameworks such as MITRE ATT&CK, cyber kill chain, and intelligence-led defense methodologies.\nStrong cloud security knowledge across Azure and AWS environments, including IAM, workload protection, cloud monitoring, and securing CI/CD pipelines.\nWorking knowledge of information security governance frameworks, including ISO 27001/27002, NIST CSF, ITIL, and relevant Canadian regulatory requirements.\nExcellent written and verbal communication skills, with the ability to translate technical concepts for diverse audiences, including senior leadership and non-technical stakeholders.\nCCSP, CEH, GCIH, OSCP, CISM, or similar advanced security credentials are nice to have.\nThe target hiring salary for this position is $150,800 - $188,500. Placement within our salary range will be based on factors such as internal equity, market conditions, and the candidate’s experience, skills, and qualifications relevant to the role.\nAt CAAT, we believe innovation, passion, and purpose are ingredients for a great work environment. We’re incredibly proud of our people and the remarkable impact they have as catalysts for change. We’re committed to attracting and keeping great talent, which means competitive compensation, exceptional benefits, and an environment where people can grow and thrive. When you work with CAAT, you’ll enjoy:\nOpportunities to Build a Better You: We never stand still. As we grow, so do you. Enjoy a place that provides endless opportunities to learn and master your skills while cultivating new ones.\n\nComprehensive & Holistic Care: Be at your best with a Total Rewards program that feeds and prioritizes your physical, mental, and financial wellness. From flexible work arrangements, comprehensive benefits to wellness incentives, and a defined benefit pension plan - we have you covered.\n\nA Place to Collaborate and Win: We’ve built a lively environment where creativity and open communication thrive. It’s why we’re consistently recognized as one of ‘Canada’s Most Admired Corporate Cultures’, one of ‘Greater Toronto’s Top Employers’, and one of the ‘Best Places to Work’.\n\nWork that Truly Matters. You’re giving Canadians the opportunity for better retirement security, and organizations the chance to do more.\n\nIf you believe that Canadians deserve a future where a secure lifetime retirement income contributes to their financial and overall well-being, then CAAT could be the right fit for you. Start your journey with us today. Apply now.\nLearn more about us by visiting www.caatpension.ca/careers\nNo artificial intelligence tools are used to screen, assess, or select applicants for this position. Artificial intelligence tools may be used to help recruiters identify potential candidates on external platforms. All hiring decisions are made by human reviewers.\nDiversity, Equity, Inclusion, and Belonging (DEIB):\nDEIB at CAAT means we respect and value the broadest range of experiences, geographies, gender, ethnicities, backgrounds, and perspectives as key elements of our culture. Our vision is to provide an environment where employees can bring their best, professional, authentic, selves to work.\nCAAT Pension Plan is an equal opportunity employer, and we will accommodate any needs under the Accessibility for Ontarians with Disabilities Act and the Ontario Human Rights Code. Hiring processes will be modified to remove barriers to accommodate those with disabilities, if requested. Should any applicant require accommodation through the application processes, please contact us at  or call Human Resources at 416-673-9000 for assistance.\nVacancy:\nThis posting is for an existing vacancy","description_format":"text","description_chars":8824,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Endpoint Security","Information Security","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-29T00:10:03Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":58,"reasons":["conf:9","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":134306,"is_top_pay":false},"html_url":"https://alion.io/job/caat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management","json_url":"https://alion.io/job/caat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management.json","meta":{"generated_at":"2026-11-02T06:12:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8974,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":706809},"rest":"https://alion.io/mcp/rest/get_company?id=706809"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaat-pension-plan-senior-manager-cybersecurity-operations-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3430254}},{"tool":"search_jobs","arguments":{"company":"caatpension.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3430254},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}