Security & Risk Manager - Information Management & Technology

Nova Scotia Health and IWK Health; Bedford (Ville); On-site; CAD 60,000 - 80,000; Full time

Job summary

A leading health services provider in Canada is seeking an experienced IM/IT Security & Risk Manager to analyze and address cybersecurity risks while leading a specialized team. If you have extensive experience in information technology, risk management, and a relevant academic background with certifications, this position offers an engaging opportunity for professional contribution in a vital sector. Competitive hourly compensation and a benefits package are included.

Benefits

Health and dental insurance

Defined benefit pension plan

Travel insurance

Qualifications

• 6+ years of experience in Information Technology and Information Risk Management.
• 4+ years’ experience as a Security Analyst or similar role.
• Certifications like CISSP, CISA or equivalent are a plus.

Responsibilities

• Lead IM/IT Security & Risk team to analyze cybersecurity risks.
• Collaborate with stakeholders for risk management processes.
• Provide direction on enterprise security architecture.

Skills

Security Analysis

Risk Management

Leadership

Change Management

Education

B.Sc. in Computer Science/Information Security/B. Business

Tools

Microsoft Azure

Amazon AWS

NIST Frameworks

Job description

Click here as an internal applicant.

Req ID:

#
Location:

ProvincialZone,

Westway 1
Department:

IMIT DIR Security Risk Mgmt Digital Infr
Type of Employment:

Permanent

Hourly FT(

100%) x

1
Management/Non UnionP

osition
Posting Closing Date:

8-Aug-25

Nova Scotia Health is the largest provider of health services in Nova Scotia, with some specialized services also offered to clients throughout Atlantic Canada. We’re on a mission to achieve excellence in health, healing, and learning through working together, which is reflected in the hospitals, health centres, and community-based programs we operate across the province. Our passionate team of professionals provides a variety of high-quality inpatient and outpatient services including academic, tertiary, and quaternary care, as well as continuing care, primary health care, public health, and mental health and addictions. Join a diverse team of innovators, collaborators, and creative thinkers today.

Nova Scotia Health employs professionals in all corners of our beautiful province. We believe there's a place here for everyone to call home, from vibrant cities with exuberant nightlife to quaint towns with picturesque trails. The work-life balance that comes with a Nova Scotia Health role means you'll have the time to explore, discover, and participate in that coveted Atlantic lifestyle. Visit us today and check out novascotia to see why more people from across the globe are moving here.

About the Opportunity
The IM/IT Security & Risk Manager (SRM), reports to an IM/IT Director of IT Security, Risk Management and Digital Infrastructure and will provide direction to IM/IT Security & Risk (SRM) and IM/IT Security & Risk Analysts. This position supports the analysis, classification, and response to cybersecurity risks within an organization and has a solid understanding of enterprise security architecture. The SRM addresses cybersecurity risk and analyses the potential business and customer risk, aligning processes and controls to the relevant frameworks and internal systems. The IM/IT SRM manages their team to collaborate with key clinical and business stakeholders throughout the province as the organization, in partnership with the province’s Internal Services Department and the Department of Health and Wellness, moves towards the rationalization of disparate systems and the OPOR strategy.

The IM/IT SRM will be committed to a high standard of performance and will provide support across the organization to leverage IT applications aligned with the NSH’s and its client’s strategic mission, vision and goals. Demonstrating leadership behaviors and capabilities, consistent with LEADS in a Caring Environment framework.

About You
We would love to hear from you if you have the following:

-B.Sc. in Computer Science/Information Security/B. Business with Major in Information Technology or 6+ years equivalent experience in an Information Technology and Information Risk Management
-4+ years’ experience as a Security Analyst, Information Risk Analyst or Enterprise Architecture - Security Architect
-2+ years’ experience leading a risk management or cyber security team
-4+ years' experience as Manager - Cybersecurity an asset
-The following certifications considered an asset - CISSP, CRISC, CISA, CISM, ISO 31000, HCISPP, ISSMP, GIAC (GSLC), GIAC (GSTRT
-Strong applied knowledge of the following preferred:
-Security & Privacy Incident Response (NIST 800-61) & Event Management Processes
-Canadian Privacy Requirements (PIPEDA)
-Current Security Technologies and Tools
-Cloud Services (SaaS PaaS IaaS) as well as Microsoft Azure and Amazon AWS security practices
-Vulnerability Management processes, technologies and practices (NIST 800-40) and information Security Testing & Assessments (NIST #
-Supply Chain Risk Management (NIST #
-Risk Assessment methodologies and practices NIST 800-30, NIST 800-39 & ISO 31000
-Project Management Methodologies (Waterfall and Agile)
-Frameworks: NIST800-53, NIST CSF, ITIL, ISO 27001/02, MITRE ATT&CK(R) COBIT2019, FEDRAMP, CSA CAIQ
-Internal/External Audit Processes
-Please ensure your resume is up to date and includes all relevant education, experience, training, and certifications.

Hours
-Permanent, Full-time Position; 75 Hours Bi-weekly

Compensation and Benefits

$46.36 - $57.95 Hourly

Successful candidates may be eligible for our benefits package which includes health, dental, travel, long-term disability, and life insurance coverage as well as a defined benefit pension plan.

Once You've Applied

Thank you for your interest in this position. Only those applicants selected for an interview will be contacted.
Nova Scotia Health is committed to being a workforce that is free of discrimination, values diversity, and is representative, at all job levels, of the people we serve. We encourage all qualified applicants who self-identify as Indigenous, Black/African Nova Scotian, Persons of Colour, Foreign Nationals/Newcomers, Persons with Disabilities, 2SLGBTQIA+ and self-identify.