Information Technology Security and Risk Specialist

:
The **City of Thunder Bay** provides exceptional quality of life to those who live, work, and play in Thunder Bay - a culturally vibrant, economically diverse community with a metro population of over 120,000. Located on the north shore of Lake Superior, under the protective watch of the Sleeping Giant, Thunder Bay is rich in people and resources, and connects Northwestern Ontario to the world. We value our high quality of life and promote a clean, green, beautiful, and healthy community that provides economic opportunity, respects diversity, and provides affordable and safe neighbourhoods that are accessible to all.

The City of Thunder Bay is a place where art, culture and nature come together

Watch this video to learn more about our City at:
**Job Description**:
***:Under the general supervision of the Manager, identifies and implements improvements for IT controls to minimize IT risk and leads the management of the IT Security Portfolio. Key responsibilities include developing and distributing policies and procedures, researching, and completing audit requirements, conducting, and coordinating internal & external cybersecurity risk and vulnerability assessments. Develops, maintains and coordinates testing of the information technology business continuity and disaster recovery plan; works with Corporate departments to develop and manage business continuity components related to IT systems and Infrastructure; identifies and provides solutions for information technology privacy requirements.

**MAJOR RESPONSIBILITIES**:

- Leads the management of the IT security portfolio.
- Leads the cybersecurity incident response for the organization for any new and/or active incidents that occur.
- Leads and completes cybersecurity risk and vulnerability assessments and recommends improvements to reduce risk.
- Develops, maintains and coordinates the planning, and testing of the Corporate Information Technology business continuity and disaster recovery plan; works with Corporate departments to develop and manage business continuity components related to IT systems and Infrastructure.
- Undertakes research and policy/procedure development on matters pertaining to information technology; stays current with all new and existing regulations relating to information technology and evaluates the impact of such regulatory amendments; identifies trends and problems and researches and recommends solutions to improve performance and efficiencies.
- Assists with the evaluation and testing of information technology security systems; evaluates and monitors information technology compliance tools.
- Develops training material and trains Corporate staff in areas relating to information technology cybersecurity and risk management.
- Administers security licensing agreements; confirms that deployment of security software is in compliance with licensing agreements; audits software and hardware licenses, audits and updates inventory databases, and produces activity reports as needed.
- Negotiates and prepares Service Level Agreements with external security vendors offering information technology security services.
- Prepares reports, business cases, customer surveys, studies, and makes presentations related to information technology cybersecurity practices.
- Assists in the preparation of the capital and operating budget as it relates to information technology security controls and solutions.
- Works with Corporate staff to raise awareness of privacy legislation as it relates to information technology; writes and publishes articles through available internal mediums to raise awareness of information technology-related issues.
- Maintains accurate departmental records in accordance with corporate policies.
- Performs such other related duties as may be assigned.

**QUALIFICATIONS**:
**Education/Experience**:

- Degree in computer science majoring in management information systems, or a related discipline, with a minimum of three years’ experience in enterprise information technology and Information Technology & cybersecurity administration; or
- Diploma related to Information Technology, together with a minimum of five years of experience in enterprise information technology and Information Technology & cybersecurity security administration
- Understanding of applicable data security practices and law

**Skills/Abilities**:

- Strong understanding of organizational goals and objectives and project management principles
- Superior ability to communicate effectively and concisely, both orally and in writing; with the ability to present ideas in a business friendly and user friendly language
- Superior ability to establish and maintain effective working relations with other departments, co-workers, and the general public
- Ability to improve divisional effectiveness and efficiency
- Highly self-motivated and directed
- Excellent project/time management, analytical/critical thinking, problem-solving and decision-making skills
- Ability