Threat Prevention and Security Lead

BC Pension Corporation; Victoria; Hybrid; CAD 90,000 - 129,000; Full time

Job summary

BC Pension Corporation is seeking a Threat Prevention & Security Platforms Lead in Victoria, BC, to guide proactive cybersecurity programs and oversee the security platforms that support them. You will lead governance, roadmaps, and investment priorities, reducing attack surface while aligning with corporate policies and standards.

The ideal candidate holds a CISSP and has significant experience with cloud/hybrid infrastructure, SIEM/EDR/XDR, and vulnerability management, plus leadership of IT

Qualifications

• Degree in computer science or related field.
• CISSP designation.
• 5 years of progressive IT security experience including threat prevention and vulnerability management.
• Experience with enterprise security platforms and cloud/hybrid infrastructure.
• 3 years of leading IT professionals in enterprise environments.

Responsibilities

• Lead threat prevention strategy including threat intel, vulnerability management, penetration testing, threat hunting, and preventive-control programs.
• Direct the strategy, roadmap, governance, configuration, integration, and lifecycle management of enterprise security platforms (SIEM/EDR/XDR, etc).
• Establish and enforce standards for remediation, risk prioritization, SLAs, governance, and measurable risk reduction across environments.
• Supervise and develop staff with performance management and coaching.
• Lead compliance, risk, gap assessments, security investigations, and related activities including STRAs and PIAs.
• Oversee operational readiness, documentation, executive reporting, platform health, vulnerability aging, and control effectiveness.
• Recommend platform investments, manage third-party providers, and ensure service performance and governance.

Skills

CISSP

Threat prevention

Vulnerability mgmt

Leadership

Cloud security

Education

Bachelor's degree in computer science / cybersecurity

Tools

SIEM

EDR

XDR

Cloud platforms

Job description

Reports to: Assistant Director, Cyber Security

Salary Range: $90,000.08 to $128,800.00 per annum

Union/Excluded: Excluded

*This position may be reviewed to confirm exclusion from BCGEU membership

Security Screening: Required

Job Type: Regular full time

Apply Before: 7 Sept 2026 11:59 PM

Additional Info: An eligibility list to fill future vacancies may be established. Testing may be required. Lesser qualified applicants may be appointed at a lower level.

We are seeking a Threat Prevention & Security Platforms Lead to join our team in Victoria, British Columbia, Canada.

As the Threat Prevention & Security Platforms Lead you will guide the development and delivery of proactive cybersecurity programs and the security platforms that support them. You will lead the optimization, governance, and integration of enterprise security technologies while supporting roadmaps, standards, and investment priorities. You will play a key role in reducing the Corporation’s attack surface and strengthening its overall security posture by identifying, prioritizing, and mitigating threats before they become incidents. You will supervise staff and work across teams to coordinate implementation, ensure effective governance, and align security activities with corporate policies, legislative requirements, and standards for protecting sensitive information.

The ideal candidate is a CISSP-certified cybersecurity leader with progressive experience in IT security, threat prevention, vulnerability management, and enterprise security platforms. You bring strong knowledge of cloud, hybrid infrastructure, and modern security tools such as SIEM, XDR, and vulnerability management solutions, along with proven experience supervising IT professionals and providing technical oversight in complex enterprise environments.

Hybrid Work Model

This position is located in our Victoria, BC office. You will have the flexibility to work part of the time on-campus and part of the time off-campus. The requirement for on-campus presence is a minimum of 40% of your schedule in a month. Additional requirements are determined by the role functions and operational needs of each business area.

About the Team

The Architecture, Information Management and Security branch (AIMS) provides enterprise architecture services, information management and security operations services to the BC Pension Corporation. AIMS delivers leadership around strategic technology planning and directly supports BC Pension's Plan 20|30 initiatives. As well, AIMS ensures the confidentiality, availability, and integrity of all corporate information and data systems and is accountable for fully complying with relevant regulations, standards and legal frameworks. Additionally, AIMS is responsible for the operation of all enterprise cyber security solutions and the overall security of our IT systems and data, across the entire technology landscape.

