Senior Officer, Governance, Culture and Awareness

JOB SUMMARY

The Chief Information Security Office is responsible for delivering and overseeing cybersecurity and digital risk management programs across all City business lines, including strategic enablement and emerging threats identification, policy and implementation oversight, digital risk management, and security governance and culture transformation. 

The Strategic Cybersecurity Unit is responsible for the design, development and implementation of City wide for programs associated with the identification, forecasting and mitigation of cybersecurity threats and risks, and for the City’s cybersecurity culture, awareness and reporting programs.

You are responsible for driving proactive security culture transformation and governance across the organization. You exercise independent discretion in developing strategic initiatives and operational plans, and collaborate closely with Legal, HR, and Labour Relations on workforce-related matters. Further, you influence organizational behaviour through effective policy enforcement and advisory services.

EDUCATION AND EXPERIENCE

Completion of a 4 year university degree in Information Security, Computer Science, Computer Engineering or related field

Minimum of 6 years of experience in cybersecurity training and awareness, digital risk management, security audit, or related disciplines

CERTIFICATIONS AND LICENCES

KNOWLEDGE

• Experience designing and implementing cybersecurity educational experiences (e.g., interactive e-learnings, micro-trainings, cyber quizzes)
• Experience with internal cybersecurity awareness communications campaigns with demonstrable results in driving awareness and building engagement organizational wide
• Compliance and/or Risk Management programs and best practices, preferably within the Tech and Public Administration Sectors
• Strong understanding of current digital trends and analytics methods relevant to big data, predictive intelligence reporting, and the evolving use of artificial intelligence
• Experience in building or maintaining user awareness programs across a wide variety of regulatory and compliance frameworks 
• Demonstrated knowledge of Cybersecurity Governance, Reporting Methods, and User Awareness best practices 
• Must be familiar with all applicable health and safety legislation, have 
• knowledge of any potential or actual danger to health or safety in the work 
• place, and have knowledge of appropriate actions to be taken in order to ensure 
• the health and safety of staff in accordance with applicable legislation and City 
• policies and procedures 

COMPETENCIES, SKILLS AND ABILITIES

• Effective communication and strategic planning skills
• Superior writing and editing skills with a proven track record across a variety of audience groups, cultures and channels
• Strong analytical and problem-solving skills
• A high level of professionalism and customer service, and the ability to collaborate and work effectively with all partners
• Ability to maintain strict confidentiality, exercise initiative, diplomacy, and discretionary judgment
• Ability to work under pressure and manage competing priorities and demands.
• Ability to work well in fast paced team environment with a wide range of technical and non-technical teams

Core Behaviours
Core behaviours define the City's expectations of the behaviours employees should demonstrate in performing their work.  They are reflective of the City's culture and values and guide all our present and future activities.  Every employee is encouraged to learn, embody, and demonstrate these core behaviours.

Review the Core Behaviours.