Senior IT Security Advisor

Senior IT Security Advisor

Are you interested in this opportunity? Click on Apply and your application will be submitted. If you know of someone else who might be interested, send this opportunity to a friend.

Êtes-vous intéressé par cet emploi? Cliquez sur Postuler et votre demande sera alors soumise. Si vous connaissez quelqu'un d'autre qui serait intéressé par ce poste, envoyez cette offre d'emploi à un ami.



City / Ville Calgary
Province Alberta [AB]
Title / Titre Senior IT Security Advisor
Job ID / Numéro d'identification du poste 11576
Position Overview / Vue d'ensemble du poste This role will be responsible for leading initiatives to assess and implement adequate security controls in conjunction with the responsible IT teams. This role requires the confidence of others in the organization to be able to support and effectively manage security and risk. This role also requires a broad range of competencies including familiarity with current Information Technology and mastery of management and technical aspects of IT security. The Senior IT Security Advisor acts as a liaison with HR, Legal, Corporate Security and other business depot pertaining to IT security incidents.
Responsibilities / Responsabilités
* Responsible for the development and maintenance of the corporate governance framework for IT Security that includes policies, standards, processes, practices, tools, procedures and metrics and supports IT's standard Systems development Life Cycle. This includes activities necessary to develop, obtain approval for, deploy and maintain corporate IT security documentation.
* Lead or participate in selected projects that involve the implementation of security controls, processes, security assessments and compliance initiatives.
* Support and maintain operational security systems (eg Web Content Filter, Network Access Control, Vulnerability Management).
* Provide on-call support for operational security systems and 3'rd party security outsourcer.
* Lead initiatives in the adoption of externally mandated security guidelines, standards and criteria.
* Develop and maintain the security training and awareness program, lead security training and awareness initiatives and deliver security training.
* Manage 3rd party security assessments and conduct internal security reviews to ensure that our client is effectively managing security risk and ensuring the effectiveness of the IT security program.
* Participate in Systems development life cycle reviews of IT Projects to ensure security controls are adequately designed, implemented and tested in new system initiatives.
* Responsible for the escalation and risk management process if required. Responsible for the on-going development and maintenance of the IT Security compliance process.
* Provide leadership for development an on-going maintenance of IT Security metrics to ensure the effectiveness of the IT Security, including implementation of continuous improvement. Special Projects and other duties, as assigned.
Requirements / Exigences
* Demonstrated understanding of IT security principles, methodologies and practices.
* Thorough knowledge of IT security processes and how they are used in the systems development and operations process.
* Excellent analytical skills with critical attention to detail.
* Proven aptitude for quickly assimilating complex information.
* Demonstrated ability to negotiate and facilitate resolution of complex problems.
* Strong verbal and written communication skills including the ability to clearly present information to various audiences in both formal and information settings.
* Strong organizational and time management skills in order to effectively manage multiple priorities and competing demands with tight timelines.
* Strong customer service focus with the proven ability to develop and maintain effective relationships with team members and internal and external stakeholders; this includes excellent communication, interpersonal and problem solving skills.
* Demonstrated ability to influence all levels of staff through intuitive business insight, professional and personal credibility.
* Demonstrated ability to Web Content Filtering solution (preferably BlueCoat), Network Access Control solution (preferably Forescout), Vulnerability management solution (preferably McAfee Foundstone)
* Demonstrated knowledge of firewall technology (preferably CISCO), Windows Server and Desktop technology, and Active Directory and Microsoft GPO technologies.
* Demonstrated ability to use MS Office Applications (Outlook, Word, Excel, PowerPoint); Familiarity with SAP would be an asset.
 
 
Education and Experience:
* Degree or Diploma in Computer Science, Business Admin (MIS), Engineering, Mathematics, Information Technology or related discipline plus a minimum of 7 years' experience in Information Technology .
* minimum of 5 years' experience in IT security roles.
* CISSP or equivalent IT security designation
* IT Governance management experience
* Proficiency in project management.
* Experience leading teams to facilitate Security initiatives
* SCADA system security would be an asset.
* Experience working in a regulated environment, preferably with the electrical industry, would be an asset.
Job Type / Type d'emploi Full-Time / Temps plein
Start Date / Date de début 1/3/2012
Years Experience / Nombre d'années d'expérience 6-7