Manager, Security and Compliance - Jobs in Victoria, BC

Job Description

What will you doAs the successful candidate, you will effectively develop, lead, and manage the information security program within the IT Division. Your knowledge of the frameworks and mitigation strategies for effective enterprise risk management are vital, but also your ability to translate them into consumable concepts, as you will be presenting them to various audiences.Your primary focus will be to carry out two core functions for the division:Overseeing the security operations through management of our security analysts and vendor partners; andEstablishing a risk-based enterprise security stance through policy, architecture and training processes.Secondary tasks will include the selection of appropriate security solutions, oversight of any vulnerability audits and assessments, and management of compliance with security policies and standards.Ideally, we are looking for someone with strong experience in the following areas:Strategy & PlanningAcquisition & DeploymentOperational ManagementJob Requirements:What education will you need to be successfulWe love lifelong Learners and recommend the following mix of education or certifications to be successful in conjunction with relevant experience:College diploma or university degree in computer science or a related field and/or 5 years equivalent work experienceOne or more of the following certifications:GIAC Security Essentials CertificationGIAC Security Leadership CertificationISACA Certified Information Security ManagerISACA Risk and Information Systems Control CertificationMicrosoft Certified Systems Engineer: Security(ISC)2 SCCP(ISC)2 CISSP(ISC)2 ISSAPAdvanced training and/or certificates in information security audit and project management would be an assetExperience5 years’ experience supervising IT security professionals5 years’ experience managing and/or directing an IT security operationExtensive experience in enterprise security architecture designExtensive experience in enterprise security policies, practices, and document creationExperience implementing an established information security framework (examples include ISO 27000 Series, NIST Cybersecurity Framework, NIST SP 800-53, PCI DSS)Experience with performing information security auditsExperience with Payment Card Industry Data Security Standard (PCI DSS) compliance preferredExcellent understanding of project management principlesExperience in designing and delivering employee security awareness training would be an assetExperience in developing Business Continuity Plans and Disaster Recovery Plans would be an assetTo view the full job description for this role please see the attached.Additional InformationThe position requires the completion of a Criminal Record Check Or Vulnerable Sector SearchTesting and assessments may be included as part of the recruitment processAn eligibility list may be established for future vacanciesIf you have a disability which requires an accommodation during any stage of our recruitment process, please let us know how we can assist youBC Transit is committed to the principles of employment equityCandidates must be legally eligible to work in CanadaBC Transit OffersLife InsuranceEmployee Family Assistance Program (EFAP)Vacation (based on the terms outlined in the appropriate collective agreement or exempt policy handbook)Extended Health BenefitsPension PlanHealth and Wellness Spending accountEmployee fitness centre, at both the Victoria and Langford depots (not currently open due to COVID-19)A complimentary BC Transit bus pass, plus taxable dependant passesCareer development and advancement opportunitiesSocial ClubEmployee Recognition Program – Recognizing Excellent Values (REV)We believe that diversity of thought and experience fuels innovation. In keeping with this belief, we do not discriminate on any basis. We encourage all qualified candidates to apply. Should you require any accommodation or have questions, please let us know.While we welcome all applications, we will only respond directly to those who are short-listed for a role. Thanks in advance for your understanding and wishing you all the best in your career journey.