Associate Director, Cyber Security

Position Summary

BCIT’s Information Technology Services department is seeking a regular, full-time (1.0 FTE) Associate Director, Cyber Security. The Associate Director, Cyber Security oversees the operations of the Cyber Security Office and serves as a management expert and advisor on all aspects of cyber security governance, related risks and compliance, operational defense, overseeing the day‑to‑day detection, analysis, and response to cyber incidents, ensuring activities are being prioritized and delivered according to plans.

Addresses time‑sensitive issues, protecting the confidentiality, integrity and authentication of users, data and IT assets across the Institute; ensuring timely resourcing and that communications and change management are being actioned. Leads the cyber security team and manages the implementation of a cyber security program to support the evolving needs of the Institute’s cyber security strategy and framework, in alignment with BCIT’s Strategic Plan and the Education Plan.

• Participates as a member of the IT management team, contributing to the development of strategies, plans and policies. Shares responsibility for achievements and successes, tracking and reporting cyber security metrics, incidents and IT risk management efforts.
• Oversees the daily operations of the Cyber Security function, including threat monitoring, detection, incident response, vulnerability management, and the Security Operations (Sec Ops) cross‑functional efforts to coordinate and track security remediations and risk management.
• Ensures the effective implementation and maintenance of cyber security tools, prevention technologies, threat detection, and processes to protect the information technology infrastructure and assets, including KRIs/KPIs from firewalls, intrusion detection systems, and other relevant tools.
• Directs the security threat risk assessment practice, collaborating with cross‑functional teams and partners to prioritize and address identified risks; working closely with Enterprise Risk Management, Privacy & Information Access Office, and Safety & Security and Emergency Management.
• Seeks opportunities to improve the efficiency and effectiveness of cyber security architecture and operations. Provides expertise and contributes to the creation and enforcement of cyber security policies, procedures, and standards across the Institute.
• Establish a continuous vulnerability risk management practice and tools by proactively identifying and addressing security weaknesses and gaps across all digital assets, including Research, Facilities, and Learning & Teaching enterprise systems and software.
• Directs specific cyber security projects and initiatives, in partnership with IT management, ensuring they are completed on time and within budget.
• Acts as the primary point of contact for cyber security escalations and complex security issues, providing expert guidance and decision‑making support.
• Plans and manages technology‑based risk assessments and security audits to identify vulnerabilities and recommend mitigation strategies. Ensures compliance with relevant cyber security regulations and standards, in alignment with NIST Cyber Security Framework (CSF) 2.0.
• Supports the development and maintenance of cyber security incident response plan and leads efforts during security incidents to minimize impact and facilitate recovery.
• Manages the response and reporting for cyber security incidents, coordinating efforts across the cyber security team and with other departments as needed. Conducts post‑incident reviews to identify lessons learned and implement improvements to BCIT’s cyber security posture.
• Collaborates with IT leaders, academic departments, and external partners to integrate cyber security practices across BCIT. Communicates cyber security risks and best practices to faculty, staff, and students through training and awareness programs.
• Participates in the evaluation and management of third‑party vendors and service providers in collaboration with Procurement Services to ensure they meet BCIT’s cyber security requirements.
• Develops and tests disaster recovery and business…