Your steps to apply
Senior Specialist, Digital Trust (Vulnerability Management)
City of Toronto · Toronto · Closes tomorrow
Sign in to save your progress. Free, with just your email. You can read all the steps without an account.
1 Check who can apply You are here
The posting lists no extra eligibility rules beyond the qualifications. The successful candidate must pass a police record check, background screening, a psychological assessment and any other required security clearances.
Education: Post-secondary degree in Business, Information Technology or a related field, or an equivalent mix of education and experience.
Experience: Extensive experience in vulnerability management within IT and OT environments.
What they ask for:
- Post-secondary degree in business, IT or a related field, or equivalent education and experience.
- Extensive experience in vulnerability management across IT and OT environments.
- Experience with vulnerability scanning tools, preferably Tenable products.
- Knowledge of SCADA and operational technology systems.
- Knowledge of Microsoft desktop and server operating systems.
- Strong communication and stakeholder management skills.
2 Resume and cover letter
Tailor your resume to this posting: use its words and show each requirement with a concrete example. In Canada, leave out your photo, age and marital status. Add a short cover letter if the posting asks for one or accepts it.
3 Apply on the official site
Closing date: November 2 (Closes tomorrow) Check the closing time on the posting.
Apply through the official City of Toronto posting before the closing date. The posting period was extended and runs until November 2, 2026.
4 Interview, tests and references
If you are shortlisted, they contact you, often by email. Interviews can be in person or by video, and some jobs also have a written or practical test. Have two or three references ready: former supervisors who know your work.
Good to know:
- The posting period was extended by an amendment dated October 19, 2026.
- The successful candidate must pass security screening, including a psychological assessment.
- Extended or rotating hours may be needed with little or no notice during a cyber incident or breach.
- The position is non-union.
Kandidatu is an independent website: only the official posting counts. Read it before you apply.