Program Manager, Digital Risk Management and Advisory

JOB SUMMARY

The Chief Information Security Office is responsible for delivering and overseeing cybersecurity and digital risk management programs across all City business lines, including strategic enablement and emerging threats identification, policy and implementation oversight, digital risk management, and security governance and culture transformation. The Service directly impacts operations across 14 unique business lines, $ 9 billion revenue generation processes, enables the delivery of critical services to more than a million constituents, as well provides vital support for governmental continuity across federal and provincial partners.

The Digital Risk Management and Advisory Unit is responsible for assessing digital risks and advising on risk management practices to guide security improvements.

You are responsible for planning and managing the day-to-day delivery and operations of digital risk management and cybersecurity advisory programs and services.

Programs, services, projects and activities include:
• Digital Risk Management Framework
• Third-party technology vendor security risk management
• Risk mitigation

You are also responsible for managing the unit’s human and financial resources, and stakeholder and partner relationships.

EDUCATION AND EXPERIENCE

Completion of a 4 year university degree in Information Security, Computer Science, Risk Managment, or other related field.

Minimum 6 years of related experience establishing corporate programs while building strong partnerships with oversight functions, including a minimum of 3 years in the management of human and financial resources.

CERTIFICATIONS AND LICENCES

KNOWLEDGE

• Information Security, Compliance and/or Risk Management programs and best practices, preferably within the Tech and Public Administration Sectors.
• Experience in building or maintaining risk magament programs across a wide variety of regulatory and compliance frameworks
• In depth knowledge of least two of the following: the NIST Cybersecurity Framework, ISO 2700x, SOC1 & 2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.
• Sufficient technical knowledge of technical concepts relevant to cloud computing environments: logical access, agile development process, security architecture, information security, network security, and privacy.
• Strong understanding of current digital products and services to include web, mobile, chat, text and the evolving use of artificial intelligence.
• The City of Ottawa’s organizational, governance and administrative structures
• Legislation, regulations, policies, standards and guidelines relevant to the work
• Industry trends and developments
• Business administration concepts, theories, principles and methodologies
• Corporate policies, guidelines and practices
• The various Collective Agreements in place at the City
• Understanding of the programs/services and operations of other City areas, and the inter-relationships between them and own work area
• MS Office
• Must be familiar with applicable health and safety legislation, have knowledge of any potential or actual danger to health or safety in the work place, and have knowledge of appropriate actions to be taken in order to ensure the health and safety of staff in accordance with applicable legislation and City policies and procedures.

COMPETENCIES, SKILLS AND ABILITIES

Core Behaviours
Core behaviours define the City’s expectations of the behaviours employees should demonstrate in performing their work. They are reflective of the City’s culture and values and guide all our present and future activities. Every employee is encouraged to learn, embody and demonstrate these core behaviours.

Review the Core Behaviours.

Leadership Competencies
The City has defined key competencies that leaders are expected to embody and demonstrate to successfully move the organization towards achieving its strategic objectives and create an organizational culture that supports and empowers employees to excel, grow and reach their full potential. These leadership competencies and associated behaviours are expected to be demonstrated by leaders at all levels of the organization.

Review the Leadership Competencies.