{"id":3984567,"url":"https://alion.io/job/d2l-senior-manager-corporate-security","title":"Senior Manager, Corporate Security","company":{"id":3408,"name":"D2L","domain":"d2l.com","url":"https://alion.io/company/d2l","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":74,"open_postings":7,"ghost_share":0,"stale_share":0.857,"repost_share":0,"time_to_fill_p50_days":76,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Early Careers","role_family":"Early Careers","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kitchener, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-09T18:12:25Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T21:09:42Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"D2L is a cloud company that is modernizing education and building the Future of Work. The old models of teaching and learning are in the midst of the largest transformation in history, and D2L is at the heart of that fundamental shift. \nNew models of teaching and learning enable a personalized, student-centric experience - and deliver improved retention, engagement, satisfaction, and results for learners of all ages - in schools, campuses, and companies.\nD2L is disrupting the way the world learns, by providing the next generation learning environment and solutions to engage and inspire learners. And most importantly, by giving customers a platform that is easy, flexible, and smart. No other company provides a solution as robust and innovative as D2L.\nD2L has had a singular mission for 25 years and is dedicated to that same mission in the years ahead: to transform the way the world learns - and by doing so, we will help improve human potential globally.\nEvery application we receive is personally reviewed by a member of our Talent Acquisition team - yes, a real person looks at your resume! While we use AI tools internally to streamline tasks like meeting notes, summaries, and administrative work, these tools never rank resumes, make hiring decisions, or influence candidate evaluations.\nGeneral Description: \nThe Senior Manager, Corporate Security leads the corporate security function and its day-to-day operations and owns the corporate security roadmap. This role is accountable for protecting the organization’s corporate infrastructure, including identity, endpoints, networks, collaboration and SaaS platforms, and cloud and on-prem environments, through disciplined operations, sound architecture, and risk-based decision-making. The Senior Manager leads and develops a team of security professionals, stays close to high-impact technical work, and partners closely with GRC, Product Security and Corporate Security teams to deliver a consistent, coordinated security program across the organization.\nThe Senior Manager influences corporate infrastructure standards and investment decisions across IT and engineering, translates security risk into clear business terms for senior leadership, and provides input into budgeting, vendor selection, and vendor performance. \nHow you'll make an impact: \nCorporate Security Leadership & Operations \nLead, coach, and develop the corporate security team, including hiring, onboarding, performance management, and succession planning. \nOwn day-to-day corporate security operations, including vulnerability and patch management, endpoint and email security, SaaS and identity security, and security monitoring. \nSet team priorities, capacity plans, and on-call coverage, and balance operational demands against roadmap delivery. \nDefine operating cadences, runbooks, service levels, and metrics so operations are repeatable, measurable, and continuously improving. \nServe as the escalation point for corporate security issues, and stay hands-on where deep technical judgment is required. \nCorporate Security Roadmap & Strategy \nBuild, maintain, and communicate the corporate security roadmap (12-36 month horizon), refreshed at least annually and as risk or business priorities change. \nAlign the roadmap to business strategy, risk posture, and regulatory requirements, and prioritize initiatives by risk reduction and business impact. \nTranslate the roadmap into funded, sequenced initiatives with clear owners, milestones, and success measures. \nTrack and report delivery progress, risks, and outcomes to security and IT leadership. \nCorporate Infrastructure Influence & Architecture \nInfluence corporate infrastructure strategy and design with IT, cloud, and engineering teams so security is built in from the start. \nDefine and maintain security standards, guardrails, and reference patterns for cloud and on-prem corporate infrastructure. \nLead threat modeling and security design reviews for material infrastructure changes, with documented, risk-based recommendations. \nDrive adoption of least privilege, segmentation, hardening baselines, and blast radius reduction across corporate environments. \nPartnership with GRC and Product Security \nPartner with GRC on the risk register, control design, evidence, and audit readiness (e.g., SOC 2, ISO 27001, GDPR), providing technical validation for corporate controls. \nPartner with Product Security on shared standards, tooling, vulnerability management, and incident response so corporate and product environments are protected consistently. \nEstablish clear responsibilities, handoffs, and escalation paths between Corporate Security, GRC, and Product Security. \nAlign roadmaps and priorities across the three groups, and surface cross-cutting risks and dependencies early. \nRisk, Controls & Compliance \nIdentify, assess, and prioritize corporate information security risks, and provide risk-based input into formal risk acceptance decisions. \nOperate and continuously improve corporate security controls so they are measurable, effective, and aligned with regulatory and internal requirements. \nRegularly assess configuration, access controls, and security posture, and drive remediation to closure. \nDetection, Incident Response & Resilience \nOwn detection and response capabilities for corporate environments, including tooling, playbooks, and tuning. \nLead or support response to high-severity security incidents, and coordinate with IT, Legal, Product Security, and leadership as needed. \nLead post-incident reviews and drive long-term remediation and resilience improvements. \nAutomation, Platforms & Secure Enablement \nDefine and deliver strategies to automate and standardize security controls across corporate platforms, services, and business processes. \nEstablish security enablement patterns that integrate with IT and operational workflows. \nEvaluate security tools, platforms, and frameworks for technical fit, operational impact, and risk reduction. \nProject Engagement & Delivery \nProvide security direction, requirements, and acceptance criteria for infrastructure and IT