Threat Prevention and Security Lead

Reports to:

Assistant Director, Cyber Security

Salary Range: $90,000.08 to $ per annum

Union/Excluded:
Excluded

* This position may be reviewed to confirm exclusion from BCGEU membership

Security Screening:
Required

Job Type: Regular full time

Apply Before: 7 Sept 2026 11:59 PM

Additional Info:
An eligibility list to fill future vacancies may be established. Testing may be required. Lesser qualified applicants may be appointed at a lower level.

We are seeking a Threat Prevention & Security Platforms Lead to join our team in Victoria, British Columbia, Canada.

As the Threat Prevention & Security Platforms Lead you will guide the development and delivery of proactive cybersecurity programs and the security platforms that support them. You will lead the optimization, governance, and integration of enterprise security technologies while supporting roadmaps, standards, and investment priorities. You will play a key role in reducing the Corporation’s attack surface and strengthening its overall security posture by identifying, prioritizing, and mitigating threats before they become incidents.

You will supervise staff and work across teams to coordinate implementation, ensure effective governance, and align security activities with corporate policies, legislative requirements, and standards for protecting sensitive information.

The ideal candidate is a CISSP-certified cybersecurity leader with progressive experience in IT security, threat prevention, vulnerability management, and enterprise security platforms. You bring strong knowledge of cloud, hybrid infrastructure, and modern security tools such as SIEM, XDR, and vulnerability management solutions, along with proven experience supervising IT professionals and providing technical oversight in complex enterprise environments.

This position is located in our Victoria, BC office. You will have the flexibility to work part of the time on-campus and part of the time off-campus. The requirement for on-campus presence is a minimum of 40% of your schedule in a month. Additional requirements are determined by the role functions and operational needs of each business area.

The Architecture, Information Management and Security branch (AIMS) provides enterprise architecture services, information management and security operations services to the BC Pension Corporation. AIMS delivers leadership around strategic technology planning and directly supports BC Pension's Plan 20|30 initiatives. As well, AIMS ensures the confidentiality, availability, and integrity of all corporate information and data systems and is accountable for fully complying with relevant regulations, standards and legal frameworks.

Additionally, AIMS is responsible for the operation of all enterprise cyber security solutions and the overall security of our IT systems and data, across the entire technology landscape.

• Lead the Corporation’s threat prevention strategy, including threat intelligence, vulnerability and exposure management, penetration testing, threat hunting, and preventive-control programs.
• Direct the strategy, roadmap, governance, configuration, integration, and lifecycle management of enterprise security platforms and technologies, including SIEM/EDR/XDR, Vulnerability Scans, Vulnerability Aggregator, Cloud Security Platform, and related security telemetry integrations.
• Establish and enforce enterprise standards for vulnerability remediation, risk-based prioritization, SLAs, exception governance, escalation pathways, and measurable risk reduction across environments.
• Supervise and develop staff, including work assignment, performance planning and management, leave approval, discipline processes, grievance responses, coaching, mentoring, and team building.
• Lead compliance, risk, gap assessments, security investigations, and assessment activities, including STRAs, PIAs, penetration testing, remediation validation, and alignment with legislative, audit, and security requirements.
• Oversee operational readiness, documentation, executive-level performance reporting, platform health, vulnerability aging, SLA attainment, exception trends, and control…