New York, New York
Fairfax, VA, Virginia
Posted: 08-May-26
Location: Victoria, British Columbia, Canada
Type: Full Time
Salary: $135,000-$160,000
Currency:
Region:
About Us
British Columbia Investment Management Corporation (BCI) offers an exceptional opportunity to work at a world-class organization while living in a west coast setting. With $295.0 billion of gross assets under management, as of March 31, 2025, British Columbia Investment Management Corporation (BCI) is the provider of investment management services for British Columbia’s public sector and one of the largest asset managers in Canada. BCI seeks investment opportunities around the world and across a range of asset classes that convert savings into productive capital. Our investment returns play a significant role in helping our institutional clients build a financially secure future for their beneficiaries.
POSTING CLOSE DATE: June 4, 2026
This role is for builders, not gatekeepers. If you’ve built security programs with limited resources, conducted hands-on risk assessments for vendors, SaaS platforms, AI solutions, and software products, and earned your credibility by saying “yes, and here is how safely” rather than defaulting to “no,” you will feel at home here. We are looking for someone whose instincts were sharpened in a leaner, more entrepreneurial setting where resourcefulness and partnership mattered more than inherited process and where you owned the work end to end. A background in software development will set you apart. This is a working leadership role at the head of a small, high-impact team, and we have a strong preference for someone excited to be based at BCI’s headquarters in Victoria, BC, one of Canada’s most livable cities.
WHO YOU GET TO WORK WITH
The Technology department is BCI's innovation catalyst and digital transformation engine, pioneering the future of institutional investment through cutting-edge technology solutions. We architect next-generation platforms powered by AI and cloud-native technologies that drive investment excellence and operational efficiency.
As a strategic partner across all areas of BCI's business, we don't just implement technology—we envision breakthrough digital experiences of the future. Our department leads digital transformation initiatives, creates intelligent automation solutions, and builds secure, scalable infrastructure that supports everything from identifying investment opportunities and decision-making, portfolio management to risk analysis, trade processing, and regulatory reporting.
We cultivate digitally empowered workplaces through advanced collaboration ecosystems and productivity platforms, enabling our Technology and business teams to thrive in tomorrow's investment landscape.
THE OPPORTUNITY
Reporting to the Vice President, Cyber Security, the Senior Manager, Cyber Security Product & Innovation is a senior leadership role with an explicit mandate to position security as an enabler of innovation at BCI. This role serves as the primary security partner for product, data, AI, business and technology initiatives, engaging early in the design and requirements phases to ensure that security is embedded into new capabilities rather than applied as a late-stage gate.
The Senior Manager leads a team responsible for application security, vendor, product and AI risk assessments, DevSecOps integration, and the development of reusable secure-by-design patterns. The role operates with a "yes, and here is how safely" orientation, translating security risk into plain-language, business-navigable options that allow BCI's technology and innovation teams to move with speed and confidence.
This role owns the security advisory relationship with BCI's product, data engineering, and innovation functions and is accountable for resolving security impasses at the working level, escalating to the VP, Cyber Security only where risk falls outside approved appetite thresholds.
WHAT YOU BRING
- Degree, diploma, or certification in Computer Science, Information Security, or an equivalent combination of education and relevant experience
- 8+ years of progressive experience in cyber security, with a minimum of 3 years in a people leadership role
- Demonstrated experience in application security, DevSecOps, or product security within a complex technology environment
- Proven ability to translate technical security risk into business-relevant language and options for non-technical stakeholders
- Strong relationship management and influencing skills, with experience working across product, engineering, and business functions
- Experience conducting security risk assessments for systems, applications, and AI/ML solutions
- Relevant certifications such as CISSP, CISM, CSSLP, or equivalent are an asset
Technical Skills
A combination of knowledge and/or hands-on experience is desired across the following areas:
- Application security principles and practices including OWASP, threat modelling, secure SDLC, and DevSecOps integration
- Security risk assessment methodologies for systems, applications, SaaS platforms, and AI/ML solutions
- Knowledge of AI governance frameworks, model risk considerations, and data handling requirements for AI use cases
- Cloud security principles, particularly in Azure and SaaS environments
- Familiarity with security frameworks and standards including NIST CSF, ISO 27001, CIS Controls, and Zero Trust architecture
- Experience with DevSecOps tooling and CI/CD pipeline security integration
- Understanding of API security, identity and access management principles, and data classification frameworks
- Experience with vendor risk assessment processes and third-party security evaluation
WHERE YOU WILL WORK
This role will be based in our office in downtown Victoria, BC. We are an in-person collaborative organization with the flexibility to work remotely one day a week.
SALARY RANGE
The annualized base salary range for this Victoria-based role is CAD $135,000-$160,000.
Our recruitment process requires that the successful candidate agrees to undergo a criminal record search, education and designation verification; to provide a declaration of no previous or current criminal status; and to comply with our corporate Code of Ethics & Professional Conduct.
Interested in joining our team and want to learn of other career opportunities with BCI? Create a profile and sign up for job alerts at: https://bci.wd10.myworkdayjobs.com/BCI_Careers.
