Cybersecurity Manager

The Cybersecurity Manager, IT Risk Management is responsible for overseeing the identification, assessment, and mitigation of all security threats and vulnerabilities within the WCB environment.

This position provides leadership and guidance to the Cybersecurity & IT Risk Management team for all management functions of the unit.

This role will be a key member of the WCB Cybersecurity Governance Committee, assisting with developing the cybersecurity strategy, roadmap, and cybersecurity programs for WCB.

• Managing Unit:
  • Manages staff and labour relations issues, providing leadership, guidance, support, and direction to the unit, including hiring staff, conducting performance reviews, identifying training and development needs, coaching and motivating staff, and coordinating work activities.
  • Fosters a multi-disciplinary team approach.
  • Prepares and manages the unit's budget, ensuring accountability for meeting budget targets and goals.
  • Continuously evaluates, develops, selects, and implements the unit's service delivery operating model, competencies, methods, and tools.
  • Plans, directs, and oversees the management, delivery, and coordination of a portfolio of cybersecurity projects for the unit.
  • Establishes, authorizes, and oversees the implementation of training and development programs for staff.
  • Cascades branch operational objectives, ensuring staff meet established standards and practices, and makes improvements to work processes as necessary.
  • Ensures all staff are aware of and subscribe to their responsibilities to protect the confidentiality and privacy of information and addresses any breaches as appropriate.
  • Manages staffing workload allocation, reviews and approves monthly time tracking for all branch resources, and prioritizes work against operational objectives and planned commitments.
• Cybersecurity & IT Risk Management:
  • Leads cybersecurity operations and day-to-day cybersecurity activities, including patch deployment, vulnerability management, incident response, threat detection, network monitoring and logging, endpoint protection, demilitarized zone (DMZ) management, etc.
  • Facilitates Cybersecurity Governance Committee meetings, assisting the Committee with developing and implementing a cybersecurity strategy, framework, and roadmap aligned with WCB priorities.
  • Prepares comprehensive monthly Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for the Cybersecurity Governance Committee.
  • Prepares and presents security and IT risk management materials, cybersecurity initiative updates, and compliance reports to WCB senior management and the Cybersecurity Governance Committee.
  • Conducts regular meetings with key stakeholders at IT and enterprise levels to discuss risks, trade-offs, and share relevant knowledge on cybersecurity risks, threats, and initiatives.
  • Partners with business stakeholders to raise awareness of cyber risk management concerns.
  • Develops and implements comprehensive cybersecurity strategies, policies, and procedures to safeguard WCB assets and mitigate risks.
  • Oversees regular IT risk assessments and security audits to identify areas for improvement and ensure compliance with relevant regulations and security standards.
  • Collaborates with cross-functional teams and WCB business stakeholders to integrate security best practices into business processes and technology solutions.
  • Maintains cybersecurity incident response plans, prepares WCB to detect, respond, and recover from cybersecurity incidents, coordinates incident response efforts, and reports on impact, root-cause, and post-mortem lessons to Cybersecurity Governance Committee, WCB Executives, and Board of Directors.
  • Acts as the management escalation point for all security incidents.
  • Tracks business case outcomes for cybersecurity-related initiatives, including cost, benefits, and risk.
  • Represents cybersecurity considerations in architecture decisions and IT initiatives.
  • Manages third-party risk program to address cyber risks existing on third-party systems.
  • Maintains awareness of emerging cybersecurity threats, technologies, and best practices to continuously enhance WCB's security posture.
  • Fosters a culture of security awareness and accountability throughout the organization.
• Managing Service Providers:
  • Procures IT services and/or contractors in accordance with WCB standards and practices.
  • Establishes and maintains vendor relationships.
  • Develops a service provider network and manages relationships with contractors, including monitoring performance, service deliverables, and achievement of milestones.

• Completion of a recognized degree or diploma program in Information Security, Computer Science, or an IT-related discipline.
• Minimum ten (10) years of Information Technology experience, including minimum five (5) years in Cybersecurity and IT risk management, and minimum three (3) years of progressive IT leadership experience supervising/managing IT professionals, preferably in a large, unionized environment.
• Strong understanding of cybersecurity frameworks, standards, and regulations, e.g., ISO/IEC 27001, ITIL, COBIT, as well as those from NIST, including the Cybersecurity Framework.
• Strong technical knowledge of on-premises and cloud-based platforms and experience with security technologies and tools, such as SIEM, IDS, IPS, DLP, endpoint protection, and vulnerability management solutions.
• Proven experience in conducting IT risk assessments, security audits, and developing risk mitigation strategies.
• Experience liaising with and/or presenting to executive management and/or Board-level committees.
• Ability to lead, manage, mentor, and motivate staff to achieve desired results across the division and take corrective action as required.
• Ability to develop and manage operating and capital budgets.
• Strong analytical and problem-solving skills to resolve issues and set direction.
• Strong verbal and written communications skills with the ability to influence, persuade, and negotiate with all stakeholders, senior leadership, and staff.
• Ability to build trust and create positive working relationships with partners, internal/external stakeholders, managed service providers, and external vendors.
• Ability to work under pressure and manage projects across organizational divisions.
• Ability to maintain confidentiality of sensitive and confidential information.
• Knowledge and experience in competitive purchasing practices, IT contracting, and vendor management.
• The ability to communicate proficiently in both official languages (English & French) is an asset, but is not required.
• The following designations would be an asset:
  • ITIL v4 Foundation certification.
  • Project Management Professional (PMP).
  • Lean IT Foundation certification.
  • Certified Information Systems Security Professional (CISSP) certification, or Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).
  • Microsoft Azure Fundamentals certification.

The WCB is committed to building a skilled, diverse workforce with equitable representation of Indigenous persons, visible minorities, persons with disabilities, women, 2SLGBTQ+ persons, and members of other equity-seeking groups.

Applicants are encouraged to indicate in their covering letter or resume if they are a member of these groups.

The WCB recognizes that individuals may face barriers that hinder their full and equal participation in the workplace and is committed to providing reasonable accommodation to all employees and candidates who are or may be disabled by one or more barriers in the workplace.

Accommodations are available on request for candidates taking part in all aspects of the selection process.