{"id":4020677,"url":"https://alion.io/job/stelumar-manager-security-compliance","title":"Manager, Security & Compliance","company":{"id":4416696,"name":"Stelumar","domain":"stelumar.com","url":"https://alion.io/company/stelumar","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jobvite","truth_index":null},"role":"Management","role_family":"Management","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Etobicoke, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":130000,"currency":"CAD","period":"year","gross":null,"usd_annual":92007},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"ITSM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-10T14:56:59Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T14:56:59Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nRole:\nManager, Security and Compliance\nLocation:\nEtobicoke & Mississauga, Ontario\nCompany:\nStelumar Advanced Manufacturing Inc.\nDepartment:\nInformation Technology/Shared Services\nEmployment Type:\nFull-Time, Permanent\nReports to:\nDirector, IT\nStelumar Advanced Manufacturing Inc. (SAMI or Stelumar) is a technology-driven company dedicated to revolutionizing homebuilding in Canada through advanced modular building solutions. Founded by Canadian entrepreneur Peter Gilgan, founder of Mattamy Homes, Stelumar combines automation, robotics, and AI to modernize construction and help address the housing shortage. With state-of-the-art manufacturing facilities in the Greater Toronto Area, Stelumar is focused on accelerating construction timelines, improving consistency and making housing more attainable. Stelumar produces precision-built walls, floors, and roofing systems, factory-built modular units, and interior cabinetry and millwork at industrial scale. Its development and construction arm, Stelumar Communities, delivers scalable modular housing from planning and design to construction and handover. The team supports low- and mid-rise residential, purpose-built rental, affordable and workforce housing, student housing, hospitality, healthcare-related housing, and institutional developments. Together, Stelumar is delivering housing people are proud of.\nFor more information, visit Stelumar.com.\nWhat we offer\nThis is a hands-on role at a fast-growing Canadian start-up using robotics, automation, and AI to take on the housing crisis. As our Senior Security and Compliance Administrator, you'll own the security posture and compliance program protecting SAMI's Greater Toronto Area manufacturing and corporate sites,from identity, endpoint, and network security to audits and the IT/OT security boundary. You'll have real ownership from day oneand work at the leading edge of where cybersecurity meets the factory floor. We're looking for someone rigorousand dependable, with sharp risk judgment and the confidence to act on it.\nWhat you’ll do\nDesign and build SAMI's securityand compliance program across IT and OT environments, establishing the roadmap, governance, standards, and operating model for Cabinetry, Panel, Modular, and Stelumar Communities.\nImplement and continuously mature SAMI's security suite (Sentinel SIEM, Defender for IoT/Endpoint/O365), and leadincident response end-to-end, from triage in the ITSM platform through resolution.\nManage security controls across SAMI's hybrid AD/Entra environment, including Conditional Access, MFA, privileged access, Purview, and Intune compliance policies.\nBuild and lead an end-to-endvulnerability management program: define scanning, patch compliancestandards, and remediation tracking across servers, endpoints, and network infrastructure.\nAdminister and audit Fortinet network security controls and the IT/OT network security boundary for PLC environments.\nOversee SAMI's data protection and backup verification program(Cohesity, SQL Server Always On AGs) and support Tier 2 DR/BCP delivery.\nManage the day-to-day relationship and audit cyclewith SAMI's external auditors, including PwC, coordinating evidence, walkthroughs, and control testing; lead internal audit readiness and track findings to close.\nAdminister security aspects of SAMI's ERP (Odoo) and MES-connected systems, including access reviews and segregation of duties.\nRun security awareness training and phishing simulations, and support security review of new SaaS tools and vendors.\nPartner with IT leadership to define security guardrails and enable thesecure deployment of AI and automation tools from pilot through production.\nOther duties as assigned.\nWhat you bring\nCollege Diploma or University Degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.\n5+ years of hands-on IT security and compliance administration experience, including demonstrated success designing, building, and implementing programs, controls, and processes across multiple sites and technologies.\nDemonstrated proficiency with SIEM (e.g., Microsoft Sentinel) and endpoint detection and response tools (e.g., Microsoft Defender).\nHands-on experience with Microsoft 365/Azure security and compliance tooling, including Conditional Access, Purview, and Intune compliance policies.\nWorking knowledge of NIST CSFand IT general controls (ITGCs), with hands-on experience supporting external auditsand evidence requests.\nSolid networking/firewall fundamentals, ideally with Fortinet, across corporate and OT environments.\nStrong documentation habits, organization, and discretion handling sensitive security and compliance matters.\nClear communicator who can explain risk and controls to non-technical stakeholders, auditors, and plant teams.\nBonus Points\nIndustry certification such as Security+, SC-200, SC-300, SC-401, or CISSP (or working toward one).\nPrior experience as the auditee contact for PwC or another Big Four/national audit firm, or audit-side experience (SOC 2, ISO 27001).\nHands-on exposure to OT/PLC network security in a manufacturing or industrial setting.\nExperience with FreshService, SolarWinds, or comparable ITSM and monitoring platforms.\nCompensation\nThe expected base salary range for this position is $85,000 - $130,000. Actual pay may vary depending on your job-related knowledge, competencies, and skills. We recognize that exceptional situations may fall outside this range, and we encourage all interested candidates to apply.\nYou are also eligible to participate in Stelumar’s annual bonus program which gives you the opportunity to increase your total compensation if business and individual goals are achieved.\nWe encourage applicants who meet most of the role requirements to hit that submit button and apply! It’s okay if you don’t have 100% of the requirements. If you’re the right candidate, we’ll help you learn and grow.\nStelumar is committed to providing accommodation for people with disabilities. If you require accommodation through any aspects of the selection process, please notify us on your application and we will work with you to meet your needs.\nStelumar may use artificial intelligence (AI) tools to support our hiring process, including to help screen or assess candidates along the way. These tools work behind the scenes, while people remain at the heart of every hiring decision.\nQualified applicants for this existing vacancy will be contacted directly by the Talent Acquisition team.","description_format":"text","description_chars":6502,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Construction"],"lifecycle":[{"event":"open","at":"2026-11-10T14:56:59Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:3","win:early"],"computed_at":"2026-11-10T18:00:21Z"},"pay":{"stated_usd_annual":92007,"is_top_pay":false},"html_url":"https://alion.io/job/stelumar-manager-security-compliance","json_url":"https://alion.io/job/stelumar-manager-security-compliance.json","meta":{"generated_at":"2026-11-10T18:00:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7400,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4416696},"rest":"https://alion.io/mcp/rest/get_company?id=4416696"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstelumar-manager-security-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstelumar-manager-security-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstelumar-manager-security-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stelumar-manager-security-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstelumar-manager-security-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4020677}},{"tool":"search_jobs","arguments":{"company":"stelumar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4020677},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}