Why BCAA?

Feel proud of what you do and help shape the future of BC at a BC Top Employer. We’re driven by purpose – delivering peace of mind to one in three BC households with insurance, roadside assistance, auto repair, Evo Car Share and Evolve E-Bike Share. With a long history of keeping roads safe and giving back in ways that build stronger communities, we offer a wide variety of meaningful, rewarding careers that move BC forward.

BCAA is hiring a Regular Full-Time Manager, Security & Governance!

As the Manager of Security and Governance at BCAA, you're the go-to expert, providing consulting, technical planning, and operational direction in information security and governance. You hold a holistic view of the enterprise and drive effective strategic direction. You're proficient in core server technologies, secure coding, networking, security, and AWS. Understanding service delivery methods is key to supervising departmental health and risks. You lead the Security and Governance team, ensuring smooth execution of strategies. Knowledge of PCI-DSS and NIST CSF is crucial for maintaining accreditation and improving our security maturity.

Who you are :

You are logical, objective, and efficient with attention to detail, proving your capability.

You’re an effective communicator with the ability to build strong relationships at all levels across the organization.

You demonstrate the ability to work both independently and with other team members seamlessly.

You’re highly organized with excellent problem solving and decision-making skills.

You are proactive.

You’re a strong people leader. You enjoy coaching and mentoring team members and helping people succeed in their careers. You create a workplace that inspires and motivates your team to do their best work.

What you’ll do :

Develop strategies, policies, and standards, ensuring their relevance through scheduled reviews.

Lead and guide a highly experienced team comprised of architects and analysts.

Be the key contact for technical discussions and projects involving Security and Governance.

Coordinate or implement security risk assessments and document findings for action plans.

Be at the forefront of new partnerships and define security requirements to help BCAA shift security left.

Work with the infrastructure and cloud manager to craft, implement and maintain a strong cloud security posture program by defining guardrails and ensure compliance.

EnhancePaper and maintain a third-party risk management strategy.

Ensure accurate KPIs are in place for reporting to senior leaders about efficiency and efficacy of the security strategy.

Stay updated on emerging AWS and other cloud technologies, collaborating for implementation.

Develop security awareness and maintain relationships with BCAA’s vendors and business partnersfocusing on optimization and efficiency.

Research, evaluate, and recommend security technologies to integrate within the corporate network.

Lead the Security and Governance budget, guiding for enterprise-wide initiatives.​

Coordinate the Managed Detection and Response Service agreement and attend relevant meetings.

Ensure compliance with privacy laws, accreditation standards, and supervise advancements in information privacy technologies.

Maintain and audit cloud security posture and lead compliance within the CAA ISQS program.

Establish and maintain a risk management program for applications and services.

Run an internal PCI program for compliance and maintenance.

Provide support for network analysis, troubleshooting, and architecture design.

Facilitate knowledge transfer, lead succession, and career development plans.

Improve BCAA’s SDLC by implementing concepts and tools, and help streamlining a secure coding process.

What you bring :

You hold a CISSP, undergraduate degree in Computer Science, or relevant certifications / diplomas.

5 years of experience in senior security roles, including at least 2 years in a supervisory capacity.

You demonstrate understanding of all the components involved in setting up and maintaining systems environments for product, development, testing, staging, and training.

You have experience in AWS cloud environments.

You manage EDR and SIEM environments effectively.

You have experience with CSPM tools and cloud guardrails.

You have experience with communications to executive leadership.

Your experience in designing and implementing security processes, along with proficiency in AWS cloud environments and leading security solutions, makes you an ideal candidate.