Cybersecurity and Network Governance, Risk & Compliance Engineer

POSITION: Cybersecurity and Network Governance, Risk & Compliance Engineer

REPORTS TO: Manager, Cybersecurity and Network

DEPARTMENT: Corporate Services

LOCATION: North Bay

REFERENCE: 800-149B-25

SALARY: $95,212 - $112,008

WHO WE ARE:

Ontario Northland Transportation Commission (ONTC) is an Agency of the Province of Ontario that provides efficient and vital transportation services. We are a modern, forward-thinking organization focused on providing safe and reliable transportation services. ONTC has a rich history of over 120 years and strong connections to the communities we serve. With over 900 skilled professionals, we work together to enhance transportation services and ensure that they are sustainable for future generations. We offer a dynamic workplace culture, along with a competitive salary, excellent benefit package, a defined benefit pension plan, paid vacation, paid personal leave days and discounted transportation on our bus and passenger rail services.

ACCOUNTABILITY STATEMENT:

The Cybersecurity and Network Governance, Risk and Compliance Engineer plays a lead role in the governance of data and electronic records and information at Ontario Northland.

MAJOR DUTIES/ RESPONSIBILITIES:

1. Ability to understand complex IT solutions and identify regulatory, organizational policies and information security requirements that must be built into the IT solution.
2. Collaborate with various departments to develop risk mitigation strategies, action plans and provide guidance on informational security requirements.
3. Guide IT project teams on how to build regulatory, organizational policies and information security into a solution and assist in incorporating the functionalities into the applicable IT solution.
4. Ensure compliance with relevant laws, regulations, and standards (e.g., Payment Card Industry Data Security Standard (PCI-DSS), International Organization for Standardization (ISO27001), Freedom of Information and Protection of Privacy Act (FIPPA), National Institute of Standards and Technology (NIST)).
5. Promote a culture of compliance and risk awareness.
6. Develop and present awareness sessions and facilitate workshops for regulatory, organizational policies and information security assessments.
7. Assist in the development and implementation of governance frameworks.
8. Participate in the development, implementation, and maintenance of policies, standards, and procedures relative to information security management.
9. Support user acceptance testing and development of training materials of regulatory, organizational policies and informational security requirements.
10. Act as a liaison between information management (IM) practices and IT solutions.
11. Conduct/support in-house information security/risk assessments internal to ONTC.
12. Research and analyze information security trends, regulatory and regulatory changes and emerging best practices to optimize ONTC’s transparency and compliance in the information management domain.

REQUIREMENTS:

1. University degree in Information Security, Information Technology or related field.
2. 5+ years of experience in the governance, risk and compliance field.
3. Minimum of one of the following certifications is required: Certified Compliance & Ethics Professional (CCEP), Certified Governance Risk and Compliance (CGRC), Certified Risk and Information Systems Control (CRISC), Certification in Risk Management Assurance (CRMA), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP).
4. Experience implementing and/or supporting document management systems, workplace collaboration/productivity platforms (e.g., Microsoft SharePoint, Microsoft Teams), ECM/content services platforms and/or information management software (OpenText Content Server preferred).
5. Experience developing and maintaining information classification systems, file directory structures, file plans and records series/retention schedules.
6. Demonstrated ability to serve as a change agent, leading and inspiring others to act, especially under circumstances when change is unpopular.
7. Knowledge of theory and principles of systems design and development and related methods, techniques and standards.
8. In depth knowledge of various legislative and regulatory policies.
9. Strong skills in developing and delivering presentations for target audiences.
10. Project management skills.
11. Extensive knowledge on IT Operations and IT Service Management.
12. Highly motivated, analytical, organized, and efficient.
13. Ability to work independently.
14. Valid driver’s license.
15. Commitment to company health and safety.

BACKGROUND INVESTIGATION: The successful candidate will need to pass the following clearances: criminal record check, employment references and education verification.

CLOSING DATE: December 12, 2024 no later than 11:59 p.m. We thank all applicants for their interest; however, only those selected for an interview will be contacted. Qualified individuals are invited to apply in writing with a current covering letter and resume (provided in one document), stating reference name and number. Visit our career website to apply: https://www.ontarionorthland.ca/en/careers

At Ontario Northland, we are committed to employment equity. We value the unique skills and experiences each person brings to Ontario Northland and invite all interested individuals to apply and encourage applications from Indigenous peoples, racialized persons, women, persons with disabilities, and persons who identify as 2SLGBTQIA+.

Ontario Northland will provide accommodation to ensure barrier-free employment in accordance with the Canadian Human Rights Act and the Accessibility for Ontarians with Disabilities Act. You can request accommodation at any stage of the hiring process. If you require an accommodation, please contact Human Resources.

Les offres d'emploi sont également disponibles en français. Visitez notre site Web sur les carrières ou appelez le 1-800-363-7512, poste 394 pour plus de renseignements.