Cyber Security Manager

KF Aerospace•Kelowna, BC

8d•Onsite

About The Position

The Cyber Security Manager is responsible for preventing cybersecurity incidents through real-time monitoring, detection, analysis, and coordinated response. The role collaborates closely with IT leadership to design, implement, and continuously improve KF’s cybersecurity controls, technologies, processes, and governance structures. This position ensures KF meets internal policy expectations as well as all contractual, regulatory, and customer-driven cybersecurity obligations whilst pragmatically balancing those controls with KF’s operational requirements and efficiencies. This role is both strategic and operational: evolving KF’s cyber posture, leading a security team, enabling business operations, and ensuring alignment with industry best practices and modern security frameworks.

Requirements

University degree in Computer Science, Information Systems, Cybersecurity, or a related field, and 10 years of relevant work experience.
Strong technical knowledge of cybersecurity principles, controls, architectures, and best practices, including cloud security (Azure, M365), identity management, and Zero Trust.
Solid knowledge of network hardware, protocols, and standards.
Strong understanding of organizational business goals, operational realities, and risk tolerance.
Thorough knowledge of applicable data privacy practices and laws.
Understanding of Canadian Government security standards and aerospace industry cyber requirements.
Strong project management capabilities.
Experience developing and maturing a cybersecurity program within a multi-site or regulated environment.
Ability to obtain Canadian Government Secret clearance.
Strong leadership and communication skills.
Excellent interpersonal, written, and oral communication abilities.
Pragmatic and business-oriented approach to balancing security and operational needs.
Highly motivated, detail-oriented, and capable of performing effectively in high-pressure environments.
Strong analytical, evaluative, and problem-solving skills.
Collaborative mindset with extensive experience working in team-based environments.
Willingness to travel occasionally to other operational sites.

Nice To Haves

CISM, CISSP certification, or equivalent framework-based certifications preferred

Responsibilities

Work closely with the CIO, IT Operations Manager, and Senior Manager – Applications & Development to develop and evolve security policies, standards, and architectural principles that protect KF networks, data, cloud environments, and assets while enabling business operations.
Anticipate and identify changes in cybersecurity obligations arising from contract amendments, customer requirements, or new bids. Assess impacts and lead adjustments to ensure KF remains compliant.
Conduct regular audits of policies, controls, and processes; recommend targeted improvements to enhance KF’s overall cyber maturity.
Integrate recognized frameworks (e.g., NIST, ITSP10.171, ISO 27001) into KF’s security governance to align with aerospace and defense expectations.
Maintain strong situational awareness of evolving cybersecurity threats, emerging technologies, reported breaches, and regulatory trends.
Ensure KF’s cybersecurity strategy incorporates modern practices such as Zero Trust, identity governance, cloud security principles, and modern endpoint security.
Develop business cases, cost/benefit analyses, and investment plans for cybersecurity initiatives.
Partner with the CIO on annual OPEX/CAPEX budget development and actively manage spending.
Evaluate and improve existing cybersecurity technologies, infrastructure, and cloud-based controls.
Assess the cyber security posture of third-party vendors and partners, recommend acceptance or required remediation, and ensure alignment with regulatory and contractual requirements.
Lead and manage cybersecurity staff, fostering a high-performing, collaborative, and inclusive team culture.
Oversee recruitment, supervision, scheduling, coaching, performance management, and disciplinary actions.
Lead KF’s incident response process, coordinating cross-functional stakeholders, ensuring timely containment and recovery, and conducting post-incident reviews.
Maintain and enhance security playbooks, runbooks, standard operating procedures, and response guidelines.
Manage KF’s cybersecurity training platform and associated awareness campaigns; monitor engagement metrics and optimize campaigns to drive strong user adoption.
Plan, conduct, and report on simulations, tabletop exercises, and other cyber readiness assessments, ensuring learning translates to actionable improvements.
Oversee the production, analysis, and reporting of cybersecurity KPIs; recommend improvements to the CIO.
Produce ongoing internal communications and user education materials to enhance organizational security awareness.
Manage the cybersecurity project portfolio, ensuring prioritization and delivery align with business needs and strategic objectives.
Collaborate with key non-IT departments (Legal, Contracts, HR, PMO, Safety/QA) to ensure integrated cybersecurity risk management across the organization.