Information Security Analyst

**Status**: Regular, Full-Time
**Number of Positions**: 1
**Work Location**:Hybrid (a combination of in-office in Vancouver and remote work)

**Who we are**

The British Columbia College of Nurses & Midwives (“BCCNM”) is the college empowered under the Health Professions Act to regulate the practice of all licensed practical nurses, nurse practitioners, registered midwives, registered nurses, and registered psychiatric nurses in British Columbia. Regulation helps to protect the public by ensuring that professional care or service received by the public is competent, ethical, and meets the standards that society views as acceptable.

**BCCNM’s commitment to Indigenous Specific Anti-Racism**

As the largest health regulator in Western Canada, BCCNM has the opportunity to influence the health professionals we regulate, as well as the broader health-care system, to break the cycle of racism, and improve health outcomes for Indigenous Peoples. BCCNM has pledged to become culturally safe and anti-racist, and to support the health professionals we regulate to do the same.

**What we offer you**

We promise to provide you with rewarding work that challenges you. You will be part of a passionate team contributing to our important mandate of protecting the public. As a member of the team, you can expect to be working in a collaborative, team-based environment, and treated in a respectful and professional manner.

The expected starting base salary for this position is $121,764 - $127,853 annually, depending on a variety of factors including qualifications and experience. Once hired, you will progress through a wider salary range over time as you continue to develop job knowledge, skills and competencies for the role.

In addition to base salary, the college offers a generous vacation and extended benefits package. As an employee, you receive 100% employer-paid health and dental benefits. And we contribute to B.C.'s Municipal Pension Plan to help you secure your retirement income. Throughout your career with us, you will engage in a variety of learning and development. We will support your professional development and cover your professional membership costs. To support you in work and life, we provide an employee assistance program and fitness allowance perk. Working with us allows you to enjoy flexible hybrid work. This position is located in Vancouver, but you’ll be able to work remotely up to 3 days a week. Our office is closed for the 11 statutory holidays in B.C. as well as Easter Monday and Boxing Day.

**What you’ll be doing**

Reporting to the Information Technology Architect (ITA), the Information Security Analyst (ISA) assesses risk and establishes a secure information processing environment through the management of a security program incorporating policies, strategies, mitigation plans, measurement programs, architecture, and training processes. The ISA develops and manages the security program, under the guidance of the ITA and with the support of the Director of IT and external IT security service providers.

Security is a key component of BCCNM’s Information Technology architecture. Protecting data and fulfilling regulatory obligations is critical to the public having unshakeable confidence in BCCNM as a healthcare regulator.

The ISA is a member of the IT Architecture team and collaborates with IT staff and other Operations teams to identify, recommend, implement, and manage security solutions, controls, and processes in order to protect BCCNM data and operations.

The ISA works with the ITA, the Director of IT, and external IT security service providers to ensure that security considerations are integrated into new systems, features and changes, and information exchanges with third parties. The ISA has a key role in IT security roadmap initiatives, collaborates with IT in responding to penetration testing and vulnerability assessments, and drives security incident response activities (if necessary, in collaboration with external service providers).

**Key responsibilities include**:

- Maintain up-to-date knowledge of the IT security landscape including awareness of attacks and threat vectors, security processes, and security solutions.
- Advise on emerging information security threats and vulnerabilities, as well as evolving industry standards and best practices.
- In collaboration with the ITA and with the support of external IT security service providers, develop, implement, and manage an IT Security Program which establishes and maintains a secure information processing environment at BCCNM.
- Based on the IT Security Program, develop and maintain BCCNM’s security environment as necessary for protecting information, systems, and technology assets (standards, policies, baselines, guidelines, procedures, processes, controls, and documentation).
- In consultation with the ITA and Director of IT, maintain an information systems security risk register and recommend security controls to be designed and