Chief Information Security Officer

p>Contribute to the City of Hamilton, one of Canada’s largest cities - home to a diverse and strong economy, an active and inclusive community, a robust cultural and dining scene, hundreds of kilometers of hiking trails and natural beauty just minutes from the downtown core, and so much more. Join our diverse team of talented and ambitious staff who embody our values of sensational service, courageous change, steadfast integrity, collective ownership and being engaged empowered employees. Help us achieve our vision of being the best place to raise a child and age successfully. #Chief Information Security Officer Close date: Interested applicants please submit your application online at www.hamilton.ca/city-council/jobs-city by 4:00 p.m. on November 6, 2024.Duration: 24 Months
This vacancy is for a period of 24 months as a result of a new position. External applicants are considered only after the internal posting process has been completed. p>Reporting to the Chief Information Officer (CIO), the Chief Information Security Officer (CISO) will be responsible for implementing and running the enterprise cybersecurity and technology infrastructure program. The Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets, technologies, and infrastructure are adequately protected. This includes oversight of the City's data center, network infrastructure, and telephony and related infrastructure across approximately 180 sites.The CISO will lead efforts to secure the organization’s information and IT assets by developing and implementing strategies to mitigate risks, ensure operational stability, manage security incidents, and ensure compliance with relevant policies and regulations. The CISO will ensure that the business complies with all relevant IT security regulations and standards when acquiring new technology. This involves understanding the legal and regulatory landscape, assessing the technology's security features, and ensuring it meets the required compliance criteria.The CISO will lead the IT Security and Data Operations Teams consisting of approximately 25 staff members.STRATEGY & PLANNING Lead and provide strategic direction to achieve business goals by articulating standards, prioritizing technology initiatives and coordinating the evaluation, deployment, and management of current and future security and infrastructure technologies.Participate in the development and implementation of IT strategies in collaboration with the IT Management team. Provide advice and recommendations to the Senior Management team on strategic infrastructure and security architectures and best practices to ensure the integrity of the City environment.Develop and communicate security and technology plans and directions to senior management team, staff, partners, customers and stakeholders. Collaborate with the appropriate departments to develop and maintain a security technology plan that supports organization risk assessment needs.Direct development, execution and updating of cyber incident response and assist with technology business continuity planning and execution.Design and develop enterprise security standards, architecture, security technology evaluation and implementation.Review proposed infrastructure and application projects and solutions for compliance to defined City security and technology policies, procedures and standards.Perform corporate cultural analysis and develop change strategies that are flexible and adaptive in collaboration with the IT Management Team to support effective adoption of new applications, technologies and related processes.Establish and manage delivery of quality service through the establishment and monitoring of Key Performance Indicators (KPI).Devise strategies and make recommendations for enterprise information/data and solution architectures that meet the City’s security objectives and goals, working in collaboration with City senior management team.Coordinate with the IT Management Team to effectively and efficiently utilize IT resources – including personnel and equipment – across the IT organization.Manage and maintain strategic relationships with the corporate departmental leadership - across the City with a view to sustained insight on City business strategies and directions and the provision of advice and guidance on opportunities for managing risk by complying with the City’s security and infrastructure policies and procedures.Oversee the support, management and administration of contracts for spending on services and products related to managed security hardware and applications. This includes overseeing the preparation and execution of requests for proposals (RFPs), bid proposals, contracts, and other documentation for security applications and hardware. Negotiate enterprise-wide contracts with software and service providers as required and liaise with City vendors for prompt rectification of any security problems or emergencies. li>Participate in the evaluation, installation, configuration and deployment of new applications, systems software, products, and/or enhancements to existing applications to ensure compliance with the City’s security policies.Oversee the delivery of IT cyber and infrastructure related projects using standard project management practices and methods.Validate the compliance of proposed new software against the City’s security and infrastructure architecture and policies.Plan, organize, and manage staff and overall section operations to ensure the stable operation of the City’s IT security applications and software. li>Ensure that all employees perform work in accordance with applicable health and safety legislation and all City of Hamilton corporate and departmental policies and procedures. Ensures that appropriate action is recommended for those employees who do not work in compliance with legislation, policies or procedures.Manage and maintain an inventory of company security application software and systems assets and their corresponding contracts/agreements.Establish and maintain regular written and in-person communications with the organization’s executives, department heads and end users regarding pertinent Security and IT activities.Ensure effective management and communication of Security training and documentation for end users, hold clinics as necessary, and other user-related activities.ACQUISITION & DEPLOYMENT Assess and communicate risks associated with technology-related investments and purchases. Provide recommendations to mitigate the risks including identification of alternative solutions.Develop business case justifications and cost/benefit analyses for technology spending and initiatives.Define requirements for new technology implementations and communicate them to key business stakeholders.Review hardware and software acquisition and maintenance contracts and pursue master agreements to capitalize on economies of scale.Define and communicate corporate procedures, policies, and standards for the organization for acquiring, implementing, and operating new network systems, equipment, software, and other technologies.Approve and prioritize projects and the project portfolio as they relate to the selection, acquisition, development, and installation of major information systems in collaboration with the IT Management Team.Collaborate on the preparation of RFPs, bid proposals, contracts, scope of work reports, and other documentation for infrastructure projects and associated efforts with the Manager, Infrastructure & Operations.Validate that the security, deployment, monitoring, maintenance, development, upgrade, and support of IT infrastructure systems, including networks, data centers, servers, PCs, operating systems, and associated hardware comply with documented standards.Analyze existing operations and make recommendations for the improvement and growth of the IT infrastructure and IT systems.Continually analyze/review and improve upon security technology standards across the organization to maintain a technological and competitive edge within the market and ensure compliance with the City security policies and procedures.Provide continuous delivery of technical services through management of service level agreements with end users and monitoring of systems, programs, and equipment performance.Ensure equipment and software operation adheres to applicable laws and regulations.Convey the technology vision through the establishment and maintenance of regular written and in-person communications with the organization’s executives, decision-makers, stakeholders, department heads, and end users regarding pertinent IT activities.Coordinate with the IT Management Team to effectively and efficiently utilize IT resources – including personnel and equipment – across the IT organization.Manage and develop operational and capital budgets and forecasts to support strategic and operational requirements in collaboration with IT Management.

---