SENIOR SPECIALIST DIGITAL TRUST (VULNERABILITY MANAGEMENT)

Amendment # 1
October 19, 2026**
Posting period has been extended.Job ID:** 67534
Job Category: Information & Technology
Division & Section: Toronto Cyber Security, Cyber Operations
Work Location: Metro Hall, 55 John St., Toronto, ON M5V 0C4
Job Type & Duration: Full-time,Permanent Vacancy
Salary Range: $126,000.00 - $176,140.00
Shift Information: Monday to Friday, 35 hours per week
Affiliation: Non-Union
Number of Positions Open: 1
Posting Period: 19-Oct-2026 to 02-Nov-2026

JOB SUMMARY:

To support the execution of the Chief Information Security Officer's (CISO) mandate, cyber vision and strategy, developing, enhancing and supporting Vulnerability Management program and initiatives to all City divisions, agencies and corporations.

The role will ensure timely identification, analysis, prioritization and remediation of vulnerabilities across IT and OT environment, aligning with industry best practice and regulatory frameworks.

MAJOR RESPONSIBILITIES:

• Leads the development, deployment and management of a Vulnerability Management program with a strong focus on Tenable’s product suite.

• Works in partnership with other IT teams and external service providers in the operation of the VM program.

• Delivers expert technical capabilities and guidance for vulnerability management services for IT and OT environments.

• Collaborates and enforces the implementation of an enterprise Vulnerability Management strategy for IT and OT environment.

• Performs, reviews and interprets vulnerability assessments based on established schedule.

• Drives the end-to-end vulnerability lifecycle from discovery to closure.

• Identifies and prioritizes all vulnerabilities and provides timely vulnerability assessment reports to key stakeholders.

• Collaborates with stakeholders to ensure vulnerabilities are understood and remediated promptly.

• Ensures timely follow up with patch management and vulnerability remediation in coordination with support teams.

• Leads and delivers reporting and metrics including Key Risk Indicators (KRIs).

• Develops and reports enterprise-level metrics for vulnerabilities and remediation progress.

• Understands, demonstrates, and educates stakeholders on the real-world impact of threats and vulnerability exploitation in a given environment.

• Leads the development of metrics to accurately track the current state of the VM program, trends, compliance and key performance indicators.

• Prepares and delivers metrics and reports for senior management to show efficiency and compliance of security functions.

• Provides technical leadership and subject matter expertise on vulnerability management risks, remediation strategies, security controls, and technology solutions. Collaborates with technical teams and stakeholders to support the successful delivery of enterprise cybersecurity initiatives.

• Contributes to the development and continuous improvement of vulnerability management strategies, standards, processes and roadmaps to strengthen the City's cybersecurity program and support effective risk management.

QUALIFICATIONS/CERTIFICATIONS:

• Post-secondary degree in Business, Information Technology, or a related discipline, or an equivalent combination of education and experience.

• Extensive experience in vulnerability management within IT and OT environments.

• Experience with Vulnerability Management technologies, methodologies and operational procedures.

• Experience working with vulnerability assessment and scanning tools, preferably Tenable products.

• Experience with vulnerability prioritization, risk assessment, remediation tracking and reporting.

• Demonstrated ability to provide technical leadership, guidance, and mentorship to staff and project teams in the delivery of vulnerability management initiatives.

• Knowledge of Microsoft desktop and server operating systems and related technologies.

• Demonstrated knowledge of SCADA and Operational Technology (OT) systems, with the ability to lead technical discussions and provide subject matter expertise.

• Demonstrated knowledge of information security best practices, methodologies, and techniques.

• Strong stakeholder management, influencing, and communication skills, with the ability to collaborate effectively across technical teams, business partners, leadership, clients, and vendors.

• Strong problem-solving and critical-thinking skills, with the ability to exercise sound judgment and resolve complex technical issues.

• Strong analytical, organizational, and time management skills, with the ability to manage multiple priorities, projects, and deadlines in a fast-paced environment.

• Self-motivated and proactive team player with the ability to take initiative and work independently.

• Ability to work effectively within large-scale transformational initiatives and complex cybersecurity environments.

Please Note:

As a condition of employment, the successful candidate will be required to undergo and maintain a satisfactory police record check, background screening, psychological assessment, and any other security clearances deemed necessary. This requirement reflects the highly sensitive and confidential nature of the information managed by the Toronto Cyber Security Division.

A normal work week is 35 hours, however, unforeseen situation may require extended hours of work with little or no prior notice. In case of a cyber incident or breach, rotation shift, continuous extended hours may be required with little or no prior notice.

**Equity, Diversity and Inclusion
**The City is an equal opportunity employer, dedicated to creating a workplace culture of inclusiveness that reflects the diverse residents that we serve. Learn more about the City’s commitment to employment equity.

**Accommodation
The City of Toronto is committed to creating an accessible and inclusive organization. We are committed to providing barrier-free and accessible employment practices in compliance with the Accessibility for Ontarians with Disabilities Act (AODA). Should you require Code-protected accommodation through any stage of the recruitment process, please make them known when contacted and we will work with you to meet your needs. Disability-related accommodation during the application process** is available upon request. Learn more about the City’s Hiring Policies and Accommodation Process.