Information Technology Security and Risk Specialist - Full-Time - City of Thunder Bay

Thunder Bay, ON

About the Job

The City of Thunder Bay provides exceptional quality of life to those who live, work, and play in Thunder Bay – a culturally vibrant, economically diverse community with a metro population of over 120,000. Located on the north shore of Lake Superior, under the protective watch of the Sleeping Giant, Thunder Bay is rich in people and resources, and connects Northwestern Ontario to the world. We value our high quality of life and promote a clean, green, beautiful, and healthy community that provides economic opportunity, respects diversity, and provides affordable and safe neighbourhoods that are accessible to all.

The City of Thunder Bay is a place where art, culture and nature come together!

Watch this video to learn more about our City at:

Job Description

POSITION SUMMARY: Under the general supervision of the Manager, identifies and implements improvements for IT controls to minimize IT risk and leads the management of the IT Security Portfolio. Key responsibilities include developing and distributing policies and procedures, researching, and completing audit requirements, conducting, and coordinating internal & external cybersecurity risk and vulnerability assessments. Develops, maintains and coordinates testing of the information technology business continuity and disaster recovery plan; works with Corporate departments to develop and manage business continuity components related to IT systems and Infrastructure; identifies and provides solutions for information technology privacy requirements.

MAJOR RESPONSIBILITIES:

Leads the management of the IT security portfolio.

Leads the cybersecurity incident response for the organization for any new and/or active incidents that occur.

Leads and completes cybersecurity risk and vulnerability assessments and recommends improvements to reduce risk.

Develops, maintains and coordinates the planning, and testing of the Corporate Information Technology business continuity and disaster recovery plan; works with Corporate departments to develop and manage business continuity components related to IT systems and Infrastructure.

Undertakes research and policy/procedure development on matters pertaining to information technology; stays current with all new and existing regulations relating to information technology and evaluates the impact of such regulatory amendments; identifies trends and problems and researches and recommends solutions to improve performance and efficiencies.

Assists with the evaluation and testing of information technology security systems; evaluates and monitors information technology compliance tools.

Develops training material and trains Corporate staff in areas relating to information technology cybersecurity and risk management.

Administers security licensing agreements; confirms that deployment of security software is in compliance with licensing agreements; audits software and hardware licenses, audits and updates inventory databases, and produces activity reports as needed.

Negotiates and prepares Service Level Agreements with external security vendors offering information technology security services.

Prepares reports, business cases, customer surveys, studies, and makes presentations related to information technology cybersecurity practices.

Assists in the preparation of the capital and operating budget as it relates to information technology security controls and solutions.

Conducts investigations related to allegations of misuse of information technology resources, including hardware, software, applications, e-mail, the Internet, and data entered and or generated through the use of these tools.

Explores funding opportunities and completes grant applications for information technology security solutions.

Works with Corporate staff to raise awareness of privacy legislation as it relates to information technology; writes and publishes articles through available internal mediums to raise awareness of information technology-related issues.

Maintains accurate departmental records in accordance with corporate policies.

Performs such other related duties as may be assigned.

QUALIFICATIONS:

Education/Experience:

Degree in computer science majoring in management information systems, or a related discipline, with a minimum of three years’ experience in enterprise information technology and Information Technology & cybersecurity administration; or
Diploma related to Information Technology, together with a minimum of five years of experience in enterprise information technology and Information Technology & cybersecurity security administration
Understanding of applicable data security practices and law

Skills/Abilities:

Strong understanding of organizational goals and objectives and project management principles
Superior ability to communicate effectively and concisely, both orally and in writing; with the ability to present ideas in a business friendly and user friendly language
Superior ability to establish and maintain effective working relations with other departments, co-workers, and the general public
Ability to improve divisional effectiveness and efficiency
Highly self-motivated and directed
Excellent project/time management, analytical/critical thinking, problem-solving and decision-making skills
Ability to effectively prioritize and execute tasks in a high pressure environment
Must be competent within the meaning of the Occupational Health and Safety Act

Assets:

Experience with Information Technology security tools, audits and concepts
Cybersecurity & IT security certifications
Knowledge of the functions of City departments, outside boards, and local community groups

CONDITIONS OF EMPLOYMENT:

Must undergo a successful Criminal Record and Judicial Matters Check (CRJMC)
May be required to travel to various work locations and provide own transportation
Must sign and abide by Employee Confidentiality Statement

General Information:

As an equal opportunity employer, the City of Thunder Bay encourages applications from Indigenous peoples, persons with disabilities, members of visible minority groups, women and members of the 2SLGBTQ+ community.

ONTARIO HUMAN RIGHTS CODE: It is a contravention of the Human Rights Code of Ontario to discriminate on the basis of: race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, marital status, family status, disability, age, record of offences, gender identity or gender expression. Therefore, a resume submitted to the City must not include references to any of the above characteristics. Do not include:

Photos
Any certificates that have photo identification
Driver’s licences
Police records checks

Note: The above documentation will be requested by the Human Resources & Division should you be the successful applicant. If a Criminal Record Check is required, it will be requested by Human Resources should you be the successful applicant. Please do not submit your Criminal Record Check with your application.

ACCOMMODATION: Reasonable accommodations are available upon request for all parts of the recruitment process.

PRIVACY: Personal information on this form is collected under the authority of the Municipal Act, c. 302, as amended, and will be used to determine eligibility for employment. Questions about this collection of personal information should be directed to the Human Resources & Corporate Safety Division, 125 Syndicate Ave Suite 42, Thunder Bay, Ontario, P7E 6H8, Telephone: 625-3866

Source : City of Thunder Bay