Senior Analyst, Information Security

JOB SUMMARY

The Technology Security Branch is responsible for managing a comprehensive, corporate-wide technology security program that balances the need to protect the business with the need to run the business, and aligns with industry best practices. The Branch provides technology security expertise, ensures the identification, assessment and mitigation of technological threats, risks and vulnerabilities to the City’s IT infrastructure, assets and electronic information, and oversees the resolution of any technology security incidents.

You assist with the design, implementation and maintenance of the ITS and corporate information security program. You develop and maintain information security policies, standards and procedures, to ensure the protection of City information, and develop and maintain IT disaster recovery and business resumption plans.
You also Conduct information risk assessments and recommend the enhancement of existing, or the implementation of new, controls to reduce information risk. Document business security requirements and assess threats to, and vulnerabilities of, information systems.

EDUCATION AND EXPERIENCE

Completion of 3 year university degree or community college diploma in computer science or related field

Minimum of 8 years of information technology experience including a minimum of 5 years information technology security experience, security policy writing and risk management experience

CERTIFICATIONS AND LICENCES

KNOWLEDGE

• Information security principles such as access control, encryption, authentication, etc.
• Threat and risk assessment methodologies
• Computing environments including networks, servers, operating systems, platforms, firewalls, etc.
• Security tools and solutions at both the client and enterprise levels
• Data security methods, access control systems, encryption and authentication tools
• Project management methodologies
• Enterprise-wide networking concepts & related security issues Communication protocols and their inherent security
• Risks and exposures
• Public key infrastructure policies and practices
• Intrusion detection systems
• Security software reporting capabilities
• City services & applications dependent on the network
• Windows desktop operating system
• Knowledge of applicable health and safety legislation, including the rights and duties of workers.

COMPETENCIES, SKILLS AND ABILITIES

• Write clear and concise reports, documentation and procedures
• Prepare and deliver presentations to all levels of staff and clients
• Manage technical resources in a project environment
• Analyze problems and situations and develop feasible solutions
• Think in conceptual or abstract terms
• Analyze and accurately document new and existing processes
• Work in close partnership with other IT resources
• Work with sensitive information and maintain confidentiality
• Work calmly and systematically under stressful situations
• Liaise effectively with all levels of staff, city partners and vendors
• Plan for the impact of technology changes on the city
• Tactful and helpful with other staff
• Able to interact with other organizations’ technical and non-technical staff effectively
• Well organized and reliable
• Able to handle multiple tasks, and work independently with minimum supervision
• Trustworthy with sensitive information
• Willing to work flexible hours, including evenings and weekends
• Willing to participate in on-call rotation for after hours emergency response