Job Description

Iron Spear is looking for an exceptional Cybersecurity Consulting Manager who can bridge the gap between technology and business and help our company grow by delivering high-quality client engagements and trusted cybersecurity advice.

This is not a back-room technical position, nor is it a traditional project management role where success is measured only by schedules and status reports.

We are not looking for a traditional project manager, and we are not looking for a hands-on technical specialist. We are looking for someone who can understand complex cybersecurity challenges, lead technical teams, engage clients confidently, and guide projects from problem definition through successful delivery.

The right person will know how to start meaningful conversations, ask thoughtful follow-up questions, and look beyond a client's initial request to uncover the actual business, operational, and security problem. They will be comfortable engaging with engineers, operational teams, executives, and boards, adapting their communication style without losing the technical substance.

You will manage multiple client engagements simultaneously, provide technical leadership and expert cybersecurity advice, guide delivery teams, and ensure our clients receive practical recommendations they can act on.

If you can lead complex security projects, build trust quickly, make clients feel heard, and turn technical findings into clear business decisions, we should probably talk.

We Are Looking for a Cybersecurity Consulting Manager Who Is:

- A clear, confident communicator who can facilitate discussions with technical teams, executives, and board-level stakeholders without turning every update into a novel.
- A natural communicator who starts conversations rather than waiting to be asked questions.
- A consultant first and a technologist second. Someone who instinctively asks questions, investigates root causes, and uncovers business problems rather than simply responding to technical requests.
- Comfortable walking into a room of strangers, building rapport, leading the conversation, and earning trust quickly.
- Skilled at asking thoughtful, probing questions that uncover the real problem, not just the problem the client initially describes.
- A self-starter who takes ownership and keeps multiple client priorities moving, even when the day does not politely follow the plan.
- Solid at building trusted relationships with clients.
- Organized and responsive, with strong control over timelines, budgets, follow-ups, and communication.
- Technically credible and capable of providing expert cybersecurity advice, reviewing technical work, challenging assumptions, and guiding delivery teams.
- Comfortable engaging with everyone from technical specialists and system administrators to CIOs, CISOs, executives, and board members.
- Able to translate complex cybersecurity concepts into practical business decisions without hiding behind jargon.
- Comfortable supporting growth by identifying client needs, contributing to proposals, and expanding relationships without turning every conversation into a sales pitch.

What You Will Do

You will manage client relationships, lead cybersecurity consulting engagements, guide technical delivery teams, and provide expert advice to clients.

You will be responsible for ensuring projects are delivered successfully while helping clients understand their cybersecurity challenges, make informed decisions, and improve their security posture.

The role is organized into four key areas.

Client Leadership & Advisory

- Build trusted relationships with clients across multiple industries and sectors.
- Lead workshops, interviews, presentations, and strategic discussions with technical and non-technical stakeholders.
- Ask the right questions to uncover business challenges, technical risks, and underlying issues that may not be immediately apparent.
- Translate complex cybersecurity concepts into practical business language and actionable recommendations.
- Provide confident advice to executives, technical teams, and leadership groups.

Technical Leadership & Consulting

- Provide technical leadership across cybersecurity assessments, advisory engagements, and security improvement initiatives.
- Review findings, recommendations, and deliverables to ensure they are accurate, practical, and relevant.
- Help clients prioritize cybersecurity initiatives based on risk, business objectives, and operational realities.
- Act as a trusted advisor on cybersecurity strategy, governance, architecture, risk management, and security operations.
- Support and mentor consultants while helping delivery teams achieve successful outcomes.

Project & Delivery Management

- Manage multiple cybersecurity projects simultaneously from initiation through completion.
- Coordinate resources, schedules, budgets, risks, issues, and client expectations.
- Monitor project performance and proactively address challenges before they impact delivery.
- Review client deliverables for quality, consistency, and alignment with project objectives.
- Ensure commitments are completed and clients remain informed throughout the engagement lifecycle.

Business Development & Growth

- Identify opportunities to help clients address additional cybersecurity challenges and objectives.
- Support proposals, statements of work, presentations, and project scoping activities.
- Contribute to the development of new services, methodologies, and delivery approaches.
- Represent Iron Spear professionally in meetings, industry events, and client engagements across Canada.

What You Bring to the Role

You will bring a practical combination of cybersecurity expertise, consulting judgment, technical leadership, client engagement, and multi-project delivery experience.

You know enough about cybersecurity to provide credible advice and challenge technical work. You understand consulting well enough to recognize that the client's first question is not always the real question. You are organized enough to keep multiple projects under control, and you communicate well enough that clients trust you to help them navigate difficult decisions.

