Senior Manager, Cyber Defense & Incident Response
Top Benefits
About the role
Ready to build a rewarding career in an industry that is growing?
Who We Are
We are a global mining company dedicated to safely delivering nickel, copper, cobalt, and platinum group metals essential for the world’s energy transition.
Our mission is to improve lives and shape a better future together.
From utensils to cellphones to satellites, our operations simplify daily life and enhance connectivity. Our metals are integral to life-saving medical equipment and the electric vehicles driving the fight against climate change – our work truly matters.
Join our diverse team of 15,000 talented individuals committed to transforming critical minerals into prosperity and sustainable development in countries like Canada, Brazil, Indonesia, the United Kingdom, and Japan. We invite you to use your skills with us and contribute to something meaningful and enduring.
The Opportunity
We are seeking aSenior Manager, Cyber Defense & Incident Responseto join our global Cybersecurity organization, based in Toronto, Canada.
This is apermanentposition with a global scope, supporting cybersecurity operations across allVale Base Metalslocations.
- In this high‑impact leadership role, you will design, build, and continuously mature Vale Base Metals’ global cyber defense and incident response capabilities across both enterprise IT and operational technology (OT) environments. You will shape and govern the global Security Operations Center (SOC) operating model, lead threat detection strategies, drive incident readiness, and ensure our resilience against an evolving and increasingly sophisticated cyber threat landscape.
- This opportunity is ideal for a seasoned cybersecurity leader who thrives in complex industrial environments and is ready to elevate cyber defense excellence across a global footprint. You will partner with senior stakeholders across IT, OT, engineering, operations, and executive leadership to ensure cyber defense strategies directly support our operational safety, reliability, and business continuity objectives.
About You
You are an accomplished cybersecurity leader with deep expertise across cyber defense operations, incident response, detection engineering, and vulnerability management. You excel at navigating global environments, building high‑performing teams, and aligning cybersecurity priorities with operational and business realities.
You bring:
- A strategic mindset—able to influence executives and shape enterprise‑level direction
- Proven experience standing up or maturing SOC functions
- Strong leadership in crisis environments, with the ability to drive disciplined decision‑making
- Expertise bridging IT and OT cybersecurity in industrial or safety‑critical environments
- Deep understanding of threat intelligence, detection engineering, and modern attack techniques
- Ability to translate complex technical risks into business impact
- Exceptional communication, stakeholder management, and cross‑functional collaboration skills
- High adaptability, initiative, and comfort operating in a fast‑moving global landscape.
- As Senior Manager, Cyber Defense & Incident Response, you will:
- Design and operationalize Vale Base Metals’global SOC operating model
- Govern incident response standards, escalation models, and tactical/strategic response processes
- Develop enterprise telemetry and logging strategies aligned to threat models and critical assets.
- Drive threat detection maturity, integrating threat intelligence and purple‑team insights
- Oversee vulnerability management and offensive security programs
- Lead enterprise incident readiness, crisis exercises, and post‑incident improvement cycles
- Manage SOC capacity planning, staffing, performance, and skill development
- Lead MSSP and SOC‑as‑a‑Service partner governance.
- Implement automation and AI‑driven capabilities to enhance detection and response
- Ensure cyber defense resiliency across global, safety‑critical, hybrid IT/OT environments
- Your work will directly impact operational continuity, safety, regulatory compliance, and risk posture across a multi‑billion‑dollar global business
Education
Required:
- Undergraduate degree in Computer Science, Information Security, Engineering, or a related discipline -SANS GIAC GCIHor equivalent incident response certification
Preferred:
- Master’s degree
- Advanced certifications such as:
- GSOM, GCIA, GCFA, GNFA
- GCTI (Threat Intelligence)
- Other SANS blue team or SOC leadership certifications
Experience:
- 11–15 years in cybersecurity roles with increasing responsibility
- Significant experience leading SOC operations, cyber defense programs, or incident response functions
- Experience supporting complex industrial, mining, or large‑scale operational environments.
- Strong background in global team leadership, performance management, and vendor oversight
- Demonstrated experience developing detection strategies aligned to frameworks such as MITRE ATT&CK
- Expertise with SIEM, EDR/XDR, logging architectures, and offensive security validation
- Proven ability to manage high‑pressure cyber events and coordinate cross‑functional crisis response.
