Senior Information Security Analyst

Department

TSML IT Infrastructure.

Union Affiliation

Exempt.

Responsibilities

PRIMARY PURPOSE: Applies a senior level of technical system security expertise on Transit Police operational network, systems, and assets, aligning with TransLink’s cybersecurity Policy and Standards; leads security activities, conducts security audits, research, and investigations on all internal Information Systems (IS) security violations and systems abuse. Provides direct informational security technical expertise and support to Transit Police management, IT teams, and special projects. Provides recommendations for establishment and changes to departmental policies, procedures, and processes. Determines courses of action within professional services standards, departmental procedures, policy guidelines, police mandates, and legislative requirements. Researches and recommends new security products, technologies, services, and practices. Identifies potential obsolescence and changes necessary to accommodate new technologies. Develops and leads working relationships with internal customers and peers to work collaboratively to resolve moderately complex problems. Leads team to identify design, process, and root causes of informational security issues and inefficiencies and assesses potential threats. Implements and maintains systems used in the delivery of service activities, ensuring data integrity. Accounting for reviews exercise to Information Security on infrastructure, risk assessments, and security designs within business applications.

KEY ACCOUNTABILITIES: Supports the IT Manager by leading and monitoring key deliverables, recommends solutions and process improvement opportunities, leads collaboration with vendors to monitor IT compliance. Provides senior level organizational support activities within a technical field of expertise. Leads and conducts security audits, research, and investigations on all internal Information Systems (IS) security violations and systems abuse. Refers breaches and concerns relating to matters that fall outside existing practice standards, procedures, and policies to IT management that may lead to discipline and termination as required. Provides advanced interpretations and recommendations on corrective action; develops and writes reports to be used in further analysis. Provides senior level informational security technical expertise and support to IT team and special projects. Aligning to TransLink’s Enterprise Cybersecurity Policy and Standards, provides advanced recommendations for establishment and changes to departmental policies, procedures, processes, standards, and strategy on security programs and makes recommendations. Assesses infrastructure and applications to address IT security needs ensuring adherence and proposing solutions. Recommends new security technologies, practices, and improvement opportunities. Assesses the strength of authentication mechanisms, including password policies, MFA (multi-factor authentication), and session management. Works closely with business and technical leaders including project teams, determines courses of action within professional services standards, departmental procedures, policy guidelines, and legislative requirements. Leads researches, evaluates, and recommends new security products, technologies, services, and practices. Identifies potential obsolescence and changes necessary to accommodate new technologies. Leads and develops working relationships with internal customers and peers to work collaboratively to exchange information, coordinate activities, resolve moderately complex problems ensuring impacts are clearly understood by users and IT staff. Identifies design, process, and root causes of informational security issues and inefficiencies, and assesses potential threats. Supports the Enterprise security awareness and training program roll out in Transit Police organization. Identifies vulnerabilities and weaknesses in the IT/business networks, systems, databases, and applications, and assesses its susceptibility to attacks. Provides remediation recommendations. Leads, implements, and maintains Information security risk assessment and reporting systems, audit log tracking, and information capturing requirements used in the delivery of service activities, ensuring data integrity. Management of IT security on infrastructure, risk assessments, penetration testing, phishing exercises, security awareness training, and security designs within business applications. Makes recommendations regarding the feasibility and justification of access and security related requests. Advises and supports the security systems used by the Transit Police organization for threat management and endpoint protection ensuring all rules and systems are secured appropriately for the Police mandated requirements.

Qualifications

Education & Experience: The competencies for this position would typically be acquired through a Diploma in Computer Science with emphasis on computing and networking infrastructures plus 8 years of experience in information systems support which includes 5 years in information security administration in a complex, multi-disciplinary organization.

• Advanced knowledge in information security incident management and incident response
• Advanced knowledge in current and emerging technology trends, developments and best security industry practices, current risks and emerging threats; IT systems and systems maintenance.
• Advanced knowledge in Vulnerability Management Practices and Tools
• Advanced knowledge in information security guidelines, concepts, and technical security controls
• Advanced business process and technology analysis skills
• Strong written and verbal communication skills
• Strong technical and non-technical documentation skills with an orientation for detail
• Strong interpersonal skills including conflict management and mentoring.
• Sound planning, organization, and time management skills
• Experience in a policing environment is an asset.
• Enhanced security clearance will be required for the position.

Work Schedule

37.5 hours per week. Designated Hybrid.

Rate of Pay

Grade 8. $97,600 - $146,400 per annum. The Total Compensation Package includes Extended Health, Dental, Transit Pass, and enrollment in the Public Service Pension Plan. Enjoy a variety of health and wellness programs, including access to gym facilities.

Conditions of Employment

Applicant will be required to possess or have the ability to obtain and maintain enhanced security clearance.

How to Apply

INSTRUCTIONS: Please save your (1) cover letter, and your (2) resume as one pdf document prior to uploading your application online. Please ensure your application is received before the posting deadline. Closing Date: Open until filled.

Equal Employment Opportunity

Transit Police are committed to employment equity.