This includes:

- Minimum 7 years of progressive cybersecurity experience.
- Degree, diploma, recognized formal education, or equivalent practical experience in information technology, cybersecurity, computer science, engineering, or another relevant field.
- Strong understanding of modern cybersecurity technologies, architectures, frameworks, and best practices.
- Experience leading complex cybersecurity projects, consulting engagements, or professional services delivery.
- Experience managing multiple client engagements and competing priorities simultaneously.
- Strong consultative interviewing and workshop facilitation skills.
- Experience providing cybersecurity advice directly to clients, senior leaders, executives, and boards.
- Experience reviewing cybersecurity findings, recommendations, and client deliverables.
- Experience managing project scope, schedules, budgets, risks, issues, and client expectations.
- Experience supporting proposals, statements of work, project estimates, account growth, renewals, or business development activities.
- Excellent verbal and written communication skills, including the ability to translate complex technical issues into language clients can understand and act upon.
- Strong organization, judgment, attention to detail, accountability, and follow-through.
- Experience working with Canadian organizations and an understanding of the Canadian business environment.

Experience That Would Be Valuable

- Operational Technology (OT) or Industrial Control System (ICS) cybersecurity.
- Security Threat and Risk Assessments (STRAs).
- Cybersecurity assessments, audits, or maturity assessments.
- Security architecture, network security, cloud security, identity and access management, or incident response.
- Cybersecurity governance, risk management, compliance, or security program development.
- Experience supporting critical infrastructure, utilities, energy, nuclear, transportation, airports, government, municipalities, manufacturing, mining, or other regulated industries.
- Certifications such as CISSP, CISM, CRISC, GICSP, CCSP, PMP, Security+, or equivalent.
- Familiarity with ISO 27001, ISO 27002, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, IEC 62443, or similar frameworks and standards.

Why Iron Spear?

At Iron Spear, we don't just deliver cybersecurity services, we help Canada's critical infrastructure, utilities, airports, transit agencies, government organizations, and enterprises solve real-world security challenges.

Iron Spear is a small, unique consulting firm. Our employees are not just filling seats, they are a dynamic and agile team working with some of Canada's most important organizations to solve real-world cybersecurity challenges.

You will be a team member, not just an employee, and your communication skills, judgment, initiative, leadership, and ability to build trust with clients will directly influence our projects, relationships, and growth.

You will work alongside experienced cybersecurity professionals, influence how we deliver our services, and have a direct impact on our clients and the future of the company.

Will You Make Money?

Absolutely. We offer competitive salaries and will match the position and compensation to your experience, expertise, and what you bring to the table.

You will also receive:

- Participation in Iron Spear's uncapped employee profit-sharing program.
- Cellphone and internet allowances.
- Group medical benefits.
- Professional development and training support.
- A sit/stand desk if you ask nicely.

Will You Be Chained to a Desk?

No.

We offer flexible working arrangements that allow you to work from home and occasionally from client sites when required.

Some projects may require travel across Canada, but generally only when there is meaningful value in being onsite.

We are all professionals and, as long as commitments are met and clients are supported, we provide flexibility around how and when you organize your day.

Will You Learn?

Is the sky blue?

Absolutely.

You will work alongside experienced cybersecurity professionals who bring expertise from consulting, critical infrastructure, governance, operational technology, technical security, and executive advisory services.

We learn from each other every day through collaboration, knowledge sharing, and solving challenging problems together.

We also support relevant courses, certifications, and professional development opportunities aligned with your career direction and our business.

Just as importantly, this is a leadership role. We will expect you to share your knowledge and help strengthen the skills of other consultants across the company.

Anything Else?

- We give back to the communities we work in through volunteering and other community initiatives.
- We host occasional healthy lifestyle events and team activities.
- We bring our team together from across Canada for learning, collaboration, and a healthy amount of fun.
- There are no sales targets attached to this role. Build trust, communicate well, solve problems, and deliver great work, and the opportunities will follow.
- Above all, we are looking for someone who can lead the conversation, understand the problem, guide the technical work, and earn the client's trust.

If that sounds like you, we'd like to hear from you.

The Selection Process

Note, if selected, the interview process will involve you preparing a presentation and talking to a specific scenario we give you. This allows us the opportunity to understand your ability to converse with clients in plain English.

Pay: $120,000.00-$140,000.00 per year

Application question(s):

- Are you located in Regina or Saskatoon?

Location:

- Vancouver, BC (preferred)

Work Location: Hybrid remote in Vancouver, BC

📌 Cybersecurity Consulting Manager (Vancouver, BC or Regina, SK)
🏢 Iron Spear Information Security
📍 Vancouver