projects. \nReview designs and implementations for alignment with security standards and architecture. \nIdentify and escalate security-related delivery risks. \nBudget & Vendor Management \nProvide input into corporate security budgeting and investment planning, and ensure initiatives and operations stay within approved budget. \nTechnically evaluate vendors and tools for security capability, risk, and architectural fit. \nMonitor vendor performance, participate in renewals, and recommend changes based on performance and risk. \nInfluence, Communication & Enablement \nAct as a trusted advisor to senior leadership on corporate security risks and tradeoffs. \nTranslate complex technical security issues into clear, business-focused insights. \nInfluence engineering and IT teams through standards, design reviews, and technical leadership. \nSuccess Measures:\nMeasurable reduction in corporate infrastructure security risk \nOperational performance of the corporate security function (response and remediation times, coverage, and service levels) \nOn-time delivery and business impact of the corporate security roadmap \nEffectiveness and adoption of security standards, architecture, and controls \nAudit outcomes and defensibility, supported by effective collaboration with GRC \nEffective alignment with Product Security and GRC \nTeam engagement, development, and retention \nVendor performance and risk posture \nContinuous Improvement:\nStay current with emerging threats, technologies, and best practices. \nEvaluate and implement new security tools, practices, and frameworks to strengthen corporate security posture and team effectiveness. \nWhat you'll Bring to the Role:\nCompetencies: \nPeople leadership: able to build, coach, and retain a high-performing security team. \nStrategic and analytical thinking for risk assessment, prioritization, and roadmap planning. \nAbility to lead technical initiatives and influence cross-functional teams without direct authority. \nCollaboration and partnership across GRC, Product Security, IT, Legal, and engineering. \nStrong communication skills for technical and non-technical audiences, including senior leadership. \nContinuous learning mindset and adaptability to evolving security landscapes. \nSkills: \nCloud security expertise (AWS, Azure) and infrastructure hardening. \nStrong knowledge of network security, firewalls, VPNs, and identity and access management. \nExperience running security operations and managing vulnerability, endpoint, and SaaS security programs. \nExperience with security tools (SIEM, vulnerability scanners, compliance platforms). \nProficiency in scripting and automation (PowerShell, Python, Bash); familiarity with Infrastructure-as-Code (Terraform, CloudFormation) and CI/CD security integration. \nUnderstanding of encryption, key management, and secure data handling. \nAbility to build and communicate security roadmaps, business cases, and risk-based recommendations. \nSuggested Experience\nBachelor’s degree in a related field, or equivalent experience. \n8+ years of progressive information security experience, including 3+ years leading security teams or functions. \nDemonstrated experience building and delivering a security roadmap and operating a corporate or enterprise security function. \nExperience partnering with GRC, audit, and product or application security teams in a SOC 2, ISO 27001, or similar compliance environment. \nHands-on experience securing cloud (AWS, Azure) and on-prem corporate infrastructure. \nSecurity certifications such as CISSP, CISM, or CCSP preferred. \nThe expected base salary range for a new hire in this role is listed below. The annualized base salary offered is determined by each candidate’s relevant knowledge, skills, education, training and experience. It is aligned to ensure both internal and external competitiveness using market data for the geographic location and industry. As part of the total compensation at D2L the role may be eligible for additional benefits including a Wellness Subsidy, Equity Grants, Variable Incentive, and more.\nBase Salary Range\n$123,000—$150,000 CAD\nDon’t meet every single requirement? We strongly encourage you to still apply! At D2L, we are committed to creating a diverse and inclusive environment. We encourage your application even if you don't believe you meet every single qualification outlined, because we love to help our people grow and develop!\nWhy we're awesome:\n\nAt D2L, we are dedicated to providing you with the tools to do the best work of your life. While some of our perks and benefits may vary depending on location or employment type, we are proud to provide employees with the following through #LifeAtD2L:\nImpactful work transforming the way the world learns\nFlexible work arrangements\nLearning and Growth opportunities\nTuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program\n2 Paid Days off for SkillsWave-related activities like exams or final assignments\nEmployee wellbeing (Access to mental health services, EFAP program, financial planning and more)\nRetirement planning\n2 Paid Volunteer Days\nCompetitive Benefits Package\nHome Internet Reimbursements\nEmployee Referral Program\nWellness Reimbursement\nEmployee Recognition\nSocial Events\nDog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices.","description_format":"text","description_chars":11456,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Flexible schedule","Growth opportunities","Internet reimbursement","Pet friendly","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms"],"lifecycle":[{"event":"open","at":"2026-11-09T21:09:42Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Approved LMIA in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":76,"reasons":["conf:3","win:early"],"computed_at":"2026-11-10T01:07:18Z"},"pay":null,"html_url":"https://alion.io/job/d2l-senior-manager-corporate-security","json_url":"https://alion.io/job/d2l-senior-manager-corporate-security.json","meta":{"generated_at":"2026-11-10T01:07:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2468,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3408},"rest":"https://alion.io/mcp/rest/get_company?id=3408"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fd2l-senior-manager-corporate-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fd2l-senior-manager-corporate-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fd2l-senior-manager-corporate-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/d2l-senior-manager-corporate-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fd2l-senior-manager-corporate-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3984567}},{"tool":"search_jobs","arguments":{"company":"d2l.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3984567},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}