Senior Officer, Digital Risk Mgmt & Advisory

JOB SUMMARY

The Chief Information Security Office is responsible for delivering and overseeing cyber security and digital risk management programs across all City business lines, including strategic enablement and emerging threats identification, policy and implementation oversight, digital risk management, and security governance and culture transformation. 
The Digital Risk Management and Advisory Unit is responsible for the governance of security risk management programs across the organization.

In this role, you will conduct comprehensive evaluations of technology programs, systems, networks, and security controls to assess compliance, effectiveness, vulnerabilities, and deviations from established standards and policies. Based on these evaluations you will develop cyber threat intelligence and supply chain risk management practices to identify, assess, communicate, and respond to evolving digital risks across the enterprise.

You are responsible for designing and supporting digital risk management and cyber security programs that have a direct impact on and involvement in confidential matters affecting the City’s workforce, including assessments of cyber threats with implications on confidential data, employee performance, organizational security, and compliance with labour-related legislation. You provide strategic advice and make recommendations that directly impact employee performance management and disciplinary actions, directing access, privacy, and policy compliance, and working in close collaboration with HR, Legal, and Labour Relations to address situations of misconduct where applicable.

You play a critical role in developing strategies and controls that may inform or result in disciplinary action, workplace investigations, or employment restrictions. You are entrusted with designing and recommending digital security protocols, internal investigations protocols, and system access criteria in line with collective agreements and legislative obligations, impacting the economic lives of employees.

EDUCATION AND EXPERIENCE

Completion of a 4 year university degree in Information Security, Computer Science, Risk Management or other related field

Minimum of 7 years of progressively responsible experience in an Information Technology role, Information Systems Audit role, Information Security role, or Digital Risk Management role 

CERTIFICATIONS AND LICENCES

KNOWLEDGE

• Deep subject matter expertise in Information Security, Compliance and/or Risk Management programs and best practices, preferably within the Tech and Public Administration Sectors
• Experience in building or maintaining risk management programs across a wide variety of regulatory and compliance frameworks 
• In depth knowledge of least two of the following: the NIST Cyber Security Framework, ISO 2700x, SOC1 & 2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.
• Sufficient technical knowledge of technical concepts relevant to cloud computing environments: logical access, agile development process, security architecture, information security, network security, and privacy
• Strong understanding of current digital products and services to include web, mobile, chat, text and the evolving use of artificial intelligence
• Legislation, regulations, policies, standards and guidelines relevant to the work 
• Industry trends and developments 
• Must be familiar with applicable health and safety legislation, have knowledge of any potential or actual danger to health or safety in the work place, and have knowledge of appropriate actions to be taken in order to ensure the health and safety of staff in accordance with applicable legislation and City policies and procedures

COMPETENCIES, SKILLS AND ABILITIES

• Ability to work well in fast paced team environment with a wide range of technical and non-technical teams
• Excellent writing, communication, and organizational skills - strong attention to detail
• Ability to confidently convey nuanced information to a variety of audiences, including senior leaders

Core Behaviours

Core behaviours define the City’s expectations of the behaviours employees should demonstrate in performing their work.  They are reflective of the City’s culture and values and guide all our present and future activities.  Every employee is encouraged to learn, embody and demonstrate these core behaviours.

Review the Core Behaviours.

Leadership Competencies

The City has defined key competencies that leaders are expected to embody and demonstrate to successfully move the organization towards achieving its strategic objectives and create an organizational culture that supports and empowers employees to excel, grow and reach their full potential. These leadership competencies and associated behaviours are expected to be demonstrated by leaders at all levels of the organization. 

Review the Leadership Competencies.