Manager, Cybersecurity

About the Workers’ Compensation Board of Nova Scotia The Workers’ Compensation Board of Nova Scotia (WCB) is the province’s provider of workplace injury insurance. We inform and inspire Nova Scotians in the prevention of workplace injury. But if it occurs, we support those whose lives it touches by championing a timely return to safe and healthy work. We also provide caring, compassionate support in the wake of workplace tragedy. Our employees describe the culture as Collaborative, Evolving, Service-Minded and Team-Focused. ​About the Role The Manager, Cybersecurity will lead the day-to-day cybersecurity activities of WCB, while managing and mentoring a technical security team. This role is responsible for overseeing a team of cybersecurity professionals, third-party security monitoring services, operational security functions, and ensuring effective detection, response, reporting, and continuous improvement of the organization’s cybersecurity posture. The manager will work closely with internal and external partners and vendors, contribute to projects and operational initiatives, and provide clear, actionable reporting to management on all cybersecurity activities. Cybersecurity Operations & Oversight •    Manage and oversee daily cybersecurity operations, ensuring effective monitoring, detection, response, and remediation of security incidents. •    Act as the primary operational lead for the third-party security alert monitoring (SOC/MDR) service, including alert triage, escalation, review, and service performance management. •    Oversee vulnerability management activities, including scanning, prioritization, remediation tracking, and reporting. •    Coordinate security awareness training and phishing campaigns •    Oversee incident response and disaster recovery plans, ensuring accuracy and coordinating actions during security breaches. Team Leadership & People Management •    Lead, mentor, and develop the cybersecurity team, fostering a collaborative and operationally effective security culture. •    Assign work, set priorities, and ensure appropriate coverage for daily security operations. •    Provide coaching, manage performance and performance feedback, and support professional development. Technology & Platform Ownership •    Oversee Microsoft security technologies, including Microsoft Sentinel and Microsoft Defender. •    Ensure effective security controls across the Microsoft 365 environment. •    Maintain operational alignment with security best practices and organizational risk tolerance. Governance, Risk & Frameworks •    Apply and operationalize industry frameworks, including NIST CSF 2.0, ISO 27001, SOC2, and Enterprise Risk Management (ERM) practices. •    Support risk assessments, control mapping, and ongoing risk tracking. •    Contribute to the development, maintenance, and execution of cybersecurity policies, standards, procedures, and resilience strategies, including incident response and…