Leads the Application Security program, setting its offensive security roadmap and using AI to advance testing, threat modeling, and shift-left practices while guiding expert teams and influencing security decisions.
Manager, Cyber Resilience & Offensive Security
📜 Description
- Design and execute cyber resilience testing, including red-team exercises and cyber threat simulations.
- Identify ongoing red-team and infrastructure penetration-testing objectives and plan their execution.
- Assess enterprise cybersecurity control effectiveness and contribute to roadmap prioritization.
- Maintain standards, procedures, and guidelines for areas of responsibility.
- Develop measures to monitor control adequacy, compliance, and performance.
- Provide technical guidance to the team and stakeholders; collaborate across functions.
🛠️ Requirements
- A college diploma or university degree in computer science (or related course) or Industry recognized certifications (e.g. CISSP)
- Minimum of 7 years of technical IT experience with at least 3-5 years specifically focused on offensive security roles.
- Strong knowledge of cyber controls testing frameworks such as MITRE Framework
- Strong engineering and automation experience, prior hands-on Security automation experience is desired.
- Ability to build and maintain strong working relationships with cross-functional teams and stakeholders. Collaboration is key to integrating offensive security insights across the organization.
- Strong analytical and problem-solving skills with the ability to think critically and strategically; this role needs to analyze reports to identify patterns and assess weaknesses.
- People and team management abilities.
- Technical roadmap development and execution.
- Ownership & Accountability
✨ Benefits
- Competitive discretionary bonus
- Market-leading RRSP match program
- Medical benefits
- Dental benefits
- Vision benefits
- Life insurance
- Disability benefits
- Employee Share Purchase Plan
Full job description
Join a Challenger
At EQ, we're remaking banking so every Canadian gets ahead, every day. Serving nearly 4 million Canadians from coast to coast, we offer a wide variety of financial services from banking and lending, to trust and credit union solutions.
We've been at this since 1970, challenging the conventions of traditional banking with smarter, faster, and more connected financial experiences.
What's kept us moving? The people behind it all: challengers who ask better questions, push back on old assumptions, and look for a better way forward.
If you're driven to help reshape how banking works for Canadians and the businesses that power our economy, this could be your next big opportunity.
We can’t wait to get to know you!
The Core Responsibilities!
-
Design and execute the bank’s Cyber Resilience Testing program e.g. Red team exercises, cyber threat simulations.
-
Provides input to the effectiveness testing of EQBank’s Enterprise Cyber Security Controls and cyber roadmap prioritization activities.
-
Drive cross-functional collaboration to achieve objectives of the programs in purview.
-
Responsible for maintaining the standards, procedures and guidelines for domains under purview.
-
Develop and manage measures to ensure effective monitoring control adequacy and compliance for areas under purview
-
Developing and Managing means of measured performance of control processes and technologies for areas under purview.
-
Provide technical guidance for team and subject matter advise to stakeholders.
Let's Talk About You!
-
A college diploma or university degree in computer science (or related course) or Industry recognized certifications (e.g. CISSP)
-
Minimum of 7 years of technical IT experience with at least 3-5 years specifically focused on offensive security roles.
-
Strong knowledge of cyber controls testing frameworks such as MITRE Framework
-
One or more of the following certifications are highly preferred: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert), GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CEH (Certified Ethical Hacker), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager)
-
Strong engineering and automation experience, prior hands-on Security automation experience is desired.
Non-Technical Skills
-
Ability to build and maintain strong working relationships with cross-functional teams and stakeholders. Collaboration is key to integrating offensive security insights across the organization.
-
Strong analytical and problem-solving skills with the ability to think critically and strategically; this role needs to analyze reports to identify patterns and assess weaknesses.
-
People and team management abilities.
-
Technical roadmap development and execution.
-
Ownership & Accountability
Similar jobs
Search more Cybersecurity Engineer jobsDesign, operate, and continuously improve enterprise security infrastructure, leading security engineering and operations across endpoint, cloud, identity, OT, vulnerability management, monitoring, incident response, and automation.
Build and lead Snorkel’s security function across cloud infrastructure, application security, and compliance, setting strategy, scaling the team, and serving as the primary security partner to executives, customers, and auditors.
Lidera a estratégia, governança, arquitetura e operação de IAM, conduzindo equipes e plataformas para reduzir riscos de acesso, fortalecer a conformidade e elevar a maturidade de segurança de identidades.
Lead and scale the cybersecurity program, setting strategy and technical direction across products, infrastructure, corporate systems, and development environments while supporting defense, government, and enterprise requirements.
