search Browse Jobs
Senior Manager, Information SecurityBenevity · Calgary, Alberta
Benevity logo

Benevity

company page ↗

Senior Manager, Information Security

🗓️ Posted 2026-08-24 Calgary, Alberta Fulltime Hybrid ICT
💰 Salary Not shared 📊 Market 10,000 CAD–15,000 CAD/mo

About the Company

MEET BENEVITY Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We're also one of the first B Corporations in Canada, meaning we're as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more Benevity is seeking a Senior Manager, Information Security to lead our security operations, product and application security, and corporate security teams. Accountable for the posture of our cloud-native platform, you will manage both leaders and senior individual contributors while maintaining the technical depth needed to critically review architectures, incident timelines, and risk ratings. In this role, you will partner closely with GRC and fraud operations to drive alignment across the organization. Additionally, you will define how Benevity secures its AI-powered product capabilities and shapes the adoption of AI tooling to accelerate our internal security practice.

Responsibilities

  • ● Lead and coach a multi-disciplinary security team, driving team development, hiring, and a sustainable operating cadence.
  • ● Own critical security KPIs and ensure continuous improvement on various metrics to improve Benevity's security posture.
  • ● Drive the information security roadmap and manage security vendors, aligning execution directly with CISO strategy and direction.
  • ● Oversee end-to-end security operations and incident response, serving as the senior escalation lead during major events.
  • ● Hold external security partners (including MDR providers) accountable for high-fidelity coverage, triage quality, and rapid response.
  • ● Establish AI security standards for LLM integrations, RAG pipelines, and agentic workflows using frameworks like OWASP and MITRE ATLAS.
  • ● Operationalize AI within the security team to enhance triage, threat detection, investigation, and reporting capabilities.
  • ● Embed security into the SDLC via CI/CD automation, SAST/SCA/DAST tooling, secure API patterns, and threat modeling.
  • ● Maintain the enterprise security risk register and vulnerability management lifecycle, prioritizing remediation by real-world risk.
  • ● Direct corporate security hygiene, phishing simulations, security awareness training, and the Responsible Disclosure Program.
  • ● Partner with DevOps and GRC to implement infrastructure-as-code security, meet audit compliance obligations, and deliver clear posture metrics.

Requirements

  • ● + years of progressive experience in information security, including 5+ years leading teams
  • ● Breadth across security operations, product and application security, and cloud security Hands-on experience managing security operations on AWS, and other cloud providers.
  • ● Hands-on experience leading major incident response, including acting as incident commander, coordinating cross-functional responders and managing communications under pressure
  • ● Practical understanding of AI and LLM security risks, including the OWASP Top 10 for LLMs, prompt injection and the security implications of agentic systems
  • ● A clear, evidence-based point of view on where AI adds value in security work, where it falls short, and how to get it production-ready - and the curiosity to keep revising that view as the tooling changes
  • ● Working knowledge of SAST, SCA, DAST, API and microservices security, proven ability to set direction and evaluate the quality of the work
  • ● Deep understanding of cloud security, threat detection and modern attacker tactics, techniques and procedures in containerized, API-driven environments. Hands-on WAF experience is a must.
  • ● Familiarity with security frameworks including NIST CSF, ISO 27001, SOC 2 Type II, CIS Controls, and OWASP SAMM or BSIMM
  • ● Strong problem-solving and analytical skills, with the ability to communicate security concepts effectively to both technical and non-technical audiences
  • ● A strong sense of ownership and accountability, and the ability to lead initiatives from concept to completion without being directed at every step
  • ● Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
  • ● Nice to have:
  • ● Relevant certifications such as CISSP, CISM or GCIH
  • ● IC-level credentials such as OSCP, CSSLP or GWAPT
  • ● Prior experience in a SaaS product company with a multi-tenant architecture
  • ● DISCOVER YOUR PURPOSE AT WORK
  • ● We're not employees, we're Benevity-ites. From all locations, backgrounds and walks of life, who deserve more
  • ● Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose.
  • ● If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you're valued for who you are and challenged to see who you can become
  • ● It's time to join Benevity. We're so excited to meet you.