Band 3 - Manager, IT Security Operations

The Security Operations Center (SOC) protects government systems, services, information, and technology through a comprehensive suite of cybersecurity capabilities, including security operations, cyber incident response, threat intelligence, investigations, and digital forensics. Working in a dynamic and rapidly evolving environment, the team collaborates with technical experts, operational partners, vendors, and law enforcement agencies to strengthen the Province’s cybersecurity readiness, resilience, and ability to respond to emerging threats.

The Security Operations Manager leads critical cybersecurity functions, including the Security Operations Centre, cyber incident response, threat intelligence, security investigations, and digital forensics services. This role provides strategic and operational leadership to advance 24/7 security operations, enhance detection and automation capabilities, oversee staff and service providers, and advise senior leadership on cyber risks, incidents, and response strategies that help protect the digital services and information relied upon by British Columbians.

Qualifications: Education and Experience Requirements

• Degree, diploma, certification in computer science or other related technical field, or equivalent in education and experience.
• At least three (3) years’ of progressive cybersecurity and leadership experience including:
• Experience leading diverse cybersecurity functions within complex enterprise environments, including security operations, investigations, cyber incident response, threat intelligence, security data analytics, and/or other blue and red team activities, in addition to overseeing or integrating managed security services.
• Experience of modern Security Operations Centre (SOC) operating models, including AI-assisted operations, autonomous and agentic SOC capabilities, 24/7 and continuous operations models, and the design and orchestration of automated security workflows supporting threat detection, investigation, response, and continuous improvement.
• Experience identifying and assessing IT and cybersecurity risks, current and emerging threats, and security incidents, with a strong understanding of the incident response lifecycle, incident management practices, and security investigations.
• Experience with security technology (e.g., Anti-DDoS, firewalls, EDR, CNAPP, Zero Trust, etc.), SIEM / SOAR (or other data analytics platforms), threat intelligence platforms, case management, etc.
• Experience with bringing innovations as part of the existing tool footprint, maximizing usage of SOC tools and reducing false positives.
• Experience in crisis management, with the ability to remain composed and provide leadership during high-pressure security incidents, investigations, and cyber events.
• Strong communication and partner engagement experience, with the experience developing, mentoring, and leading high-performing teams.
• A minimum of two (2) years of relevant work experience in progressively complex technology-enabled environments (e.g., in a service environment with multiple client groups).
• A minimum of two (2) years' experience leading significant IT project implementations.
• A minimum of three (3) years' experience managing professional staff, project teams, budgets, and cross-functional initiatives.

Preference may be given to applicants with one (1) or more of the following:

• Demonstrated commitment to continuous professional development through progressively advanced training and industry-recognized certifications.
• Technical cybersecurity certifications relevant to security operations, incident response, threat hunting, digital forensics, or detection engineering (e.g., GCIH, GSOC, GMON, GCFA, GCFE, GDAT, or equivalent).
• Professional security designation such as Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).

This position can work up to full time from their home in British Columbia subject to an approved telework agreement. A Criminal Record Check (CRC) will be required. Employees of the BC Public Service must be located in BC at the time of employment. This position is excluded from union membership.

The BC Public Service is committed to creating a diverse workplace to represent the population we serve and to better meet the needs of our citizens. We are committed to ensuring that reasonable accommodations are available throughout the hiring process, including the assessment and selection stages.

Join the BC Public Service, a Canada’s Top 100 Employers award winner that offers diverse career opportunities in more than 200 occupations across 280 communities throughout British Columbia. You'll enjoy competitive benefits, a healthy work-life balance, and meaningful work that supports your professional growth. Build your career in beautiful British Columbia.