Sr. Spec, Security Ops & MDR Governance Lead

Ready to build a rewarding career in an industry that is growing?

Who We Are

We are a global mining company dedicated to safely delivering nickel, copper, cobalt, and platinum group metals essential for the world’s energy transition.

Our mission is to improve lives and shape a better future together.

From utensils to cellphones to satellites, our operations simplify daily life and enhance connectivity. Our metals are integral to life-saving medical equipment and the electric vehicles driving the fight against climate change – our work truly matters.

Join our diverse team of 15,000 talented individuals committed to transforming critical minerals into prosperity and sustainable development in countries like Canada, Brazil, Indonesia, the United Kingdom, and Japan. We invite you to use your skills with us and contribute to something meaningful and enduring.

The Opportunity

We are currently seeking a Senior Specialist, Security Operations & MDR Governance, to join our Cyber Defense & Incident Response team.

Reporting to the Senior Manager, Cyber Defense & Incident Response, this role serves as the operational backbone of Vale Base Metals' Cyber Defense program. The successful candidate will be responsible for ensuring our Managed Detection and Response (MDR) provider delivers high-quality services, leading complex incident response activities, and driving the organization's vulnerability management program.

This role combines three critical disciplines:

• MDR Governance and provider performance management
• Incident Response leadership for major cybersecurity incidents
• Enterprise Vulnerability Management oversight

You will establish operational standards, hold internal and external stakeholders accountable, and provide expert guidance to strengthen Vale Base Metals' cyber resilience globally.

Key Responsibilities

MDR Provider Governance

• Serve as the primary technical and operational interface between Vale Base Metals and the MDR provider.
• Monitor and enforce service level agreements (SLAs), escalation procedures, and service quality expectations.
• Lead operational reviews, incident discussions, and performance meetings with service providers.
• Develop and maintain performance dashboards tracking key operational security metrics.
• Drive continuous improvement initiatives and ensure vendor commitments are aligned with business priorities.
• Provide regular reporting and recommendations to cybersecurity leadership.

Incident Response Leadership

• Lead investigations and response activities for critical and high-severity cybersecurity incidents.
• Conduct advanced analysis of endpoint, network, cloud, and security telemetry data.
• Coordinate containment, eradication, and recovery activities across technical teams.
• Produce post-incident reviews and identify opportunities to improve security controls and detection capabilities.
• Maintain and enhance incident response playbooks and procedures.
• Support executive communications and stakeholder engagement during major incidents.
• Coordinate with external incident response partners when specialized expertise is required.

Vulnerability Management

• Own the enterprise vulnerability management lifecycle from scanning to remediation tracking.
• Ensure appropriate security scanning coverage across IT environments.
• Apply risk-based prioritization methodologies, including Known Exploited Vulnerabilities (KEV) guidance.
• Track remediation efforts and escalate unresolved critical issues as required.
• Coordinate with infrastructure, application, and managed service teams to drive timely remediation.
• Manage risk acceptance processes and governance requirements.
• Develop executive-level reporting on vulnerability trends, compliance, and remediation performance.