Senior Manager, Corporate Security

D2L · Kitchener, Ontario

  • Senior
  • Full-time
  • Posted 2026-11-09
  • Confirmed live on 10 November 2026

Apply at D2L

Job description

D2L is a cloud company that is modernizing education and building the Future of Work. The old models of teaching and learning are in the midst of the largest transformation in history, and D2L is at the heart of that fundamental shift.

New models of teaching and learning enable a personalized, student-centric experience – and deliver improved retention, engagement, satisfaction, and results for learners of all ages – in schools, campuses, and companies.

D2L is disrupting the way the world learns, by providing the next generation learning environment and solutions to engage and inspire learners. And most importantly, by giving customers a platform that is easy, flexible, and smart. No other company provides a solution as robust and innovative as D2L.

D2L has had a singular mission for 25 years and is dedicated to that same mission in the years ahead: to transform the way the world learns – and by doing so, we will help improve human potential globally.

Every application we receive is personally reviewed by a member of our Talent Acquisition team - yes, a real person looks at your resume! While we use AI tools internally to streamline tasks like meeting notes, summaries, and administrative work, these tools never rank resumes, make hiring decisions, or influence candidate evaluations.

General Description:

The Senior Manager, Corporate Security leads the corporate security function and its day-to-day operations and owns the corporate security roadmap. This role is accountable for protecting the organization’s corporate infrastructure, including identity, endpoints, networks, collaboration and SaaS platforms, and cloud and on-prem environments, through disciplined operations, sound architecture, and risk-based decision-making. The Senior Manager leads and develops a team of security professionals, stays close to high-impact technical work, and partners closely with GRC, Product Security and Corporate Security teams to deliver a consistent, coordinated security program across the organization.

The Senior Manager influences corporate infrastructure standards and investment decisions across IT and engineering, translates security risk into clear business terms for senior leadership, and provides input into budgeting, vendor selection, and vendor performance.

How you'll make an impact:

Corporate Security Leadership & Operations

• Lead, coach, and develop the corporate security team, including hiring, onboarding, performance management, and succession planning.

• Own day-to-day corporate security operations, including vulnerability and patch management, endpoint and email security, SaaS and identity security, and security monitoring.

• Set team priorities, capacity plans, and on-call coverage, and balance operational demands against roadmap delivery.

• Define operating cadences, runbooks, service levels, and metrics so operations are repeatable, measurable, and continuously improving.

• Serve as the escalation point for corporate security issues, and stay hands-on where deep technical judgment is required.

Corporate Security Roadmap & Strategy

• Build, maintain, and communicate the corporate security roadmap (12–36 month horizon), refreshed at least annually and as risk or business priorities change.

• Align the roadmap to business strategy, risk posture, and regulatory requirements, and prioritize initiatives by risk reduction and business impact.

• Translate the roadmap into funded, sequenced initiatives with clear owners, milestones, and success measures.

• Track and report delivery progress, risks, and outcomes to security and IT leadership.

Corporate Infrastructure Influence & Architecture

• Influence corporate infrastructure strategy and design with IT, cloud, and engineering teams so security is built in from the start.

• Define and maintain security standards, guardrails, and reference patterns for cloud and on-prem corporate infrastructure.

• Lead threat modeling and security design reviews for material infrastructure changes, with documented, risk-based recommendations.

• Drive adoption of least privilege, segmentation, hardening baselines, and blast radius reduction across corporate environments.

Partnership with GRC and Product Security

• Partner with GRC on the risk register, control design, evidence, and audit readiness (e.g., SOC 2, ISO 27001, GDPR), providing technical validation for corporate controls.

• Partner with Product Security on shared standards, tooling, vulnerability management, and incident response so corporate and product environments are protected consistently.

• Establish clear responsibilities, handoffs, and escalation paths between Corporate Security, GRC, and Product Security.

• Align roadmaps and priorities across the three groups, and surface cross-cutting risks and dependencies early.

Risk, Controls & Compliance

• Identify, assess, and prioritize corporate information security risks, and provide risk-based input into form

Prepare for the interview

Nothing collected for this employer yet. The Blind 75 is what technical screens draw from; practice it here, with a coach, in Java or Python.

More at D2L

All open software jobs