Senior Cyber Security Policy and Implementation Oversight Officer

JOB SUMMARY

The Chief Information Security Office is responsible for delivering and overseeing cybersecurity and digital risk management programs across all City business lines, including strategic enablement and emerging threats identification, policy and implementation oversight, digital risk management, and security governance and culture transformation. The Service directly impacts operations across 14 unique business lines, $ 9 billion revenue generation processes, enables the delivery of critical services to more than a million constituents, as well provides vital support for governmental continuity across federal and provincial partners.  

The Cybersecurity Policy and Implementation Oversight Unit is responsible for the development, approval, and implementation of cybersecurity policies and standards.

You are responsible for developing and coordinating the implementation and approval of new cybersecurity policies and standards. You assess the effectiveness of the established technical security programs and cybersecurity controls base on the adopted operational model. You also build partnerships with all departments to ensure policy compliance and that the City meets set cybersecurity maturity objectives.

EDUCATION AND EXPERIENCE

Completion of a 4 year university degree in Information Security, Computer Science, Computer Engineering or related field.

Minimum of 7 years of progressively responsible experience in technology administration, information security, or risk management.

CERTIFICATIONS AND LICENCES

KNOWLEDGE

• Deep subject matter expertise in Information Security, Compliance and/or Risk Management programs and best practices, preferably within the Tech and Public Administration Sectors.
• Experience in developing or maintaining secuurity policies across a wide variety of regulatory and compliance frameworks 
• In depth knowledge of least two of the following: the NIST Cybersecurity Framework, ISO 2700x, SOC1 & 2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.
• Sufficient technical knowledge of the cutting edge concepts, principles, and trends relevant to a technology and cybersecurity domains
• Understanding of the global cybersecurity threat landscape and   politiclaly, social, or financially motivated cyber crime  
• Knowledge of applicable health and safety legislation, including the rights and duties of workers
   

COMPETENCIES, SKILLS AND ABILITIES

• Ability to work well in fast paced team environment with a wide range of technical and non-technical teams.
• Excellent writing, communication, and organizational skills - strong attention to detail.
• Ability to confidently convey nuanced information to a variety of audiences, including senior leaders.

Core Behaviours
Core behaviours define the City's expectations of the behaviours employees should demonstrate in performing their work.  They are reflective of the City's culture and values and guide all our present and future activities.  Every employee is encouraged to learn, embody, and demonstrate these core behaviours.

Review the Core Behaviours.