Manager, Security Operations - Remote

At Kinaxis, who we are is grounded in our common belief that people matter. Each one of us plays an important part in accomplishing our work, building our culture and making a global impact.

Every day, we’re empowered to work together to help our customers make fast, confident planning decisions. This is how we create a better planet – for each other, for our customers and for generations to come. Our cloud-based platform RapidResponse ensures that the products we need – everything from medicine and cars, to day-to-day items like toothpaste – make it to market and into our hands when we need them with minimal ecological footprint.

We make the world better, and you can too.

Manager, Security Operations - Remote 

Job location: This is a remote position. You can work from home and be located anywhere in Canada.

About the team

We’re looking for a Manager, Security Operations to join the team to help define, deliver and lead an effective cyber security strategy, and to provide exceptional leadership and guidance as the direct manager of our team of Information Security Analysts.  Reporting to the Senior Director, Global Information Security, this role will have direct involvement in the creation and maintenance of Company-wide information security strategies, and will be operationally responsible for handling all cyber security-related events and incidents pertaining to Kinaxis Corporate and Kinaxis RapidResponse Software-as-a-Service.

A trusted advisor to the business and an exceptional collaborator, the Manager, Security Operations will work closely with cross functional teams within Kinaxis such as Corporate IT, Cloud Operations, Product Development, Corporate IT, and technology partners to mitigate and improve our operational security and to implement processes that drive quality delivery of services around the world.

What you will do

• Mature and maintain the Kinaxis Security Operations processes
• Manage and develop a team of Information Security Analysts, providing exceptional coaching, guidance, and leadership 
• Oversee the Security Incident Response Process, providing recommendations to continuously improve and enhance
• Take ownership of the cybersecurity tool suite, aligning it with the Kinaxis environment
• Specify requirements for Cyber Health Checks to ensure identification of vulnerabilities and testing of cyber security controls, and to protect other cyber systems; manage the resulting remediating controls for the business
• Act as the primary control point for business affecting information security incidents
• Oversee development of response plans, and provide timely updates and reports to Senior Leadership
• Contribute to the development of cyber security procedures and processes
• Identify and propose key information security program priorities, initiatives, plans, practices and tools
• Recommend, implement and support approved information security enhancement projects and internal/external security audits
• Understand potential and emerging information security threats and vulnerabilities and communicate this information to appropriate team members throughout the Company on a timely basis
• Partner with stakeholders across Kinaxis to assist with disaster recovery and business continuity planning
• Provide assistance to Sales and Support in relation to customer inquiries regarding security, producing customer consumable information and reports as required

What we are looking for 

• Bachelor’s degree in Information Security, Computer Science, Information Management Systems, or similar
• CISM, CISSP or comparable certification required
• Progressive experience in Information Security roles
• 5+ years of experience in a Security Operations for a global organization
• 2+ years of direct people leadership experience
• Strong knowledge and deep understanding of complex network security principles / network concepts such as CASB, VLAN, DMZ, NG firewalls, SIEM, IDS, EDR
• Familiarity with Information Security industry standards/best practices and relevant regulations (e.g. some of SSAE16, SOC 2, PCI DSS, HIPAA, GLBA, FISMA, NIST, ISO27000, CobiT, ISF, OWASP, SANS)
• Analytical and detail oriented
• Strong written and oral communication skills
• ATT&CK experience
• Successful candidate must be able to fulfill all security and confidentiality thresholds for this position

Nice to have

• Certifications in some of CySA+, CISSP, CCSP, CCNA Security, CISM, ISO 27001, ISO 22301, ITSO, CISA, SC-900 or GIAC
• Experience with Indicators of Compromise (IOCs), Indicators of Activity (IOAs) and attack Tools, Techniques and Procedures (TTPs)
• Experienced with forensic analysis tools such as those found in Kali Linux
•  Azure / GCP platform knowledge and experience
• Experience with various forensic log artefacts found in SIEM logs, web server logs, AV logs, protection logs such as HIDS and NIDS logs
• Experience with Sentinel or ELK

What we have to offer

• Challenging Work - We love solving highly complex problems. And as the global leaders in our industry, we never stop innovating—our work is never “done. That’s because across our teams and in all roles, every employee is empowered to bring their best ideas forward and to jump in and solve the problems they’re passionate about.
• Great People - We take our work seriously, but we don’t take ourselves too seriously! It’s in our DNA to celebrate, laugh, and have fun. We are stronger, together, when we are open, honest, and above all, real. Every person is valued here and plays an important role in our shared success.
• Global Impact - As a global team spanning continents, boundaries, and cultures, every day we are inspired by the impact our work has on our colleagues, our customers, our communities, and the world at large.
• Diversity, Equity and Inclusion - Diversity, equity and inclusion are more than words to us. They are the guiding principles for building a culture where we celebrate each others’ differences, continuously strive for equality and recognize that inclusion makes us stronger as individuals, a company and a global citizen. 

For more information, visit the Kinaxis web site at www.kinaxis.com or the company’s blog at http://blog.kinaxis.com/.

Kinaxis strongly encourages diverse candidates to apply to our welcoming community. We strive to make our website and application process accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Human Resources at accommodations@kinaxis.com. This contact information is for accessibility requests only and cannot be used to inquire about the status of applications.