SENIOR INFORMATION SECURITY ANALYST

at  City of Coquitlam

ABOUT US

One of BC’s Top Employers, the City of Coquitlam offers meaningful career opportunities to make a difference within the local community. As the sixth largest city in BC, we are home to more than 150,000 residents. Our diverse municipality is a great place to work as it continues to grow through innovative urban design, inspiring arts, culture and recreation programs, and state-of-the-art transportation systems. Our brand is built on managing our resources in a responsible and sustainable manner, while supporting a vibrant, growing regional urban centre. We envision a bright future in Coquitlam that we hope includes you!

ABOUT YOU / WHAT WE ARE LOOKING FOR

The Senior Information Security Analyst is a new, specialized senior role for the City of Coquitlam and we are looking for a passionate expert in this field to join our team!

In this exempt role you will act as a special advisor to the Director Information and Communications technology as well as other peers across the mean including both managers and unionized team members. Your focus will be protecting the integrity of our data, information systems, and operational technology platforms, including secure implementation and delivery of technology services across the City’s various departments. In this role you can look forward to:

• Monitoring firewall logs, intrusion detection logs, and other data collected by City systems and City networks.
• Planning, implementing, administering, maintaining and monitoring IT security controls for digital assets.
• Participates in the design of the security architecture.
• Planning, leading and executing risk assessments to determine the security posture of the City’s data and infrastructure from existing systems and those being considered for the future.
• Respond to cyber security events, incidents, and participates in security investigations.
• Conduct vulnerability scanning and city-wide penetration tests and assessments.
• Maintains the cyber security risk register.
• Develops security test cases.
• Develops and delivers educational security awareness training for City staff.
• Participates in the development of security policies, procedures, exercises, response plans, and maintains documentation.
• Keep abreast of the latest security and technology developments.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Technology, or an equivalent
• Minimum 5 years IT experience, including 3 years of experience in cybersecurity, or information security.
• CISSP, CCSP, CISM or equivalent

PREFERRED QUALIFICATIONS

• Familiarity with the National Institute of Standards and Technology (NIST) framework.
• Familiarity with Payment Card Industry compliance (PCI DSS).
• Familiarity with operational technology.
• Strong knowledge of security threat and risk assessment modelling and event incident management.
• Strong knowledge in firewalls, email, web, and cloud security.
• Excellent research and analytical skills.
• Excellent project management skills and effectiveness in planning, coordinating, organizing, problem-solving.
• Ability to handle confidential and sensitive information with a high degree of discretion and political acumen.
• Ability to collaborate within the Information and Communications Technology team, and teams in other departments.
• Demonstrated oral, written, and presentation skills, with the ability to communicate at technical and non-technical levels to delivery presentations and training sessions on cyber security.

• Monitoring firewall logs, intrusion detection logs, and other data collected by City systems and City networks.
• Planning, implementing, administering, maintaining and monitoring IT security controls for digital assets.
• Participates in the design of the security architecture.
• Planning, leading and executing risk assessments to determine the security posture of the City’s data and infrastructure from existing systems and those being considered for the future.
• Respond to cyber security events, incidents, and participates in security investigations.
• Conduct vulnerability scanning and city-wide penetration tests and assessments.
• Maintains the cyber security risk register.
• Develops security test cases.
• Develops and delivers educational security awareness training for City staff.
• Participates in the development of security policies, procedures, exercises, response plans, and maintains documentation.
• Keep abreast of the latest security and technology developments