A career at TransLink and our family of companies means working with people with a wide range of skills and perspectives, all teaming up towards a common goal: preserving and enhancing the region's world-envied quality of life. Together, we connect the region and enhance its livability by providing a sustainable transit and transportation network, embraced by our communities and people.

At TransLink we are dedicated to building a workforce that reflects the diversity of the communities in which we live. We’re committed to fostering an inclusive, equitable and accessible workplace, recognizing the unique value and skills every individual brings.

Looking for a great place to work where your contributions are valued and you can make a difference in a vibrant city? At TransLink, one of BC’s Top Employers, you'll help make Metro Vancouver a better place to live, built on transportation excellence. Put your future in motion

Responsibilities PRIMARY PURPOSE

In accordance with TransLink's vision, values and established supporting policies and standards, the Senior Cybersecurity specialist, Vulnerability Management is a resourceful and forward-thinking subject matter expert, providing senior level of guidance and leads the TransLink’s overall vulnerability management program. This includes collaborating with peers and leadership in different decision centers to ensure risk reduction through timely vulnerability remediation. Assesses TransLink’s systems and infrastructure within the network workplace or enclaves to identify deviations from acceptable patching practices, hardening and configurations as required through applicable policies and standards. The role involves taking ownership and leading vulnerability management activities through assessing, triaging, prioritization,



reporting and streamlining the vulnerability management process to facilitate timely risk-based remediation. This role will also lead the development and presentation of key metrics, updates, findings, and other relevant program information to senior management and key stakeholders for informed decision making.

Key Accountabilities Acts as a primary technical lead for TransLink’s Vulnerability Management practices, maintains current configurations, procedures, and documentation. Provides senior level of recommendation and leads the implementation of vulnerability discovery system enhancements to improve its performance and reliability.

Leads the information security vulnerability management program to reduce risk and meet program’s SLA’s and KPI’s.

Leads & supports the development and maintenance of an end-to-end Vulnerability Management process, including reporting, metrics, escalation of critical vulnerabilities and risks, and assessing patching/remediation efforts to ensure they meet compliance requirements and TransLink Security Policy and standards.

Leads the analysis in determining, and fulfilling patching requirements for each environment, including identifying critical vulnerabilities and patches from external sources and applications, and enable timely remediation of those vulnerabilities.





Collaborates with stakeholders and senior leaders and leads the development of short-term and long-term plans, policies, strategies, and roadmaps for vulnerability management and ensure timely updates as and when required.

Develops, manages, measures, and reports key compliance and response time metrics that measure the effectiveness of TransLink’s vulnerability management practices. Develops and maintains methods and procedures for consistent tracking and review of open vulnerabilities using a risk-based approach. Provides support and metrics to senior management on matters related to Vulnerability Management program.

Provides senior level of technical guidance collaboratively to peers in both IT and information security on vulnerability remediation.

Partners with IT and business teams across the organization and service providers to map, track, monitor and communicate progress on vulnerability remediation activities. Builds strong partnerships with technical teams to promote best practices for managing vulnerabilities. Anticipates and plans for future risk in meeting vulnerability SLA’s. Coordinates and communicate with internal partners across the IT department.

Keeps abreast and analysis of known and emerging threats and vulnerabilities to identify risks that could have impact to TransLink IT environment.

Participates in collecting, assessing, and cataloging threat indicators related to vulnerability management. Facilitates out-of-band patching and Zero Day deployments. Identifies gaps and support action plans to strengthen Vulnerability Management control efficiency.

Provides ongoing reporting of patch status as required for all recurring and non-recurring efforts. Assists with the creation and/or maintenance

📌 Senior Cybersecurity Specialist Vulnerability Management (Vancouver)
🏢 TransLink
📍 Vancouver