{bc}
Apply
workday

IT Security Manager

Norton Rose Fulbright Canada LLP
Toronto, CAN
Full-time
Manager · 5+ years experience
Hybrid
Discovered 5 days ago
azuresplunk

Full Job Posting

Key Responsibilities

  • Implement and operationalize the firm's global cybersecurity strategy within Canada.
  • Represent Canada in global cybersecurity governance forums, steering committees, and security working groups.
  • Coordinate implementation of global cybersecurity initiatives and control enhancements within the Canadian region.
  • Monitor regional compliance with global cybersecurity policies, standards, and control requirements.
  • Escalate Canadian cybersecurity risks, exceptions, regulatory concerns, and material security issues through established governance processes.
  • Support regional adoption of global security technologies, standards, and best practices.
  • Information Security Governance & Compliance
  • Implement, communicate, monitor, and enforce compliance with global cybersecurity policies, standards, procedures, and control requirements within Canada.
  • Ensure Canadian business units understand and comply with global cybersecurity requirements.
  • Coordinate regional cybersecurity control assessments and compliance reviews.
  • Monitor and report regional compliance against enterprise cybersecurity control frameworks.
  • Support global policy reviews by identifying Canadian regulatory, operational, and client-specific requirements.
  • Coordinate remediation plans for identified control deficiencies and compliance gaps.
  • Security Operations & Incident Response
  • Coordinate Canadian cybersecurity operational activities in partnership with the Global Security Operations Center (SOC).
  • Act as the primary regional point of contact for cybersecurity incidents impacting Canadian operations.
  • Coordinate regional response activities during cybersecurity incidents and security investigations.
  • Support evidence collection, forensic investigations, remediation planning, and recovery efforts.
  • Facilitate communications between Canadian business stakeholders, technology teams, legal counsel, privacy teams, and Global Information Security.
  • Monitor remediation activities resulting from cybersecurity incidents and security investigations.
  • Participate in regional and global incident response exercises and cyber resilience testing.
  • Support implementation of globally managed security technologies and controls.
  • Security Architecture & Technology Assurance
  • Ensure Canadian technology solutions, projects, applications, and infrastructure comply with global security architecture standards and approved design patterns.
  • Participate in technology and project review processes to validate alignment with cybersecurity requirements.
  • Identify regional regulatory, privacy, and business requirements that may require additional security controls.
  • Define supplementary Canadian security standards where local legal, regulatory, or client obligations require additional protections.
  • Collaborate with Global Security Architecture teams on security reviews, risk assessments, and control exceptions.
  • Canadian Regulatory & Privacy Compliance
  • Monitor Canadian legal, regulatory, privacy, professional, and client cybersecurity obligations.
  • Work collaboratively with the Global Information Security organization to ensure these requirements are appropriately addressed within the firm's control environment.
  • Support compliance initiatives related to:
  • PIPEDA
  • Quebec Law 25
  • Provincial privacy legislation
  • Client confidentiality requirements
  • Legal professional privilege obligations
  • Cross-border data transfer requirements
  • Data residency requirements
  • Support responses to client cybersecurity assessments, audits, and security questionnaires.
  • Coordinate regional cybersecurity activities supporting client contractual obligations and security commitments.
  • Cybersecurity Assurance & Reporting
  • Develop and maintain regional cybersecurity metrics and reporting dashboards.
  • Monitor and report on:
  • Vulnerability remediation performance
  • Security awareness compliance
  • Access review compliance
  • Policy exception management
  • Audit remediation activities
  • Third-party cybersecurity risks
  • Security control compliance
  • Regulatory compliance obligations
  • Provide regular cybersecurity reporting to Canadian leadership and the Global CISO organization.
  • Coordinate follow-up activities for security audits, assessments, penetration tests, and regulatory reviews.
  • Track cybersecurity program effectiveness through key performance indicators and risk metrics.
  • Artificial Intelligence (AI) Security & Governance
  • Implement and operationalize global AI security, Responsible AI, and AI governance requirements within Canada.
  • Support the secure adoption of AI technologies, including Microsoft Copilot, Generative AI solutions, and Machine Learning platforms, while ensuring alignment with global AI governance frameworks, regulatory requirements, and client obligations.
  • Skills and Experience Required
  • Education
  • Bachelor's Degree in Computer Science, Software Engineering, Information Technology, or related field.

