Manager, Cyber Resilience & Offensive Security

<p><strong>Join a Challenger<br><br></strong>At EQ, we're remaking banking so every Canadian gets ahead, every day. Serving nearly 4 million Canadians from coast to coast, we offer a wide variety of financial services from banking and lending, to trust and credit union solutions.&nbsp;<br><br>We've been at this since 1970, challenging the conventions of traditional banking with smarter, faster, and more connected financial experiences.<br><br><strong>What's kept us moving?&nbsp; </strong>The people behind it all: challengers who ask better questions, push back on old assumptions, and look for a better way forward.<br><br>If you're driven to help reshape how banking works for Canadians and the businesses that power our economy, this could be your next big opportunity.&nbsp;<br><br>We can’t wait to get to know you!&nbsp;</p><br><em><strong>The Work</strong></em>

&nbsp;

This role&nbsp;is&nbsp;responsible for the&nbsp;Designing,&nbsp;planning and&nbsp;executing&nbsp;the&nbsp;bank’s Cyber&nbsp;Resilience Testing&nbsp;and offensive security&nbsp;program, commonly referred to as “red team exercises”.&nbsp;This role&nbsp;develops and manages processes that&nbsp;identify&nbsp;continuous red team and infrastructure penetration test objectives through the course of the year&nbsp;while also planning execution of threat simulation activities.&nbsp;This role facilitates the communication and presentation of&nbsp;technical&nbsp;cyber control&nbsp;effectiveness&nbsp;to&nbsp;key stakeholders.

The Core Responsibilities!

<ul>

<li>

<p>Design and execute&nbsp;the bank’s Cyber Resilience Testing program&nbsp;e.g.&nbsp;Red team exercises, cyber threat simulations.&nbsp;&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Provides input to the&nbsp;effectiveness&nbsp;testing&nbsp;of&nbsp;EQBank’s Enterprise Cyber Security Controls&nbsp;and cyber roadmap prioritization activities.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Drive cross-functional collaboration to achieve objectives of the programs&nbsp;in purview.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Responsible for maintaining the standards,&nbsp;procedures&nbsp;and guidelines for domains under purview.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Develop and manage&nbsp;measures to ensure effective monitoring&nbsp;control&nbsp;adequacy&nbsp;and compliance for areas&nbsp;under purview&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Developing and&nbsp;Managing&nbsp;means of measured&nbsp;performance of control processes and technologies&nbsp;for areas under purview.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Provide technical guidance for team&nbsp;and subject matter advise to stakeholders.&nbsp;</p>

</li>

</ul>

Let's Talk About You!

<ul>

<li>

<p>A college diploma or university degree&nbsp;in computer science (or related course)&nbsp;or Industry recognized certifications (e.g.&nbsp;CISSP)&nbsp;&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Minimum of&nbsp;7&nbsp;years of&nbsp;technical IT&nbsp;experience&nbsp;with at least 3-5 years specifically focused on offensive security&nbsp;roles.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Strong knowledge of&nbsp;cyber controls testing frameworks such as MITRE Framework&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>One or more of the following certifications are highly preferred: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert), GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), CEH (Certified Ethical Hacker), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager)&nbsp;&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Strong&nbsp;engineering&nbsp;and automation experience,&nbsp;prior&nbsp;hands-on&nbsp;Security automation&nbsp;experience&nbsp;is desired.&nbsp;</p>

</li>

</ul>

<p>Non-Technical Skills&nbsp;&nbsp;</p>

<ul>

<li>

<p>Ability to build and maintain strong working relationships with cross-functional teams and stakeholders. Collaboration is key to integrating offensive security insights across the organization.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Strong analytical and problem-solving skills with the ability to think critically and strategically;&nbsp;this role&nbsp;needs&nbsp;to analyze reports to identify patterns and assess&nbsp;weaknesses.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>People and team management&nbsp;abilities.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Technical roadmap development and execution.&nbsp;</p>

</li>

</ul>

<ul>

<li>

<p>Ownership &amp; Accountability&nbsp;</p>

</li>

</ul>

What we offer [For full-time permanent roles]

&nbsp;

💰 Competitive discretionary bonus&nbsp;

✨ Market leading RRSP match program

🩺&nbsp; Medical, dental, vision, life, and disability benefits

📝&nbsp; Employee Share Purchase Plan

👶🏽 Maternity/Parental top-up while you care for your little one

🏝 Generous vacation policy and personal days&nbsp;

🖥&nbsp; Virtual events to connect with your fellow colleagues

🎓&nbsp; Professional development and comprehensive Career Development program

💛&nbsp; A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

&nbsp;

The incumbent will be working hybrid and in office time will be spent working from EQ Bank’s additional office space located at&nbsp;2200-25 Ontario Street, Toronto, ON.

Equity, Diversity &amp; Inclusion

EQ is committed to building an inclusive, accessible environment where every employee feels valued, respected, and supported. We believe our organiz