Senior Manager, Application Security

D2L is a cloud company that is modernizing education and building the Future of Work. The old models of teaching and learning are in the midst of the largest transformation in history, and D2L is at the heart of that fundamental shift.

New models of teaching and learning enable a personalized, student-centric experience – and deliver improved retention, engagement, satisfaction, and results for learners of all ages – in schools, campuses, and companies.

D2L is disrupting the way the world learns, by providing the next generation learning environment and solutions to engage and inspire learners. And most importantly, by giving customers a platform that is easy, flexible, and smart. No other company provides a solution as robust and innovative as D2L.

D2L has had a singular mission for 25 years and is dedicated to that same mission in the years ahead: to transform the way the world learns – and by doing so, we will help improve human potential globally.

Every application we receive is personally reviewed by a member of our Talent Acquisition team - yes, a real person looks at your resume! While we use AI tools internally to streamline tasks like meeting notes, summaries, and administrative work, these tools never rank resumes, make hiring decisions, or influence candidate evaluations.

As the Application Security leader, you are a key leader in refining and executing on improving D2L’s application security posture across all our products. Your team of application security specialists will work closely with the engineering teams to ensure they are equipped with the tools, information and training needed to understand and improve the security posture of their application and services. The team also partners closely with the information security team and operations teams to monitor and address security risks and incidents affecting our products and services.

How will I make an Impact?

• Lead a team of application security specialists to deliver on the following:
• Application Security Leadership: Provide leadership through sound judgement and strategic organization-wide thinking, owning security programs (policies, standards, and procedures) and partnering with teams, influencing security decisions, and embedding security best practices into the SDLC.
• Conduct Security Assessments: Perform vulnerability scans and penetration testing to identify potential threats.
• Provide Security Training: Educate development teams on secure coding practices and security best practices.
• Collaborate on Remediation: Work with development teams to address and resolve security vulnerabilities.
• Manage Security Tools: Oversee and maintain application security tools and technologies.
• Stay Informed: Keep abreast of the latest security threats and industry trends.
• Incident Response: Participate in and manage incident response activities related to application security.
• Report Metrics: Track and report on key application security metrics to stakeholders.
• Our current compliance coverage and road map includes ISO27001/17/18; CSAE 3416/SSAE16; SOC1/2/3; NIST

What you’ll bring to the role:

Competencies:

• You have a passion for exploring modern technologies and patterns to maintain the confidentiality, integrity and availability of our services and data and protect D2L's intellectual property.
• You are excited at the prospect of rolling up your sleeves and getting your hands dirty.
• You have excellent written and verbal communication skills, including demonstrated ability to communicate with senior management.
• Quickly adapts to evolving security threats and compliance requirements
• Applies strong analytical and problem-solving skills to address security challenges.
• Takes a strategic approach to security planning, aligning initiatives with organizational objectives.

Skills

• You have a broad and up-to-date understanding of the latest security threats, trends and technologies.
• Implement automated security measures to enhance efficiency and effectiveness.
• Demonstrated skill in responding to security incidents in a cloud environment.
• You have experience building, managing and securing large enterprise, web scale and serverless environments.
• You understand AWS services including compliance, management and security related services.

Suggested Qualifications/Experience:

• In-depth knowledge of ISO27001/17/18, CSAE 3416/SSAE16, SOC1/2/3 and NIST.
• Extensive experience with AWS and expertise in native AWS security features.
• Commitment to enhancing security processes, tooling, and personnel.
• Proven ability to anticipate and proactively address potential security threats.

This position is to fill an existing vacancy

D2L operates in a hybrid work style, with expectation of 3 days per week in office.

Don’t meet every single requirement? We strongly encourage you to still apply! At D2L, we are committed to creating a diverse and inclusive environment. We encourage your application even if you don't believe you meet every single qualification outlined, because we love to help our people grow and develop!

Why we're awesome:

At D2L, we are dedicated to providing you with the tools to do the best work of your life. While some of our perks and benefits may vary depending on location or employment type, we are proud to provide employees with the following through #LifeAtD2L:

• Impactful work transforming the way the world learns
• Flexible work arrangements
• Learning and Growth opportunities
• Tuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program
• 2 Paid Days off for SkillsWave-related activities like exams or final assignments
• Employee wellbeing (Access to mental health services, EFAP program, financial planning and more)
• Retirement planning
• 2 Paid Volunteer Days
• Competitive Benefits Package
• Home Internet Reimbursements
• Employee Referral Program
• Wellness Reimbursement
• Employee Recognition
• Social Events
• Dog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices.