{"id":4222330,"url":"https://alion.io/job/seaspan-manager-cyber-security","title":"Manager, Cyber Security","company":{"id":2008236,"name":"Seaspan","domain":"seaspan.com","url":"https://alion.io/company/seaspan","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":83,"open_postings":10,"ghost_share":0,"stale_share":0.9,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vancouver, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":143100,"max":174900,"currency":"CAD","period":"year","gross":null,"usd_annual":122688},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Machine Learning","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-11-12T15:46:07Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T05:54:48Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Cyber Security Manager, Governance, Risk and Compliance leads Seaspan Shipyards’ cybersecurity governance, risk, compliance and assurance programs. The role is accountable for readiness and ongoing compliance with the Canadian Program for Cyber Security Certification (CPCSC), Cybersecurity Maturity Model Certification (CMMC), GDPR, Canadian privacy requirements and other contractual or regulatory obligations.\nThis is a working-manager role. The Manager provides direction to cybersecurity staff while remaining hands-on in risk assessments, policies, control documentation, remediation plans, audit evidence and executive reporting. The role also provides security oversight for AI, DevSecOps, cloud services and third parties.\nNote: This position qualifies for an optional hybrid work schedule after 90 days of onsite work and onboarding. Employees will be subject to the terms of the Flexible Work Policy Agreement.\nWhat you'll do\nGovernance, Risk and Compliance\nLead cybersecurity governance, risk, compliance and assurance programs, including CPCSC and CMMC readiness, certification and continuous compliance.\nTranslate contractual, regulatory and privacy obligations into practical business and technology controls.\nMaintain an integrated control framework aligned with CPCSC, ITSP.10.171, CMMC, NIST SP 800-171, NIST CSF, ISO 27001, GDPR and applicable Canadian privacy requirements.\nMaintain policies, risk registers, control documentation, compliance evidence and dashboards; report material risks, overdue actions and decisions required.\nRecommend remediation, compensating controls or formal risk acceptance where requirements cannot be fully met.\nCompliance Delivery and Assurance\nDefine the scope and boundaries of environments processing sensitive government, defence, personal or regulated information.\nDevelop and maintain System Security Plans, Plans of Action and Milestones, control matrices, inventories, data-flow diagrams and audit evidence.\nCoordinate control owners across IT, OT, Contract Security, Legal, Privacy, Procurement and business operations.\nLead risk and gap assessments, control testing, evidence reviews, audit preparation and remediation tracking.\nCoordinate assessors, auditors, certification bodies, customers and government stakeholders; manage supplier and subcontractor compliance obligations.\nEnsure controls operate effectively and are supported by defensible evidence.\nPrivacy, AI and Third-party risk\nPartner with Legal and Privacy teams on GDPR, Canadian privacy requirements, privacy impact assessments, data-residency reviews and cross-border transfer assessments.\nEstablish cybersecurity risk practices for AI, machine learning, generative AI and automation solutions.\nAssess AI solutions for data exposure, access control, insecure integrations, third-party dependencies, retention and regulatory risk.\nDefine security requirements for enterprise AI and assess vendors and cloud services against security, privacy, contractual and compliance requirements.\nTrack AI, privacy and third-party risks, exceptions and remediation through the enterprise risk-management process.\nDevSecOps and Cloud Security\nProvide security direction for DevSecOps and application-development practices.\nEstablish requirements for secure development, source-code management, CI/CD pipelines, secrets management, infrastructure as code and vulnerability remediation.\nWork with technology teams to embed security controls throughout the delivery lifecycle.\nSupport cloud-security assessments, architecture and configuration reviews, and compliance monitoring across cloud and hybrid environments.\nExperience with security and compliance controls in Microsoft Azure, Microsoft 365 and AWS is considered an advantage.\nPeople Leadership and Hands-on Delivery\nSet priorities and provide direction, coaching and technical guidance to direct reports and assigned resources.\nAssign accountability for assessments, controls, evidence, policies, remediation and reporting; review deliverables for quality and audit readiness.\nDevelop team capability in GRC, CPCSC, CMMC, privacy, AI risk, DevSecOps, cloud security and control testing.\nPersonally develop and review policies, risk assessments, control narratives, audit evidence, compliance submissions and executive briefings.\nFacilitate risk workshops, control walk-throughs, gap assessments and evidence reviews; escalate unresolved findings, control failures and resource constraints.\nWhat you'll bring\nBachelor’s degree in cybersecurity, computer science, information systems, engineering, risk management or a related discipline, or equivalent experience.\n10 or more years of relevant cybersecurity, GRC, audit, risk, compliance, privacy or technology experience.\nExperience leading security compliance programs in a complex, regulated, government, defence, industrial or critical-infrastructure environment.\nPractical experience with CPCSC, CMMC, NIST SP 800-171, NIST CSF, ISO 27001 or comparable frameworks.\nExperience developing System Security Plans, Plans of Action and Milestones, control matrices, risk registers, policies and audit evidence.\nWorking knowledge of GDPR and Canadian privacy requirements, plus experience with certification readiness, audits or regulatory reviews.\nRelevant certification such as CISSP, CISA, CRISC, CISM, CGRC, ISO 27001 Lead Implementer or Lead Auditor, Certified CMMC Professional, or equivalent.\nDirect experience supporting CPCSC or CMMC readiness or certification.\nExperience with AI security, privacy assessments, DevSecOps, application security, cloud security across Microsoft or AWS, GRC platforms, or OT security.\nStrong knowledge of identity and access management, data protection, vulnerability management, logging, incident response, cloud security and third-party risk.\nDemonstrated people leadership, strong business communication and the ability to manage multiple programs while remaining hands-on.\nWhy you'll love working here\nThis is a full-time, permanent position.\nIn addition to an annual bonus and pension plan matching, this role provides you a very competitive salary in line with the successful candidate’s experience.\nWe also provide the best-in-class health and wellness benefits package for this position, including things such as extended health care (i.e. paramedical services for massage therapy, speech therapy, mental health coverage, physiotherapy, and more), dental care, vision care, life insurance, medical leave coverage, parental leave coverage, childcare benefit partnership, $500 personal spending account, and an Employee Family Assistance Program (EFAP). \nThis position qualifies for an optional hybrid work schedule. \nFree on-site gym.\nParking is included and to assist those that are using transit, we operate a complimentary shuttle bus Monday through Friday with various pick up and drop off points around North Vancouver. \nThe estimated salary for this position is $143,100 - $174,900. In determining final salary, Seaspan considers many factors including the successful Candidate’s skillset and experience as well as position location and internal equity. The final base salary offer will be at the Company’s sole discretion and presented as part of a competitive total compensation package.","description_format":"text","description_chars":7263,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Hybrid work","Life insurance","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Sea Freight","Naval Systems","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-13T05:54:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:0","win:early"],"computed_at":"2026-11-13T06:52:49Z"},"pay":{"stated_usd_annual":122688,"is_top_pay":false},"html_url":"https://alion.io/job/seaspan-manager-cyber-security","json_url":"https://alion.io/job/seaspan-manager-cyber-security.json","meta":{"generated_at":"2026-11-13T06:52:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2008236},"rest":"https://alion.io/mcp/rest/get_company?id=2008236"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fseaspan-manager-cyber-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fseaspan-manager-cyber-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fseaspan-manager-cyber-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/seaspan-manager-cyber-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fseaspan-manager-cyber-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4222330}},{"tool":"search_jobs","arguments":{"company":"seaspan.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4222330},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}