2 months ago
Toronto, CanadaSenior
Responsibilities
- Implement, configure, and operate cybersecurity technologies across TMX Group’s multi-cloud environments.
- Design and implement resilient cloud security architecture and controls for threat protection, monitoring, and incident response.
- Analyze threat and vulnerability feeds, assess compensating controls, validate control effectiveness, and resolve false-positive findings.
- Act as the liaison between Security Engineering and Cloud Infrastructure teams to align cloud solutions with security policies and standards.
- Monitor IT security compliance and support risk identification, remediation, and reporting workflows.
- Develop security metrics, automated governance, control verification, and proactive threat mitigation workflows.
- Advise internal teams on cloud threats, regulatory expectations, and security methodologies while mentoring technical partners.
Requirements
- Hands-on experience securing at least one major cloud provider—AWS, Azure, or GCP—with deep knowledge of cloud security configurations, compute, storage, and networking.
- Experience designing and managing RBAC, ABAC, SAML/OIDC federation, SSO, least-privilege controls, and multi-account enterprise architectures.
- Proficiency with Terraform or AWS CloudFormation and experience embedding security testing into CI/CD pipelines.
- Strong scripting or coding skills for security automation, log parsing, API integrations, and automated remediation.
- Advanced knowledge of encryption, KMS, HSM, and enterprise secrets management tools such as HashiCorp Vault or AWS Secrets Manager.
- Experience with VPC design, micro-segmentation, WAFs, egress filtering, and Zero Trust Architecture principles.
- Practical experience securing containerized workloads and platforms such as Kubernetes, including network policies, secrets protection, and runtime security.
- Strong understanding of threat modeling frameworks, impact levels, and black-box, gray-box, and white-box security assessment approaches.
Benefits
- Hybrid workstyle based in Toronto, ON, with two to three days per week in the office.
- Generous time off and leave programs, workplace flexibility, and wellness-focused support.
- Opportunities to work with emerging technology, innovation, digital finance, and mission-critical global market systems.
- Career growth opportunities and employee-led social impact initiatives.
Categories
About TMX Group
TMX Group operates Canada’s primary market infrastructure, including Toronto Stock Exchange, TSX Venture Exchange, and Montréal Exchange, plus clearing and depository services (CDCC, CDS) and market data units. It serves issuers, investors, brokers, and energy traders with listing, trading, clearing, data, and analytics, and earns fees from transactions, listings, data subscriptions, and technology platforms like Trayport. Headquartered in Toronto, TMX Group is a public company listed on the TSX.