What We Offer You
- Competitive compensation including a variable annual incentive plan
- Participation in a competitive Defined Contribution Pension package
- Comprehensive benefits package (company paid core coverage, health and dental coverage, flex accounts, disability plans, and optional insurances)
- Leave for all of life’s reasons (vacation, personal, sick, parental)
- Work culture dedicated to safety, diversity & inclusion, and career growth
- Employee Family Assistance Program
- Virtual Healthcare online
- Online training and career development opportunities
Why Toronto
Toronto, Canada’s largest city and financial hub, is a center of innovation, commerce, and culture. Known for its diverse economy and vibrant urban environment, Toronto offers unparalleled access to talent, technology, and global connectivity.
Our Toronto office serves as a strategic hub for corporate functions, technology development, and business operations. Here, we drive initiatives that support Vale Base Metals’ global operations, leveraging advanced analytics, digital transformation, and strategic planning to ensure operational excellence across all regions.
Toronto’s dynamic ecosystem enables collaboration with leading technology partners, universities, and research institutions, fostering innovation in mining and metals processing. This location is integral to shaping the future of sustainable mining and advancing our commitment to responsible resource development.
Include to Transform
At Vale Base Metals, we are committed to ensuring an inclusive work environment where people feel comfortable to be themselves. Vale encourages everyone to express their ideas and opinions and values the plurality of individual profiles. We want our people to feel that all.
We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are critical to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation, or any other personal consideration that makes us different.
Vale is an equal opportunity employer seeking to increase diversity across our operations and improve equal opportunity at Vale and in the mining industry.
Next, priority will be given to Newfoundland and Labrador residents. We also welcome those who are willing to relocate back home and those looking to make NL their permanent home.
Accommodation is available throughout our recruitment process for applicants with disabilities.
Vale uses artificial intelligence to screen, assess, and/or select applicants for this position.
**Pay Grade:**GRF
Minimum Starting Salary: CAD $140,000
**Apply by:**Friday, Mar 27, 2026
#ValeBaseMetals
About Vale Base Metals
Welcome to Vale Base Metals. Our purpose is to improve life and transform the future, together.
We are a global mining company committed to safely delivering the nickel, copper, cobalt and platinum group metals essential for the world’s energy transition.
Our workforce of 15,000 is dedicated to transforming these critical minerals into prosperity and sustainable development across the countries in which we operate, including Canada, Brazil, Indonesia, the United Kingdom and Japan.
Applying leading-edge technology to sustainably mine critical minerals that drive mobility and material solutions is at the heart of what we do.
We are Vale Base Metals.
Similar jobs you might like
Senior Manager, Cyber Defense & Incident Response
Top Benefits
About the role
Ready to build a rewarding career in an industry that is growing?
Who We Are
We are a global mining company dedicated to safely delivering nickel, copper, cobalt, and platinum group metals essential for the world’s energy transition.
Our mission is to improve lives and shape a better future together.
From utensils to cellphones to satellites, our operations simplify daily life and enhance connectivity. Our metals are integral to life-saving medical equipment and the electric vehicles driving the fight against climate change – our work truly matters.
Join our diverse team of 15,000 talented individuals committed to transforming critical minerals into prosperity and sustainable development in countries like Canada, Brazil, Indonesia, the United Kingdom, and Japan. We invite you to use your skills with us and contribute to something meaningful and enduring.
The Opportunity
We are seeking aSenior Manager, Cyber Defense & Incident Responseto join our global Cybersecurity organization, based in Toronto, Canada.
This is apermanentposition with a global scope, supporting cybersecurity operations across allVale Base Metalslocations.
- In this high‑impact leadership role, you will design, build, and continuously mature Vale Base Metals’ global cyber defense and incident response capabilities across both enterprise IT and operational technology (OT) environments. You will shape and govern the global Security Operations Center (SOC) operating model, lead threat detection strategies, drive incident readiness, and ensure our resilience against an evolving and increasingly sophisticated cyber threat landscape.
- This opportunity is ideal for a seasoned cybersecurity leader who thrives in complex industrial environments and is ready to elevate cyber defense excellence across a global footprint. You will partner with senior stakeholders across IT, OT, engineering, operations, and executive leadership to ensure cyber defense strategies directly support our operational safety, reliability, and business continuity objectives.
About You
You are an accomplished cybersecurity leader with deep expertise across cyber defense operations, incident response, detection engineering, and vulnerability management. You excel at navigating global environments, building high‑performing teams, and aligning cybersecurity priorities with operational and business realities.
You bring:
- A strategic mindset—able to influence executives and shape enterprise‑level direction
- Proven experience standing up or maturing SOC functions
- Strong leadership in crisis environments, with the ability to drive disciplined decision‑making
- Expertise bridging IT and OT cybersecurity in industrial or safety‑critical environments
- Deep understanding of threat intelligence, detection engineering, and modern attack techniques
- Ability to translate complex technical risks into business impact
- Exceptional communication, stakeholder management, and cross‑functional collaboration skills
- High adaptability, initiative, and comfort operating in a fast‑moving global landscape.
