Exempt Position
Senior Cyber Security Analyst,
Information Technology
The Greater Victoria School District provides public educational services to over 20,000 students in the Greater Victoria Area, encompassing six municipalities. To provide this service, the District has a current operating budget of $268 million and employs approximately 3,500 staff; which includes, teachers, principals and vice-principals, support staff, psychologists, speech and language pathologists and exempt managerial staff.
Reporting to the Director of Information Technology for Learning, the Senior Cyber Security Analyst will provide subject matter expertise in cyber security and data governance, to ensure the successful execution of the Greater Victoria School District’s cyber security program, policies and procedures.
POSITION OVERVIEW
- The Senior Cyber Security Analyst will provide subject matter expertise in cyber security and data governance, to ensure the successful execution of the Greater Victoria School District’s cyber security program, policies and procedures.
- The Senior Cyber Security Analyst is responsible for advising, implementing, and monitoring the cyber security systems that protect the Greater Victoria School District’s technologies and data.
- The Senior Cyber Security Analyst is accountable for engaging with and providing leadership to various stakeholders to promote continuous improvement and understanding of cyber security risks and best practices.
- The role will provide governance, risk management and audit services to support the organization’s cyber security goals.
SPECIFIC RESPONSIBILITES
1.0 Technical Leadership
- Lead technical direction and define cyber security requirements for all technology related projects regardless of origin (‘Security by Design’).
- Continuously advise, maintain, and apply industry best practices in cyber security and data governance.
- Champion strategies to protect the Greater Victoria School District’s data, communications, and technologies, from being stolen, manipulated, held at ransom, corrupted, or otherwise accessed illegally.
2.0 Planning & Execution
- Perform cyber security assessments to test and identify network and system vulnerabilities.
- Perform technical and operational audits and reviews of key internal control procedures.
- Document relevant business processes and their implications with regards to cyber security.
- Issue written reports outlining findings and recommendations based on audit results.
- Assist with the automation of monitoring and alerting processes and workflows to improve cyber security efficiency.
- Assess compliance with organizational cyber security rules and standards.
- Prioritize remediation of gaps based on internal and external audits.
- Coordinate security testing activities with staff, internal departments, and external partners.
- Maintain cyber security and privacy standards and procedures as per policy and procedure.
3.0 Breach Response
- Advise on the organization’s breach response plan and disaster recovery procedures.
- Respond to all system and/or network security breaches as per policy and procedure.
4.0 Investigations
- Provide forensic support to the organization as per policy and procedure.
5.0 Change Management
- Participate in the change management process.
- Evaluate the impact of change on students, staff, parents, and partners, as part of the cyber security risk mitigation process.
6.0 Training and Support
- Drive cyber security awareness and training campaigns.
- Collaborate with the Content Publisher to develop documentation and instructions for cyber security related procedures.
- Conduct cyber security related training for staff.
- Provide assistance to various stakeholders through a ticketing system and via direct contact.
7.0 Project Management
- Plan and coordinate cyber security related projects.
- Provide estimates for proposed cyber security related enhancements.
- Work with project sponsors to define the scope, priority, and direction of projects.
POSITION QUALIFICATIONS
- Minimum requirements include:
- Sc. in computer science or related discipline
- Four to six years cyber security experience within a technically complex organization
- An equivalent combination of education and experience may be considered
- Demonstration of initiative and proficiency in the following competencies:
- Experience leading and overseeing security investigations, audits and assessments
- Experience with Pen Testing and Hacking techniques
- Experience with log management platforms (SIEMs)
- Ability to document, graph or otherwise visual represent security concepts, configurations, and workflows
- Project oriented
- Analytical with meticulous attention to accuracy and detail.
- Strong understanding of Windows and Linux operating systems
- Strong understanding of the TCP/IP stack
- Strong understanding of cloud platforms and how they integrate into security models.
- Excellent organizational, administrative, interpersonal, and communication skills (verbal, written and presentation).
- A high level of professionalism and ability to collaborate and work effectively with all stakeholders
- Ability to maintain strict confidentiality, exercise initiative, diplomacy, and discretionary judgment
- Demonstrated ability to compose written material in a variety of formats
- Ability to work under pressure and manage competing priorities and demands.
- Valid BC Class 5 Driver’s license.
This is a hugely rewarding role within a key community organization. The Greater Victoria School District’s Mission Statement is ‘We nurture each student’s learning and well-being in a safe, responsive and inclusive learning community’ – and this mission guides all key initiatives in support of student success.
Please send your cover letter, résumé and contact information for three references to:
Human Resource Services
Greater Victoria School District No. 61
556 Boleskine Road
Victoria, BC V8Z 1E8
Or
Fax: 250-475-4113 / Email: hrs@sd61.bc.ca
Deadline for submissions: Friday, September 16th at 4:00pm
The School District thanks all applicants but only those selected for an interview will be contacted.