About the Role
The Security Manager is a hands-on leader who will strengthen and mature the organization’s cybersecurity program across cloud platforms, Microsoft 365, identity, data, networks, endpoints, Windows and Linux servers, AI-enabled services, and telecom and fixed-wireless operations. Working closely with Engineering, Operations, HR, Legal, Privacy, Compliance, and external service providers, this role turns cyber risk into practical priorities, measurable controls, and clear reporting for senior leadership.
Key Accountabilities
1. Security Governance and Architecture
- Own and maintain the cybersecurity strategy, roadmap, risk register, policies, standards, exceptions, and executive dashboard.
- Define a clear security baseline, track progress through meaningful metrics, and drive continuous improvement across the organization.
- Align security architecture and controls with Zero Trust principles, and applicable telecom and privacy requirements.
2. Cloud, Network and Infrastructure Defense
- Lead security across Azure, Microsoft 365, Entra ID, Defender, Purview, Key Vault, Azure Policy, privileged access, applications, secrets, APIs, and security logging.
- Strengthen identity and access controls through MFA, Conditional Access, Privileged Identity Management, least privilege, and regular access reviews.
- Oversee firewalls, VPNs, IDS/IPS, network segmentation, and fixed-wireless and cloud interconnections, including the lifecycle of Check Point and Fortinet platforms.
- Set and enforce standards for Windows and Linux hardening, vulnerability management, remediation, and patching service levels.
3. AI Governance and Data Protection
- Establish practical guardrails for approved AI use and identify Shadow AI, Shadow IT, unsanctioned SaaS, and unmanaged devices through cloud, DNS, firewall, application-control, and endpoint telemetry.
- Protect proprietary code, customer and network data, and personal information through data loss prevention, tenant and data isolation, least privilege, and insider-risk controls.
- Assess third-party AI and SaaS services for data retention, model training, privacy, copyright, and security risk before approval and throughout the vendor lifecycle.
4. Security Operations, Incident Response and Vendor Oversight
- Lead security monitoring, detection, triage, and response across cloud, identity, networks, endpoints, servers, and SaaS environments.
- Maintain and test incident-response, ransomware, and AI-related playbooks, including escalation paths, executive communications, and post-incident reviews.
- Manage SOC performance, including log coverage, alert quality, investigation standards, and service-level commitments.
- Oversee third-party security risk, audits, customer security questionnaires, cyber-insurance requirements, remediation plans, and the cybersecurity budget.
What You’ll Bring
- Five or more years of progressive experience in cybersecurity, including responsibility for security operations, risk management, or security program leadership. Experience in telecom or large-scale infrastructure environments is an asset.
- Hands-on expertise with Azure and Microsoft 365 security, including Entra ID, Conditional Access, MFA, Defender, Purview, and privileged access management.
- Practical experience with Check Point and Fortinet technologies, network security controls, SIEM platforms, endpoint protection, and Windows and Linux hardening.
- Knowledge of NIST, CIS Controls, ISO 27001, Zero Trust, incident response, vulnerability management, and policy and exception governance.
- Experience identifying and controlling Shadow IT and Shadow AI, implementing DLP, and defining responsible AI security guardrails.
- Ability to translate complex technical risk into clear business impact, practical recommendations, and concise executive reporting.
- Knowledge of applicable Canadian privacy, data-protection, and telecom obligations.
Skills, Knowledge & Abilities
- A collaborative, accountable leadership style with strong judgment, communication, and influence across technical and business teams.
- Ability to effectively manage multiple and complex priorities in a fast-paced environment, consistently delivering against a strategic business plan.
- Solutions oriented with excellent ability in developing and implementing new strategies and procedures to drive innovation.
- Excellent interpersonal and communication skills, with strong background in managing relationships with internal and external stakeholders.
Please submit your resume via email to: teragocareers@terago.ca
TERAGO is an Equal Opportunity Employer and welcomes and encourages applications from all interested and qualified candidates. TERAGO will provide accommodations throughout the recruitment, selection, and/or assessment process to applicants with disabilities. If selected to participate in the recruitment, selection and/or assessment process, please inform TERAGO staff of the nature of any accommodation(s) that you may require in respect of any materials or processes used to ensure your equal participation.