- As Senior Manager, Cyber Defense & Incident Response, you will:
- Design and operationalize Vale Base Metals’global SOC operating model
- Govern incident response standards, escalation models, and tactical/strategic response processes
- Develop enterprise telemetry and logging strategies aligned to threat models and critical assets.
- Drive threat detection maturity, integrating threat intelligence and purple‑team insights
- Oversee vulnerability management and offensive security programs
- Lead enterprise incident readiness, crisis exercises, and post‑incident improvement cycles
- Manage SOC capacity planning, staffing, performance, and skill development
- Lead MSSP and SOC‑as‑a‑Service partner governance.
- Implement automation and AI‑driven capabilities to enhance detection and response
- Ensure cyber defense resiliency across global, safety‑critical, hybrid IT/OT environments
- Your work will directly impact operational continuity, safety, regulatory compliance, and risk posture across a multi‑billion‑dollar global business
Education
Required:
- Undergraduate degree in Computer Science, Information Security, Engineering, or a related discipline -SANS GIAC GCIHor equivalent incident response certification
Preferred:
- Master’s degree
- Advanced certifications such as:
- GSOM, GCIA, GCFA, GNFA
- GCTI (Threat Intelligence)
- Other SANS blue team or SOC leadership certifications
Experience:
- 11–15 years in cybersecurity roles with increasing responsibility
- Significant experience leading SOC operations, cyber defense programs, or incident response functions
- Experience supporting complex industrial, mining, or large‑scale operational environments.
- Strong background in global team leadership, performance management, and vendor oversight
- Demonstrated experience developing detection strategies aligned to frameworks such as MITRE ATT&CK
- Expertise with SIEM, EDR/XDR, logging architectures, and offensive security validation
- Proven ability to manage high‑pressure cyber events and coordinate cross‑functional crisis response.
What We Offer You
- Competitive compensation including a variable annual incentive plan
- Participation in a competitive Defined Contribution Pension package
- Comprehensive benefits package (company paid core coverage, health and dental coverage, flex accounts, disability plans, and optional insurances)
- Leave for all of life’s reasons (vacation, personal, sick, parental)
- Work culture dedicated to safety, diversity & inclusion, and career growth
- Employee Family Assistance Program
- Virtual Healthcare online
- Online training and career development opportunities
Why Toronto
Toronto, Canada’s largest city and financial hub, is a center of innovation, commerce, and culture. Known for its diverse economy and vibrant urban environment, Toronto offers unparalleled access to talent, technology, and global connectivity.
Our Toronto office serves as a strategic hub for corporate functions, technology development, and business operations. Here, we drive initiatives that support Vale Base Metals’ global operations, leveraging advanced analytics, digital transformation, and strategic planning to ensure operational excellence across all regions.
Toronto’s dynamic ecosystem enables collaboration with leading technology partners, universities, and research institutions, fostering innovation in mining and metals processing. This location is integral to shaping the future of sustainable mining and advancing our commitment to responsible resource development.
Include to Transform
At Vale Base Metals, we are committed to ensuring an inclusive work environment where people feel comfortable to be themselves. Vale encourages everyone to express their ideas and opinions and values the plurality of individual profiles. We want our people to feel that all.
We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are critical to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation, or any other personal consideration that makes us different.
Vale is an equal opportunity employer seeking to increase diversity across our operations and improve equal opportunity at Vale and in the mining industry.
Next, priority will be given to Newfoundland and Labrador residents. We also welcome those who are willing to relocate back home and those looking to make NL their permanent home.
Accommodation is available throughout our recruitment process for applicants with disabilities.
Vale uses artificial intelligence to screen, assess, and/or select applicants for this position.
**Pay Grade:**GRF
Minimum Starting Salary: CAD $140,000
**Apply by:**Friday, Mar 27, 2026
#ValeBaseMetals
About Vale Base Metals
Welcome to Vale Base Metals. Our purpose is to improve life and transform the future, together.
We are a global mining company committed to safely delivering the nickel, copper, cobalt and platinum group metals essential for the world’s energy transition.
Our workforce of 15,000 is dedicated to transforming these critical minerals into prosperity and sustainable development across the countries in which we operate, including Canada, Brazil, Indonesia, the United Kingdom and Japan.
Applying leading-edge technology to sustainably mine critical minerals that drive mobility and material solutions is at the heart of what we do.
We are Vale Base Metals.