Select how often (in days) to receive an alert:

Position Summary:

Reporting to the Director, Cyber Security & Infrastructure , the Senior Manager, Cyber Security leads UFA's Cyber Security team and is accountable for the day-to-day delivery and continuous improvement of UFA's cybersecurity operations and defensive capabilities. Areas of responsibility include security operations, digital forensics and incident response, threat intelligence, vulnerability management, identity threat protection, and security engineering .

This role requires a strong combination of technical expertise and people leadership, with the ability to provide technical direction, engage with IT and business leaders, make informed decisions, and drive results through a high-performing cybersecurity team.

Responsibilities:

- Lead and develop the cybersecurity team through clear expectations, coaching, delegation, performance management, recruitment, succession planning, and a culture of accountability and continuous learning.
- Own day-to-day cybersecurity operations, including monitoring, threat detection, investigation, incident response, digital forensics, vulnerability management, and operational effectiveness across enterprise environments.
- Contribute to the development and continuous improvement of UFA's cybersecurity strategy, roadmap, and governance framework, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
- Drive disciplined execution of UFA's cybersecurity roadmap by establishing clear accountabilities, milestones, performance measures, and regular progress reviews to deliver measurable risk reduction and operational improvements.




- Oversee and continuously improve UFA's cyber defense capabilities across cloud, identity, endpoints, networks, wireless, and IoT/OT environments through effective security engineering, threat intelligence, detection technologies, and automation.
- Lead significant cybersecurity incidents, providing explicit operational command, directing containment and recovery activities, coordinating cross-functional response efforts, communicating with executive stakeholders, and ensuring timely escalation of material risks and decisions beyond delegated authority .
- Partner with business and technology leaders to assess and manage cybersecurity risks, balancing security requirements with business priorities through appropriate risk mitigation, compensating controls, and formal risk acceptance processes.
- Manage security service providers, vendors, and technology investments; communicate actionable performance metrics, operational risks, priorities, and recommendations to leadership.
- Other duties as required.

Qualifications:

- Post-secondary education in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
- Minimum 10 years of progressive cybersecurity experience, including demonstrated experience directly managing technical teams, with accountability for recruitment, performance management, employee development,



operational effectiveness, and delivery of measurable business outcomes
- Demonstrated success leading cybersecurity operations or closely related security functions, with firsthand accountability for operational performance, incident response, and cross-functional coordination.
- Proven track record of delivering cybersecurity programs and operational improvements through others, with concrete examples of prioritization, delegation, performance accountability, overcoming obstacles, and measurable results.
- Strong technical judgment across security operations, threat detection and response, vulnerability management, security engineering, cloud and identity security, and modern attack techniques; able to challenge technical recommendations without needing to perform all implementation personally.
- Strong working knowledge of Microsoft Azure and Microsoft 365 security, including relevant capabilities such as Defender XDR, Sentinel, Entra ID, Defender for Cloud, and Purview; ability to integrate controls across hybrid environments.
- Understanding of enterprise network security, including next-generation firewalls (Palo Alto experience an asset), segmentation, wireless, remote access, and IoT/OT security.
- Demonstrated ability to assess security and business impact, identify practical compensating controls, distinguish technical decisions from business risk acceptance, and elevate significant issues at the right time.
- Effective leadership, communication, stakeholder influence, and conflict resolution skills, with evidence of coaching, developing talent, making difficult decisions, and collaborating with business and technology lea

📌 Sr. Manager, Cyber Security (Calgary)
🏢 UFA
📍 Calgary