Manager, Cybersecurity

Alberta Innovates / InnoTech Alberta • Edmonton, AB

15h • CA$95,100 • Hybrid

About The Position

The Manager, Cybersecurity is an opportunity to be part of a professional, purpose-driven team that values collaboration, innovation, accountability, and continuous improvement. Most importantly, your work will contribute to meaningful outcomes that make a difference for Albertans and help shape the future of our province.

Requirements

• Post-secondary Diploma in computer science, computer systems technology, Information technology, related discipline, or equivalent work experience.
• 8 years of combined experience in information systems security, IT infrastructure, network operations, and IT architecture, including experience establishing cybersecurity governance, control frameworks, strategy, or roadmaps.
• 2 years in a people-leadership or program-leadership position, ideally leading a security or technical team and managing third-party service providers.
• One or more recognized security certifications is required, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Cloud Security Professional (CCSP), or Certified Information Systems Auditor (CISA).
• Broad knowledge of IT architecture tools and methods.
• Comprehensive knowledge of business requirements and processes, while effectively acting as a liaison between technical and business stakeholders.
• Ability to communicate complex architectural and security concepts in plain language.
• Strong planning, priority management, and time management skills.
• Ability to extract business needs and functional requirements to implement appropriate technologies and programs.
• Excellent verbal, written, listening, and interpersonal skills.
• Strong customer service focus and a "can do" attitude.
• Proven ability to work with business unit leaders to gain an understanding of where the business is going, build plans to support them getting there.

Responsibilities

• Support the development, implementation, and ongoing maturity of the IT Control Framework (ITCF), establishing the hierarchy of policies, standards, and procedures and aligning them to recognized frameworks and Government of Alberta requirements.
• Assist in development along with management and maintenance of the organization’s cybersecurity strategy and multi-year roadmap with input from IT and business area leadership. This includes prioritizing initiatives by risk and business value and measuring delivery against defined outcomes and metrics.
• Chair and coordinate cybersecurity governance committees and working groups in consultation with the Business Continuity Manager. Prepare risk posture, roadmap progress, and decision materials for senior leadership and the Board, and hold accountability for the accuracy, completeness, and timeliness of information provided to the Director for executive and Board reporting.
• Coordinate and manage the organization’s response to internal and external audits (including the Office of the Auditor General), coordinating evidence, control narratives, and remediation commitments.
• Manage the cyber risk register and lead enterprise cyber risk management, including emerging risks such as artificial intelligence, machine learning, post-quantum cryptography, third-party/supply-chain exposure.
• Partner with the business to develop and embed security frameworks, controls, and reference architectures that support new subsidiaries and lines of business as they are established.
• Support the organization’s expansion into intellectual property ownership and co-investment by protecting sensitive IP, deal, portfolio information, and advising on the security and data-handling implications of new commercialization and equity activities.
• Support the aerospace and defense divisions by anticipating heightened security, research-security, and controlled- or dual-use information requirements, and by aligning controls to applicable Government of Canada and sector expectations.
• Act as a security advisor in due diligence, onboarding, and integration of new subsidiaries and partners, assessing risk and defining the controls required before systems and data are connected.
• Provide oversight of security operations, ensuring monitoring, threat detection, and response delivered by the Cybersecurity Operations Lead and MSSP are effective and aligned to the cybersecurity program.
• Own the incident response program and serve as incident commander for significant security events, directing investigation, containment, recovery, and post-incident review with support from the Cybersecurity Operations Lead. Escalate to the Director where an incident carries material organizational, legal, regulatory, or reputational exposure.
• Ensure the organization's security monitoring tooling and capabilities are fit for purpose, supporting the Cybersecurity Operations Lead in their selection, implementation, and continuous improvement.
• Set operational priorities and direction for the cybersecurity team and manage day to day MSSP service delivery, monitoring performance against contracted outcomes and escalating commercial or contractual issues to the Director.
• Oversee the use of penetration testing, security assessments, and external threat intelligence services, ensuring findings are prioritized and tracked to resolution.
• Provide leadership to team by setting clear goals and monitoring performance.
• Drive effective performance management and professional development plans for team members.
• Offer ongoing feedback, mentorship, and training to build capability and high performance.
• Foster collaboration between IT Services teams to ensure integrated delivery of programs and services.
• Ensure adherence to policies and practice standards.
• Provide a clear strategic vision for the cybersecurity team, aligning it with organizational goals.
• Oversee identity and access management, ensuring Identity and Access Management (IAM) policy, access controls, and periodic access reviews are in place and aligned to the ITCF and compliance requirements.
• Provide oversight and recommendations related to network and endpoint security, ensuring protective controls, configuration standards, and vendor-delivered services meet the program's defined standards.
• Ensure an effective security awareness and training program is maintained, including phishing simulations and role-based education, and that security is embedded into onboarding in partnership with Human Resources.
• Ensure disaster recovery and business continuity plans for security-relevant systems are maintained, tested, and integrated with incident response.
• Ensure security architecture and technology decisions align with the cybersecurity strategy, roadmap, and reference architectures, and recommend significant security solution selections to the Director for approval.
• Foster collaboration across IT and business teams to ensure integrated delivery of cybersecurity programs and services.
• Build strong relationships with stakeholders, facilitating collaboration and alignment with organizational objectives.
• Cybersecurity community involvement related to Cyber Alberta and other pertinent public sector cybersecurity associations or communities.
• Collaboration and integration with Risk and Business Continuity team to define, support and update risk and business continuity.

Benefits

• Competitive compensation aligned with our internal career framework and pay structures
• Professional development and learning opportunities to help you grow and advance your career
• A collaborative and inclusive workplace where diverse perspectives are valued and every contribution matters
• Flexible work arrangements, where operationally appropriate, along with vacation and earned time off to rest, recharge and help you bring your best self to work.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: Associate degree