Senior Manager, Information Security - Information Technology Services

Competition Number: 26.09.234
Category: Full-Time Continuing (35 hours per week)
Salary: $106,018 to $143,323 per annum
Closing Date: October 1, 2026

MacEwan University is seeking a Senior Manager, Information Security for a full-time continuing opportunity with Information Technology Services. 

Reporting to the Senior Director, the Senior Manager provides leadership in the operational delivery of IT security operations and governance, risk, and compliance functions. You will strengthen the University’s cyber security posture by overseeing day-to-day security processes, managing vulnerability assessments and security controls, and coordinating operational incident response activities in partnership with the Senior Director. Additionally, you will lead a team of technical professionals, maintain core security technologies and monitor capabilities, and support compliance with privacy, regulatory, and institutional requirements. Through proactive risk management and continuous operational improvement, you play a key role in safeguarding the University’s data and technology assets. 

Key responsibilities include: 

• Leading and managing staff, including assigning and monitoring workload, preparing schedules, responding to emerging issues, approving timesheets and time off requests;
• Fostering an environment of continuous learning and improvement, and encouraging team members to share ideas and feedback;
• Mentoring and developing staff using a supportive approach, including performance management, quality of service, and work output; ensuring staff are well trained, competent, and supported to be successful in their roles;
• Coordinating and leading Cyber Security Incident Response Team (CSIRT) operational activities, including activating the team and managing response workflows and communication during incidents, supporting the Senior Director as the institutional cyber incident lead, and promptly escalating high-impact decisions;
• Maintaining the Cyber Incident Response Plan and leading regular tabletop exercises to validate readiness;
• Collaborating with the Safety, Security, and Emergency Management department to align incident response activities with crisis management and business continuity structures (including the Emergency Operations Centre);
• Overseeing the delivery, operation, integration, and security of Security Operations and Governance Risk and Compliance infrastructure and services, ensuring they are scalable, reliable, and aligned with institutional needs (e.g., vulnerability management, Managed Security Services Provider (MSSP) security operations centre, endpoint detection and response, information protection, and IT risk register);
• Establishing and monitoring service level agreements (SLAs), managing vendor relationships, and ensuring SecOps and GRC service providers meet expectations for quality, security, and cost-effectiveness;
• Building a culture of cyber security awareness across the institution through training, communications, and consistent practices;
• Collaborating with IT units and the IT and Facilities Project Management Offices to integrate security considerations into cross-functional projects, providing technical guidance, and sharing knowledge and best practices; and
• Maintaining current knowledge of emerging information security technologies and best practices, evaluating their applicability to the University, and identifying opportunities to enhance service delivery through continuous improvement, innovation, and the sharing of knowledge across the team.

Skills 

You will have: 

• Significant experience in network, cloud, and application security, along with hands-on experience using cyber security tools such as SIEM and EDR;
• A strong understanding of risk assessment, incident response, and regulatory compliance, particularly within the context of Canadian public sector and post-secondary legislation such as Protection of Privacy Act (POPA) and Access to Information Act (ATIA);
• Knowledge and understanding of change management and process techniques, with the ability to lead/direct change management activities related to cloud services and architecture;
• Familiarity with established security frameworks, including ISO 27000-series, NIST Cybersecurity Framework (CSF), ISACA COBIT 2019, and ITIL 4, provides a foundation for applying structured governance and service management practices;
• Technical proficiency coupled with a customer-focused approach;
• Proven leadership and management skills, including the ability to lead, mentor, and develop staff and foster a positive, productive, and cohesive team environment;
• Commitment to delivering high-quality customer service and improving user satisfaction;
• Strong communication and leadership abilities to effectively guide a diverse team and collaborate with stakeholders at all levels, translating technical concepts into clear, actionable insights;
• Strong interpersonal and teamwork skills to work with an extensive array of individuals both internal and external to the University;
• Excellent analytical, planning, organizational, time management, decision-making and problem-solving skills with keen attention to detail;
• The ability to Lead by example and serves as a positive role model;
• Strong communication skills, both verbal and written, with the ability to convey complex technical information to non-technical end-users;
• The ability to evaluate and formulate recommendations, implementation, and integration;
• Strong project leadership skills; and
• A proactive approach to continuous improvement and operational excellence. 

Qualifications 

• A minimum of a Bachelor’s Degree in Computer Science, Information Systems or a related field.
• Information Security certifications such as CISSP, CISM, CRISC, CISA from ISACA, ISC2 or similar body.
• A minimum of 10 years of progressively responsible experience in information security, including a minimum of 5 years in a leadership role managing enterprise-wide information security programs.
• A minimum of 5 years of hands-on experience with information security mitigation and remediation activities.
• Proven experience with cloud-based technology solutions and working with systems in cloud environments like Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP) as well as leading the migration from legacy technologies to modern platforms.
• Strong background in information security and governance, with experience leading control effectiveness and design reviews, and ensuring compliance with privacy standards Protection of Privacy Act (POPA) and Access to Information Act (ATIA).
• Leadership experience in a unionized environment is considered an asset.
• An equivalent combination of education and experience may be considered.

Position Requirements 

• This position is on campus only.

Benefits 

When you become part of the MacEwan University team, you will enjoy a competitive salary. Our total compensation package includes: 

• Competitive base pay
• Generous vacation time
• Secure pension plan
• Flexible benefits package
• Continuous learning culture
• Opportunities for career growth

How to Apply

To apply, please head to our MacEwan University Opportunities Page, select the job opportunity and click Apply Now. If you require assistance, please contact us at careers@macewan.ca. 

If you are experiencing technical difficulties when submitting your application, please try submitting through a different browser (i.e., Safari, Firefox, Chrome, etc.). If the issue persists, please send a screenshot of the error message to careers@macewan.ca so we can assist and ensure your application is received. 

This position is included under the Out of Scope employee policy (D1015). Applications sourced through this process may be considered for similar opportunities within MacEwan University. 

All qualified candidates are encouraged to apply; however, Canadians and permanent residents will be given priority.