Manager Information Security

DEPARTMENT: Info Technology – IT Services STATUS: Regular Full Time NO. OF POSITIONS: 1 UNION: Exempt HOURS OF WORK: 37.5 hours per week SALARY: $147, 768 - $162, 893 annually + comprehensive benefits As a central hub in the Metro Vancouver area, the City of New Westminster delivers a broad spectrum of urban services to over 92,000 residents. New Westminster is rich in history with a viable and thriving economy and has a population representative of the diversity of the region. The City is staffed by talented and dedicated employees who work together to achieve its strategic vision. We have earned a proud reputation for civic leadership, service delivery, and outstanding employee relations. The Manager, Information Security is a new pivotal leadership role for the City of New Westminster, and we're looking for a passionate security professional who's ready to shape and strengthen our cyber security program. In this exempt position, you'll be a trusted advisor to the Chief Information Officer and a key partner to leaders and teams across the organization. Your focus will be protecting the integrity of City data, information systems, and networks—ensuring security is embedded in how we design, deliver, and operate technology services across departments. You're at your best when you're translating complex security risk into clear priorities and practical action. You bring a strong mix of technical credibility and people leadership, and you know how to build relationships while setting a high bar for secure outcomes. You're energized by continuous improvement—building repeatable practices, improving cyber maturity, and making security measurable and meaningful. In this role you can look forward to leading and advancing: City-wide Information Security strategy, planning and design, governance, policy, and standards Security operations improvements (prevention, detection, response and resiliency), across on-premise and cloud environments Close collaboration with other IT functional areas to ensure security best practices are integrated into all the that we do Cyber incident response, investigations, and coordinated remediation Security awareness initiatives that strengthen culture and reduce risk Dashboards and reporting that clearly communicate security posture and risk Development and implementation of security awareness training programs for City staff and contractors Risk assessment and penetration testing to identify and mitigate potential cyber threats Strategic technical advice and consultation to business unit clients and project teams and provides assistance with the adoption of cybersecurity technology and standards The hiring, development and directing of staff, monitoring performance towards division, department, and corporate objectives Collaboration with external stakeholders, including government agencies and other organizations, to establish and maintain partnerships for the exchange of cyber threat intelligence and best practices. Works closely with software vendors and reputable cybersecurity authorities to identify any threats that may impact the City’s systems The development and maintenance of cyber-incident response and contributes to the ongoing development of business continuity plans, application security standards, end point protection, PCI compliance, IOT and communications security To be successful, you have: Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or a related discipline (or an equivalent combination of education and experience) Minimum 7 years of progressive IT experience, including at least 5 years providing cybersecurity/information security services to medium or large organizations (municipal/public sector experience preferred). Demonstrated experience leading or overseeing core cyber security functions such as: Security governance (policies/standards), risk management, and compliance support Incident response and cyber security investigations Security controls design and implementation across applications, infrastructure, networks, and data Professional certification such as CISM, CISSP, ISO 27001/27002 (or an equivalent industry-recognized security credential) Demonstrated ability to communicate effectively with technical and non-technical audiences, including writing reports and presenting effectively to Council, executives and leadership Preferred Qualifications Strong working knowledge of recognized security frameworks and controls, such as: NIST Cybersecurity Framework (NIST SP 800-53) or IS027001/27002 Experience developing and delivering a cyber security program including: Multi-year roadmaps and prioritized initiatives Operational security procedures and repeatable playbooks KPI/KRI reporting, cyber risk dashboards, and continuous improvement metrics Working knowledge of Canadian privacy requirements (with emphasis on BC FOIPPA) and experience supporting compliance expectations in a public-sector environment. Security and risk assessments. Threat monitoring and response processes. Security awareness programs and phishing simulations. Cyber risk register development and maintenance. Experience working with identity and access security concepts and tooling, including authentication/authorization, auditing, and privileged access management (PAM). Demonstrated people-leadership capability including coaching, mentoring, performance management, and building a positive, accountable team culture. Strong stakeholder engagement and relationship management skills—able to influence across departments and collaborate with peers, vendors, and partners. Excellent analytical, research, planning, and organizational skills, with the ability to manage multiple priorities and lead security initiatives from concept to implementation. What We Offer: You will have the chance to join a rapidly growing and diverse team dedicated to supporting the local community, and be able to engage in variety of learning and development opportunities. Additionally, there is an opportunity to participate in an earned day off/flex day program. This position is based in New Westminster with a 50% remote work option available. The City offers an attractive vacation and extended benefits package, including the ability to contribute to the Municipal Pension Plan. We offer our employees great work-life balance, including competitive salaries, comprehensive health and wellness benefits and retirement plans. We also offer a hybrid remote work schedule in accordance with our Remote Work Policy, opportunities for education and training, and engaging, rewarding work. Applicants under consideration may be required to undergo and submit an acceptable police information check. Apply online with your resume and cover letter in one document at www.newwestcity.ca/employment by August 20,2026 To support a workforce that reflects the diversity of our community; women, Indigenous Peoples, racialized individuals, persons of diverse sexual orientation, gender identity or expression (LGBTQ2S+), persons with disabilities, and others who may contribute to diversity of our workforce, are encouraged to express their interest. New Westminster is on the unceded and unsurrendered land of the Halq'eméylem-speaking peoples. It is acknowledged by the City that colonialism has made invisible their histories and connections to the land. We are learning and building relationships with the people whose lands we are on. We thank all applicants for their interest and advise that only those selected for an interview will be contacted. This position is only open to those legally entitled to work in Canada.

Lead the City's information security strategy, governance, and operations to protect data and networks across on-premise and cloud environments. Manage cyber incident response, risk assessments, and security awareness programs while providing strategic advice to the CIO and other leadership.

Requires a Bachelor's degree in a technical field and at least 7 years of IT experience, with 5 years specifically in cybersecurity. Professional certifications like CISM or CISSP and demonstrated experience in security governance and people leadership are required.

• Comprehensive health and wellness benefits • Municipal Pension Plan • Vacation package • Earned day off/flex day program • Education and training opportunities

• Gestion de projetSouhaitée

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Cybersecurity Strategy
• Security Governance
• Incident Response
• Risk Management
• People Leadership
• Stakeholder Engagement
• Compliance Support
• Security Controls Design
• Penetration Testing
• Security Awareness Training
• Identity And Access Management
• Technical Reporting
• Project Management
• Policy Development
• Cloud Security
• Network Security

• Security & Safety
• Technology
• Management & Leadership
• Government & Public Sector

Formation minimale

Diplôme professionnel

Expérience minimale

5+ ans

Postuler avant le

29 août 2026

Langue de l’offre

anglais

Heures de travail

38 heures par semaine

Présence au bureau

3 jours par semaine

Niveau d’expérience

Mid-Senior level