Sr Manager, Cyber Defense and Incident Response Jobs in Toronto, Canada at Hays
Title: Sr Manager, Cyber Defense and Incident Response
Company: Hays
Location: Toronto, Canada
Category:
Your newpany
Join our diverse team of 15,000 talented individualsmitted to transforming critical minerals into prosperity and sustainable development in countries like Canada, Brazil, Indonesia, the United Kingdom, and Japan. We invite you to use your skills with us and contribute to something meaningful and enduring.
Your New Role
As the Senior Manager, Cyber Defense & Incident Response, you will lead the global cyber defense strategy, strengthening resilience across enterprise IT and operational technology (OT) environments. Operating from Toronto with a worldwide mandate, you will design, build, and continuously mature our global Security Operations Center (SOC) operating model while driving incident readiness, threat detection, and response excellence across all regions.
In this high‑impact leadership role, you will:
Shape andern the global SOC framework, including operating models, analytics, escalation processes, and service delivery.
Develop enterprise‑wide detection strategies informed by modern attack techniques, threat intelligence, and MITRE ATT&CK.
Lead coordinated incident response activities, crisis management, tabletop exercises, and post‑incident improvement cycles.
Oversee vulnerability management, offensive security validation, and global cyber defense engineering.
Drive automation, analytics, and AI‑enabled enhancements to reduce response times and improve detection fidelity.
Strengthen cyber resilience across hybrid IT/OT environments inplex, safety‑critical industrial operations.
Manage SOC teams, global partners, MSSPs, and performance structures ensuring agility, quality, and continuous capability uplift.
Your work will directly support operational continuity, safety, regulatorypliance, and the overall risk posture of a multi‑billion‑dollar global business. You will collaborate closely with leaders across IT, OT, engineering, operations, and the executive team to ensure that cyber defense strategies align with business-critical objectives.
What You’ll Need to Succeed
You are a seasoned cybersecurity leader with deep experience in cyber defense operations, SOC leadership, incident response, and detection engineering. You excel in fast-moving global environments and bring both the strategic mindset and technical depth needed to build world‑class cyber defense capabilities.
11–15 years of progressive cybersecurity experience.
Extensive leadership in SOC operations, cyber defense programs, or incident response.
Experience working within large‑scale industrial, mining, or operational environments.
Strong background in global team leadership, performance management, and vendor/MSSP oversight.
Demonstrated expertise developing detection strategies aligned to threat frameworks (e.g., MITRE ATT&CK).
Hands‑on experience with SIEM, EDR/XDR, logging architectures, and offensive security validation tools.
Proven success managing high‑pressure incidents and leading cross‑functional crisis response efforts.
Ability to translateplex technical risks into clear business and operational impact for senior stakeholders.
Strongmunication, adaptability, and collaboration skills across globally distributed teams.
Education
Required:
Undergraduate degree inputer Science, Information Security, Engineering, or a related field.
SANS GIAC GCIH or equivalent incident response certification
Preferred:
Advanced cybersecurity certifications such as: GSOM, GCIA, GCFA, GNFA, GCTI or other threat intelligence certifications, SANS blue team or SOC leadership certifications
What You’ll Get in Return
Participation in apetitive Defined Contribution Pension package
Leave for all of life’s reasons (vacation, personal, sick, parental)
Work culture dedicated to safety, diversity & inclusion, and career growth
Online training and career development opportunities
