Manager, IT Operations & Security

About Highclere Capital

Highclere Capital is a growing, Ontario-based mortgage finance company focused on providing innovative lending solutions to underserved borrowers across Canada. Operating in a regulated financial services environment, we place a strong emphasis on security, compliance, service excellence, and responsible growth.

As a remote-first organization with an expanding in-office presence, we are building a culture rooted in accountability, collaboration, and a shared commitment to doing the right thing for our brokers, partners, and team members.

The Opportunity

We are seeking an experienced Manager, IT Operations & Security to oversee and support all technology operations across the organization. This role is responsible for day-to-day IT operations, oversight of our Managed IT Service Provider (MSP), advancing information security initiatives, and ensuring compliance with Canadian regulatory and cybersecurity requirements.

The ideal candidate understands the demands of operating in a regulated Canadian financial services environment, particularly with respect to data privacy, security, business continuity, and audit readiness. This is a hands-on leadership role that combines operational ownership with security and compliance accountability.

Key Responsibilities

IT Operations & Support

• Serve as the primary escalation point for internal IT support requests
• Oversee end-user computing, device provisioning, user lifecycle management, and software licensing
• Maintain IT asset inventory, monitoring, and lifecycle planning
• Ensure uptime and reliability across critical business applications (LOS, CRM, POS, underwriting tools, etc.)

Managed Service Provider (MSP) Oversight

• Manage the relationship with our MSP and ensure service levels meet expectations
• Review operational and security reports; track KPIs and escalate issues as needed
• Coordinate infrastructure projects, security initiatives, and escalated support cases

Business Continuity & Disaster Recovery

• Support development, documentation, and testing of business continuity and disaster recovery plans
• Conduct annual tabletop and recovery exercises to ensure readiness
• Maintain continuity procedures that comply with provincial and federal oversight expectations

Information Security & Privacy

• Maintain and enhance the company’s Information Security Program and supporting policies
• Ensure compliance with Canadian privacy legislation, including PIPEDA and applicable provincial laws
• Oversee access controls, MFA enforcement, network security requirements, and privileged account processes
• Coordinate cybersecurity awareness training and phishing simulations
• Lead risk assessments, vulnerability management, and incident response readiness

Compliance, Audit & Regulatory Support

• Prepare documentation for internal and external audits, regulatory examinations, and vendor reviews
• Serve as the primary IT contact for auditors, regulators, investors, and third-party partners
• Track remediation activities and ensure corrective actions are completed promptly

Technology Governance & Continuous Improvement

• Maintain and update IT policies, standards, procedures, and governance frameworks
• Support IT budgeting, vendor selection, contract evaluations, and license management
• Assist with system integrations and management of mortgage-related platforms
• Evaluate opportunities for modernization, automation, and responsible use of AI across business functions

Qualifications & Experience

Required

• 5+ years of experience in IT operations, IT management, or cybersecurity
• Experience working in a regulated environment (financial services, lending, fintech, or similar)
• Experience managing MSP or third-party IT vendor relationships
• Strong knowledge of Microsoft 365, SharePoint, Entra ID/Azure AD, endpoint administration, and cloud security fundamentals
• Familiarity with audit processes and regulatory compliance expectations
• Strong communication skills and ability to work cross-functionally

Preferred

• Experience with Canadian mortgage industry systems (e.g., Filogix Expert, Newton Velocity, MortgageBOSS, or similar platforms)
• Knowledge of SOC reports, NIST frameworks, or cybersecurity best practices
• Relevant certifications such as Security+, CISSP, CISM, ITIL, or similar

What Sets You Apart

• Highly organized with exceptional attention to detail
• Self-directed and comfortable operating in a growing organization where priorities evolve
• Strong ability to manage day-to-day IT operations with a hands-on, execution-focused approach
• Customer-service mindset and strong problem-solving capabilities
• Ability to collaborate effectively with Executive, HR, Underwriting, Funding, Servicing, Compliance, Sales/Marketing, and Finance teams

Additional Information

• This role is eligible to participate in Highclere Capital’s annual bonus program
• Candidates must be legally eligible to work in Canada

Our Commitment to Inclusion and Accessibility

Highclere Capital is an equal opportunity employer and is committed to creating an inclusive, accessible workplace for all employees.

Accommodation is available upon request for candidates taking part in all aspects of the recruitment and selection process, in accordance with applicable accessibility legislation. Any information received relating to accommodation will be addressed confidentially.

Use of AI in Recruitment

Highclere Capital may use AI-enabled tools to help review and organize applications. All hiring decisions are made by qualified members of our recruitment team.