Supervisor, Cybersecurity

Edmonton Catholic Schools is a large urban school division whose mission is to provide a Catholic education that inspires students to learn and that prepares them to live fully and to serve God in one another. The Division is comprised of over 44,000 students and 5,000 employees in 95 schools plus other sites.

**Supervisor, Cybersecurity**:
**Requisition ID**: 7443

**Hours Per Week**: 35

**Position**: New

**FTE**: 1

**Department**: Info & Infra Tech-Op Services

**No Months Per Year**: 12

**Position Status**: Permanent

**Employee Group**: OOS

**Rate of Pay**: $90,179 - $112,742

**Posting Closing Date**: 8/11/23
- We are seeking an expert in best practices who develops policies and controls to govern the effective management of the Division's Cybersecurity services. In this position, you will ensure that the management of information system-related security risks is consistent with the organization's mission/business objectives and overall risk tolerance. The successful applicant to this position will master the Division’s tools to monitor all ongoing security threats, in addition to participating in inter-Division and provincial-wide committees and initiatives.- In this position, you will lead, plan, and monitor the Information Security Management System for Indicators of Compromise (IOC) to prevent or detect unauthorized access or actions to the Division’s network and computing/cloud infrastructure. You will also lead the Cybersecurity Analysts team responsible for monitoring, tracking, and coordinating activities, and ensure appropriate measures are taken to remediate security vulnerabilities or threats.If this sounds like something you are interested in, we want to hear from you This position includes hybrid work as well as many other benefits.

**RESPONSIBILITIES**
- Provide functional leadership in the area of expertise by leading projects.
- Research, evaluate, recommend, and implement security devices or services.
- Coach, guide and assist Security Analysts in meeting objectives as well as assign, delegate and evaluate work performed.
- Ensure continuity of service by training Security Analysts on existing business processes and use of the Division’s systems responsible for identifying security threats or unauthorized users.
- Develop, configure, and maintain Security Incident and Event Management (SIEM), Vulnerability Assessment, and Network Behaviour Analysis tools to monitor, alert and report network/Applications/Infrastructure/Cloud security status.
- Provide management with risk assessments and security briefings to advise them of critical issues that may affect users or organizational security objectives.
- Participate in changelog notification to verify the risk of change to Division networks and infrastructure.
- Perform regular external and internal penetration tests to help identify vulnerabilities ensuring they are appropriately addressed. Ensure that security controls are implemented as planned and followed.
- Participate in the Patch and Vulnerability process and verify that systems are scanned and updated without excessive disruption of services.
- Communicate with multiple departments and levels of management to resolve technical and procedural cybersecurity risks.
- Respond to operational incidents by informing the interested parties.
- Provide leadership with reports and metrics on cybersecurity-related incidents and activities.
- Develop and analyze threat assessment logs to determine where automated meditation can be implemented.
- Maintain technical knowledge through a range of professional development activities to keep abreast with rapidly changing technology.
- Facilitate training and support for Division and department technical staff.
- Participate in recruitment activities.

**QUALIFICATIONS**
- Degree, diploma, certificate, or equivalent experience with CISSP or CISM certification plus a minimum of five years of directly related experience.
- ISO 27001 Certification is an asset.
- CSSLP is an as set.
- Microsoft Cybersecurity Architect is an asset.
- Information Technology Governance Certification is an asset.
- Knowledge of Information Technology Security best practices.
- Knowledge of IDS/IPS and other security monitoring systems.
- Knowledge of Information Technology Risk assessments creating and reporting.
- Knowledge of supervisory principles and practices, human resource policies and procedures and Out of Scope Terms and Conditions.
- Knowledge of modern-day cyber threats.
- Knowledge of project management techniques; FOIP Legislation; e-records management; and system security standards.
- Knowledge of the educational environment and its unique technical requirements.
- Knowledge of workplace safety and awareness of Occupational Health and Safety regulations.
- Understanding of Division and department business, operations, and programs.
- Strong supervisory and leadership skills with the ability to coach, mentor and train staff.
- Excellent interperson