Responsibilities

• Lead the Corporation’s threat prevention strategy, including threat intelligence, vulnerability and exposure management, penetration testing, threat hunting, and preventive-control programs.
• Direct the strategy, roadmap, governance, configuration, integration, and lifecycle management of enterprise security platforms and technologies, including SIEM/EDR/XDR, Vulnerability Scans, Vulnerability Aggregator, Cloud Security Platform, and related security telemetry integrations.
• Establish and enforce enterprise standards for vulnerability remediation, risk-based prioritization, SLAs, exception governance, escalation pathways, and measurable risk reduction across environments.
• Supervise and develop staff, including work assignment, performance planning and management, leave approval, discipline processes, grievance responses, coaching, mentoring, and team building.
• Lead compliance, risk, gap assessments, security investigations, and assessment activities, including STRAs, PIAs, penetration testing, remediation validation, and alignment with legislative, audit, and security requirements.
• Oversee operational readiness, documentation, executive-level performance reporting, platform health, vulnerability aging, SLA attainment, exception trends, and control effectiveness.
• Recommend platform investments and sourcing models, support procurement and vendor negotiations, and manage third‑party providers to ensure service performance, issue resolution, continuous improvement, and governance reporting.

Qualifications

Must have

• A degree in computer science, cybersecurity, information systems, or a related field. An equivalent combination of education, training, and experience may be considered.
• Certified Information Systems Security Professional (CISSP) designation.
• Five years of progressive experience in IT security must include the following:
• Expertise in threat prevention and vulnerability management.
• Working in an enterprise environment with cloud platforms (e.g., Microsoft Azure/M365, Oracle Cloud), security operations tools (e.g., SIEM, XDR, vulnerability management), and hybrid infrastructure.
• Administering or providing technical oversight for enterprise security platforms and services.
• Modern enterprise security technologies and platforms across cloud, endpoint, application, and network environments.
• Three years of experience leading and supervising IT professionals, preferably in a unionized environment.

Nice to have

• Certified Information Security Manager (CISM) designation.
• Offensive security certifications such as OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), or GCTI (GIAC Cyber Threat Intelligence.
• Experience with cloud security services such as Intune, Microsoft Sentinel, Microsoft Defender, Entra ID, Defender for Cloud.
• Experience establishing platform operating models, service-level expectations, and continuous improvement plans for enterprise security platforms.

Knowledge, Skills and Abilities

• Strong leadership and supervisory skills, including coaching, mentoring, and developing staff with clear accountability for program and platform outcomes.
• Excellent analytical, problem-solving, and decision-making skills with the ability to translate technical findings into business risk and executive-level reporting.
• Strong written and verbal communication skills with excellent attention to detail.
• Knowledge of enterprise security platforms and operations, including configuration, integration, lifecycle management, monitoring, and vendor/service-provider management.
• Knowledge of threat prevention disciplines, including vulnerability management, exposure management, penetration testing, threat intelligence, and threat hunting.
• Technical knowledge of network, application, endpoint, identity, data, and cloud security architectures, including Zero Trust principles.
• Knowledge of offensive security techniques, testing methodologies, and remediation validation practices.
• Knowledge of change management, project management, and service management practices.
• Ability to establish and maintain effective working relationships across technical teams, business stakeholders, and executive leadership to drive remediation and security outcomes.
• Ability to continuously learn evolving cybersecurity threats, threat actor TTPs, platform capabilities, and industry best practices.

Application requirements

Cover letter: Please do not submit a cover letter; it will not be reviewed.

Resume: A resume is required as part of your application. Ensure your resume includes your education, the start and end dates (month and year) of your employment, and any relevant information that relates to the job requirements.

Questionnaire: As part of the application process, you will be prompted to complete an online questionnaire to demonstrate how you meet the job requirements. Responses will be used to shortlist applicants against the job requirements. Please allow approximately 15 minutes to complete this questionnaire.

Applications will be accepted until 11:59 pm PST on the closing date. Late applications will not be considered.

Diversity & Inclusion

BC Pension Corporation is an equal opportunity employer committed to establishing an inclusive, equitable, and accessible environment for all. All qualified applicants will receive consideration for employment without regard to race, national origin, age, religion, disability, sexual orientation, gender identity or expression, marital status or any other basis protected by applicable law.

We are committed to ensuring that reasonable accommodations are made available to persons with disabilities during the recruitment, assessment and selection processes and will provide reasonable accommodations upon request. If you require assistance or accommodation due to a disability, please email us at [e-mail].

Thank you for your interest in working with us. We will let you know about your status in this competition as soon as possible. If you have questions about this opportunity, please email us at [e-mail].

About Us

BC Pension Corporation is one of the largest professional pension service providers in Canada. We serve over 780,000 active and retired members and more than 1,000 plan employers, paying out more than $540 million in benefits each month (over $6.5 billion a year) to over 240,000 retirees.

One in eight BC citizens is a member of one of the five pension plans we serve.

Services include providing plan information to members and employers, managing contributions and member records, paying pension benefits, and providing policy, financial and communication services to plan boards. We are a community of dedicated professionals who share common beliefs about client service and a desire to make our organization an even better place tomorrow as it is today.