AVP, Threat and Vulnerability Management (Cybersecurity)

Location: Toronto, Canada, with a flexible hybrid work model; Waterloo is also listed as an additional location.

Salary: CAD 165,000–235,000 annually, plus eligible incentive compensation.

Company

hirify.global provides financial security and health-related services to clients worldwide.

What you will do

• Lead the enterprise vulnerability management program, including scanning, prioritization, remediation governance, compliance monitoring, zero-day response, platform management, and executive reporting.
• Oversee cyber threat intelligence and threat hunting, operationalizing intelligence for detection engineering, vulnerability prioritization, offensive testing, and security briefings.
• Direct red team and offensive security activities, including application, network, social engineering, physical penetration testing, adversary emulation, and security-control validation.
• Lead blue team and security incident functions, improving detection coverage, alert fidelity, incident response, playbooks, readiness exercises, and post-incident reviews.
• Oversee application security platforms and testing, including static, dynamic, software composition, mobile analysis, annual critical-application penetration testing, and DevSecOps integration.
• Partner across security, engineering, risk, compliance, governance, operations, and training functions; define KPIs and KRIs and communicate cyber risk to executives, the board, clients, and regulators.

Requirements

• 15+ years of cybersecurity experience, including deep expertise in vulnerability management, threat intelligence, application security, or offensive/defensive security.
• Proven leadership of technical teams and enterprise-scale security programs.
• Strong knowledge of vulnerability scanning tools, application security testing platforms, cloud security, and threat intelligence technologies.
• Expertise in red and blue team operations, adversary emulation, web/network/cloud penetration testing, threat hunting, incident detection and response, malware analysis, and security-control validation.
• Knowledge of secure coding, shift-left practices, application security, CI/CD pipelines, DevSecOps, automation, secure SDLC, and large-scale application security programs.
• Experience in regulated industries and supporting audits, regulators, and client assurance programs, including cyber risk quantification or exposure analytics.
• Experience with cloud-native security tooling and modern application architectures.
• Excellent communication, strategic decision-making, influence, and leadership skills, including developing leaders and high-performing teams.
• Certifications such as CISSP, CISM, GIAC, OSCP, GCTI, or CSSLP.
• Reliability Status Clearance is required before starting employment; the process includes a law-enforcement inquiry, credit check, and accounting for six-consecutive-month periods lived or travelled outside Canada during the previous five years.

Culture & Benefits

• Flexible hybrid work model with office and virtual work based on business, client, and individual needs.
• Pension, stock, savings, bonus, and professional development programs.
• Collaborative, inclusive culture focused on continuous improvement and security excellence.
• Multiple career paths and networking opportunities.
• hirify.global holds workplace, trust, inclusion, and mental-health certifications in Canada.