Job Description

Position Details

Location: Regional Headquarters, Whitby, Ontario
Vacancies: One (1)
Contract Duration: Up to 18 months
Department: Information Security
Salary Grade: CUPE 1764 Salary Grade 9
Hourly Rates: Start: $55.63; Six Month: $58.72; Job: $61.81

Senior Cybersecurity Specialist

Reporting to the Supervisor, Information Security, the incumbent will:

Ensure that disaster recovery plans are in place and aligned with business continuity plans, lead technical teams in the implementation and testing of plans, and advise business units of roles and responsibilities to enact approved plans.
Lead project teams, ensuring stakeholder expectations, scope, plans, timelines, individual responsibilities, materials, equipment, and budgets are met or exceeded to ensure financial and operational risks are mitigated.
Lead cybersecurity incident response and post-mortems, ensuring proactive protection plans are in place to avoid similar situations and to proactively identify other threats that may be present in the environment.
Ensure that the cybersecurity incident response plan is up to date and conduct exercises to ensure roles and responsibilities are understood.
Assist with the vision and roadmap for IT Security and Networking that supports the Departmental Operational Plans and the Organizational Strategic Plan.
Create dashboards, assist with determining KPIs, and gather metrics to communicate organizational security posture to key stakeholders.
Assist with operational and capital budget requests to fund program activities.
Assist with reviews of organizational security policies, recommending changes.
Collaborate on enterprise initiatives as a subject matter expert to identify risk associated with technology and provide advice and guidance for complex situations.
Address functional, monitoring, operational, quality, performance, recovery, and security requirements in an efficient and productive manner.
Review security risk assessments and recommend risk mitigation strategies.
Identify design gaps in existing and proposed architectures or projects and recommend changes or enhancements, updating disaster recovery as appropriate.
Ensure ongoing alignment of IT standards, processes, practices, and security controls with audit, compliance, and policy requirements.

Qualifications

A university degree in Computer Science, Computer Engineering, Software Engineering, Computer Security, Network Technology, Informatics and Security, Cyber Security or Information Systems Security, or a related discipline, or an equivalent combination of education and experience.
Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP) certification required.
Five years' experience in security and risk management, asset security, security architecture and engineering, communications and network security, identity and access management, security assessment and testing, and security operations.
Solid knowledge of cloud concepts, architecture, design, data security, platform security, infrastructure security, application security, and compliance.
Understanding of IT architecture, OT architecture, networks, operating systems, cryptography, telecommunications, and associated cybersecurity technologies.
Knowledge of information security governance, risk management, security principles, best practices, and industry standards.
Experience with complex projects involving integration of technologies and platforms across technical teams and maintaining relationships with stakeholders.
Experience with business continuity planning, disaster recovery planning, cyber incident response planning, and risk management.
Familiarity with tools and techniques commonly used by malicious actors.
Ability to translate complex technical language and communicate business risks.
Excellent communication and interpersonal skills.
Effective leadership and coaching skills.
Strong project and time management skills.
Strong analytical and troubleshooting skills, with the ability to generate and implement innovative and creative solutions.
Ability to multi-task, manage competing priorities, and influence and lead change.
Capacity to maintain tactfulness, integrity, and confidentiality.
Creativity in developing equitable, accessible, and sustainable solutions.

Conditions Of Employment

All applicants are expected to comply with the Region of Durham's Code of Ethics and Code of Conduct Policies throughout the recruitment process.
Proof of education, qualifications, and any other bona fide job requirements will be required prior to the start date.

How To Apply

Please apply online at www.durham.ca no later than midnight (Eastern Standard Time) on the closing date indicated on the Job Posting. All applicants are thanked; however, only those being considered will be contacted.

Accessibility And Inclusion

The Region of Durham is committed to advancing equity, diversity, and inclusion within the organization and the communities it serves. Applications are welcomed and encouraged from Indigenous and racialized persons, women, persons with disabilities, members of LGBTQ2S+ communities, and others who may contribute to further workforce diversification, including those who experience systemic barriers.

In accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code, accommodation will be provided throughout the recruitment process upon request, based on any Code-protected ground. If contacted for an employment opportunity and accommodation is required, or this information is required in an accessible format, contact RecruitingHelp@durham.ca.