Job Description

Position Details

Job Category: Information & Technology
Division & Section: Toronto Cyber Security, Cyber Operations
Work Location: Metro Hall, 55 John St, Toronto, ON M5V 0C4
Job Type & Duration: Full-time, Permanent Vacancy
Shift Information: Monday to Friday, 35 hours per week
Affiliation: Non-Union
Number of Positions Open: 1
Posting Period: 19-Oct-2026 to 26-Oct-2026

Job Summary

To support the execution of the Chief Information Security Officer's (CISO) mandate, cyber vision and strategy by assisting in the development, enhancement, and operation of the City's Vulnerability Management (VM) program and initiatives across City divisions, agencies, and corporations.

The role will support the timely identification, analysis, prioritization and remediation of vulnerabilities across IT and OT environments, aligning with industry best practices, organizational requirements and applicable regulatory frameworks.

Major Responsibilities

Supports the operation, enhancement and continuous improvement of the Vulnerability Management program with a strong focus on Tenable’s product suite.
Works collaboratively with IT teams, OT teams, security teams and external service providers in the operation and delivery of Vulnerability Management services.
Provides technical support for vulnerability management activities across IT and OT environments.
Assists in implementing enterprise Vulnerability Management strategies, standards, and procedures.
Performs vulnerability assessments and reviews scan results according to established schedules.
Supports the end-to-end vulnerability lifecycle from discovery and assessment through prioritization, remediation and closure.
Identifies and prioritizes all vulnerabilities and provides timely vulnerability assessment reports to key stakeholders.
Follows up with patch management and technology support teams to track vulnerability remediation and validate closure.
Supports the collection, validation and analysis of vulnerability and remediation data to identify trends, risks, compliance gaps and areas for improvement.
Produces and maintains operational vulnerability management dashboards, reports and metrics, including vulnerability trends, remediation progress and compliance indicators.
Assists in preparing reports and presentations for management and stakeholders on vulnerability management activities, program performance, risks and compliance.
Collaborates with stakeholders to help ensure vulnerabilities are understood and remediated in a timely manner.
Maintains current knowledge of vulnerability management technologies, emerging threats, exploitation trends and industry best practices.
Leads or coordinates vulnerability management initiatives, working with IT, OT, security teams, vendors and stakeholders to support the achievement of program objectives.
Provides technical advice and subject matter expertise regarding vulnerability management risks, remediation strategies, security requirements and related technology solutions.
Contributes to the development and continuous improvement of vulnerability management strategies, standards, processes and roadmaps to strengthen the City's cybersecurity capabilities.

Qualifications/Certifications

Post-secondary degree in Business, Information Technology, or a related discipline, or an equivalent combination of education and experience.
Considerable experience with Vulnerability Management in an OT and IT environment.
Experience with Vulnerability Management technologies, methodologies and operational procedures.
Experience working with vulnerability assessment and scanning tools, preferably Tenable products.
Experience with vulnerability prioritization, risk assessment, remediation tracking and reporting.
Knowledge of Microsoft desktop and server operating systems and related technologies.
Demonstrated knowledge of SCADA and Operational Technology (OT) systems, with the ability to lead technical discussions and provide subject matter expertise.
Demonstrated knowledge of cybersecurity principles, frameworks, standards, and best practices.
Valid cybersecurity certification required; CISSP certification is considered an asset.
Experience with vulnerability management tools, methodologies, and remediation practices.
Ability to analyze vulnerabilities, assess risk, and recommend remediation strategies.
Excellent communication, collaboration, analytical, and problem-solving skills.
Ability to manage competing priorities and work effectively in a fast-paced environment.
Demonstrated initiative, sound judgment, attention to detail, and commitment to continuous improvement and professional development.

Please Note

As a condition of employment, the successful candidate will be required to undergo and maintain a satisfactory police record check, background screening, psychological assessment, and any other security clearances deemed necessary. This requirement reflects the highly sensitive and confidential nature of the information managed by the Toronto Cyber Security Division.

A normal work week is 35 hours, however, unforeseen situation may require extended hours of work with little or no prior notice. In case of a cyber incident or breach, rotation shift, continuous extended hours may be required with little or no prior notice.

Equity, Diversity and Inclusion

The City is an equal opportunity employer, dedicated to creating a workplace culture of inclusiveness that reflects the diverse residents that we serve. Learn more about the City’s commitment to employment equity.

Accommodation

The City of Toronto is committed to creating an accessible and inclusive organization. We are committed to providing barrier-free and accessible employment practices in compliance with the Accessibility for Ontarians with Disabilities Act (AODA). Should you require Code-protected accommodation through any stage of the recruitment process, please make them known when contacted and we will work with you to meet your needs.