Experience

  • Minimum 10 years of progressive cybersecurity and information security experience.
  • Minimum 5 years of leadership or management experience.
  • Demonstrated experience managing enterprise security programs within complex hybrid environments.
  • Experience securing cloud and SaaS environments, including Microsoft Azure and Microsoft 365.
  • Experience implementing governance and security controls for AI, Machine Learning, and Generative AI solutions.
  • Experience leading security audits, compliance initiatives, and regulatory assessments.
  • Experience managing third-party security vendors and service providers.
  • Experience presenting cybersecurity strategy and risk to executive leadership and governance committees.
  • Security Platform
  • Microsoft Sentinel
  • Microsoft Defender Suite
  • CrowdStrike Falcon
  • Splunk Enterprise Security
  • Qualys
  • Soft Skills
  • Strong analytical and problem-solving skills.
  • Excellent communication and presentation abilities.
  • Ability to work independently and within cross-functional teams.
  • Strong stakeholder management skills.
  • Customer-focused mindset.
  • Ability to manage multiple priorities in a fast-paced environment.
  • Required
  • Education
  • Bachelor's Degree in Computer Science, Software Engineering, Information Technology, or related field.

Preferred Certifications

  • Any of the following will be nice to have:
  • CISSP – Certified Information Systems Security Professional
  • CISM – Certified Information Security Manager
  • Why join our team:
  • Hybrid work environment
  • Retirement savings plan with employer contribution
  • Benefit premiums paid by the firm
  • Telemedicine services
  • Wellness matters: Flexible health and wellness allowance that covers much more than gym memberships!
  • Training and development programs based on your interests and needs
  • The salary bands provided reflect the typical range for this role in the region indicated. We recognize that each candidate brings a unique set of experiences and skills, and final compensation will be thoughtfully determined based on individual qualifications and current market factors. Please note that salary will be discussed and negotiated during interview.
  • Toronto: $111,600 - $150,900
  • Ready to join a proactive and modern firm that provides an exceptional career experience in an inclusive and collaborative environment? Come join us!
  • As part of a global legal practice, Norton Rose Fulbright Canada embrace a culture of excellence and client service, but always with a focus on flexibility, respect, diversity and openness. We strive to create an equitable, inclusive environment where everyone can bring their whole self to work and realize their career potential.
  • To find out more about how we integrate diversity, equity and inclusion in everything we do please click Diversity, equity and inclusion | Canada | Global law firm | Norton Rose Fulbright.
  • If you require any reasonable adjustments during the recruiting process, please inform us in the recruitment application. We will contact you to further discuss your need.
  • Please note that applicants who receive an employment offer may be required during their employment with Norton Rose Fulbright to provide proof of vaccinations recommended from time to time by government or public health authorities. Norton Rose Fulbright has a duty to accommodate those who are unable to get vaccinated due to protected grounds. For applicants who require an accommodation, please contact us to discuss further.
  • Law around the world nortonrosefulbright.com
  • Please note that this job posting is being advertised to fill an existing vacancy.
  • Law around the world
  • nortonrosefulbright.com

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Norton Rose Fulbright Canada LLP

Catering Attendant

Toronto, CAN

Discovered 4 days agoFull-time

Clerk, Office Services and Facilities - Part time

Québec, CAN

Discovered 6 days agoPart-time

Corporate, Securities and M&A Associate (Years 2-5)

Toronto, CAN

Discovered 2 weeks agoFull-time

Catering Attendant / Receptionist

Vancouver, CAN

Discovered 2 weeks agoFull-time

Client Programs Manager - Directories and Awards

Toronto, CAN

Discovered 3 weeks agoFull-time

Senior Data Platform Engineer

Toronto, CAN

Discovered 3 weeks agoFull-time

Senior Client Insights Analyst

Calgary, CAN

Discovered 3 weeks agoFull-time

Legal Assistant - Litigation

Montréal, CAN

Discovered 3 weeks agoFull-time