Senior Manager, Cyber Defense & Incident Response

Vale • Toronto, ON

54d

About The Position

We are seeking a Senior Manager, Cyber Defense & Incident Response to join our global Cybersecurity organization, based in Toronto, Canada.

This is a permanent position with a global scope, supporting cybersecurity operations across all Vale Base Metals locations.
In this high‑impact leadership role, you will design, build, and continuously mature Vale Base Metals’ global cyber defense and incident response capabilities across both enterprise IT and operational technology (OT) environments. You will shape and govern the global Security Operations Center (SOC) operating model, lead threat detection strategies, drive incident readiness, and ensure our resilience against an evolving and increasingly sophisticated cyber threat landscape.
This opportunity is ideal for a seasoned cybersecurity leader who thrives in complex industrial environments and is ready to elevate cyber defense excellence across a global footprint. You will partner with senior stakeholders across IT, OT, engineering, operations, and executive leadership to ensure cyber defense strategies directly support our operational safety, reliability, and business continuity objectives.
You are an accomplished cybersecurity leader with deep expertise across cyber defense operations, incident response, detection engineering, and vulnerability management. You excel at navigating global environments, building high‑performing teams, and aligning cybersecurity priorities with operational and business realities.

Requirements

• A strategic mindset—able to influence executives and shape enterprise‑level direction
• Proven experience standing up or maturing SOC functions
• Strong leadership in crisis environments, with the ability to drive disciplined decision‑making
• Expertise bridging IT and OT cybersecurity in industrial or safety‑critical environments
• Deep understanding of threat intelligence, detection engineering, and modern attack techniques
• Ability to translate complex technical risks into business impact
• Exceptional communication, stakeholder management, and cross‑functional collaboration skills
• High adaptability, initiative, and comfort operating in a fast-moving global landscape.
• Undergraduate degree in Computer Science, Information Security, Engineering, or a related discipline
• SANS GIAC GCIH or equivalent incident response certification
• 11–15 years in cybersecurity roles with increasing responsibility
• Significant experience leading SOC operations, cyber defense programs, or incident response functions
• Experience supporting complex industrial, mining, or large‑scale operational environments.
• Strong background in global team leadership, performance management, and vendor oversight
• Demonstrated experience developing detection strategies aligned to frameworks such as MITRE ATT&CK
• Expertise with SIEM, EDR/XDR, logging architectures, and offensive security validation
• Proven ability to manage high‑pressure cyber events and coordinate cross‑functional crisis response.

Nice To Haves

• Master’s degree
• Advanced certifications such as: GSOM, GCIA, GCFA, GNFA, GCTI (Threat Intelligence)
• Other SANS blue team or SOC leadership certifications

Responsibilities

• Design and operationalize Vale Base Metals’ global SOC operating model
• Govern incident response standards, escalation models, and tactical/strategic response processes
• Develop enterprise telemetry and logging strategies aligned to threat models and critical assets.
• Drive threat detection maturity, integrating threat intelligence and purple‑team insights
• Oversee vulnerability management and offensive security programs
• Lead enterprise incident readiness, crisis exercises, and post‑incident improvement cycles
• Manage SOC capacity planning, staffing, performance, and skill development
• Lead MSSP and SOC‑as-a‑Service partner governance.
• Implement automation and AI‑driven capabilities to enhance detection and response
• Ensure cyber defense resiliency across global, safety‑critical, hybrid IT/OT environments
• Your work will directly impact operational continuity, safety, regulatory compliance, and risk posture across a multi‑billion‑dollar global business

Benefits

• Competitive compensation including a variable annual incentive plan
• Participation in a competitive Defined Contribution Pension package
• Comprehensive benefits package (company paid core coverage, health and dental coverage, flex accounts, disability plans, and optional insurances)
• Leave for all of life’s reasons (vacation, personal, sick, parental)
• Work culture dedicated to safety, diversity & inclusion, and career growth
• Employee Family Assistance Program
• Virtual Healthcare online
• Online training and career development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Senior