Manager, Cloud Security

About Wealthsimple

• Employment Type: Permanent Full Time
• Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money.
• Using smart technology, we take financial services that are often confusing, opaque and expensive and make them transparent and low-cost for everyone.
• We’re the largest fintech company in Canada, with over 4 million users who trust us with more than $70 billion in assets.
• Our teams ship often and make an impact with groundbreaking ideas.
• We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work.

Manager, Cloud Security Role

• Lead a team of high-performing security professionals, overseeing the security of our cloud environments which are primarily in AWS.
• Collaborate closely with infrastructure, GRC, application security, and vulnerability management teams.
• Establish rapport with leadership, as well as internal, consultant, and third-party teams to support our company’s cybersecurity posture and resiliency.
• Report to the Director, Security Engineering.
• Mandate to expand the existing team and domain.

Opportunities in this Role

• Collaborate with security and engineering leadership to architect and articulate a scalable and resilient vision and roadmap for secure cloud environments that support business objectives.
• Use team rituals to hold DRIs accountable for the outcome of their work while ensuring risks and priorities are proactively communicated with stakeholders. SLA, budget and project delivery estimations are reliable and agreed upon in advance.
• Develop programs and recommend necessary changes to ensure the company’s systems are fully compliant with all applicable regulatory requirements and privacy laws and future proof against new developments in the industry or potential security incidents.
• Act as the primary point of contact for cloud security requirements, initiatives, and escalations with the requisite subject matter expertise.
• Proactively communicate the state of your domain's security posture to both technical and nontechnical stakeholders.
• Build and mentor the team, focusing on employee retention and career growth by fostering a 'people first' environment with clearly stated expectations and robust support to achieve high standards.
• Define key performance indicators, objectives and key results, and metrics to illustrate efficacy of the cloud security program integrating results with Vulnerability Management, GRC, or Security Operations.

First 3 Months

• Complete an initial assessment of the cloud security program and team and articulate key risks and opportunities to the business.
• Review and prioritize existing issues with the team and bring any cross-functional work to the appropriate betting tables to secure buy-in from stakeholders.
• Take ownership of vendor relationships for CNAPP and CWP tools.

First 6 Months

• Develop growth plans for the team based on existing needs including any training, conference, or sourcing budget that may be required.
• Establish good working relationships with vulnerability management, application security, and platform teams.
• Establish KPIs or SLAs that define excellence on this team and establish a strong operating cadence for direct reports in concert with their peers and management team with at least a 4-month roadmap.

First 12 Months

• Prepare the team’s annual roadmap, budget, and headcount plan for the new year with appropriate buy-in from stakeholders.
• Review the team’s performance against stated objectives, evaluate control effectiveness, and highlight any suggested changes to the program.

What You'll Bring

• Courageous