Advisor, IT Security and Risk Management - 24110G.ITQ.0005

Toronto Community Housing; Toronto; Hybrid; CAD 107,000 - 118,000; Full time

Job summary

Toronto Community Housing Corporation is seeking an Advisor, IT Security and Risk Management to join our Information Technology Services division in Toronto. You will lead security assessments, help design enterprise security architecture, and develop security policies to strengthen our cyber posture.

With 5+ years in information security, you’ll work with stakeholders at all levels, ensure MFIPPA compliance, and drive continuous improvement of security controls across in-house and procured

Qualifications

• Provide security assessments on in-house developed products and procured solutions.
• Participate in planning and design of enterprise security architecture.
• Develop information security standards, policies and procedures.
• Ensure MFIPPA compliance and information privacy controls.
• Coordinate security incident response and risk assessments.

Responsibilities

• Provide security assessments on our in-house developed products as well as procured products.
• Participate in the planning and design of enterprise security architecture, under the direction of the IT Security Manager, where appropriate.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate.
• Research, define evaluation criteria and recommend information security controls and procedures.
• Develop information security standards, policies and procedures.
• Establish information security metrics, gathering data and preparing reports.
• Participate in the information security incident response process; and champion and communicate the future state of TCHC’s cyber security program.
• Exercise knowledge of MFIPPA, regulations, policies, procedures, interpretations and apply applicable orders.

Skills

Security assessments

Enterprise security

Information risk management

Incident response

MFIPPA knowledge

Access control

Security metrics

Education

Bachelor's degree in Information Technology or related field

Security certifications (CEH/ECSA/GSEC/GCIA/CCSP)

Job description

About Toronto Community Housing Corporation

Toronto Community Housing Corporation (“TCHC”) is the largest social housing provider in Canada and the second largest in North America. We are wholly owned by the City of Toronto and operate in a non-profit manner. TCHC provides homes to over 41,000 low and moderate-income households in 88 of Toronto's neighbourhoods, with 93,000 tenants from many different backgrounds with a diversity in age, education, language, mental and physical ability, religion, ethnicity and race. We are an essential part of the City of Toronto's fabric and social system.

Our over 2,000 employees work to achieve our vision of quality homes in vibrant communities where people are proud to live and work.

Vacancy Type

Full-time Permanent

Salary/Hourly Range

$107,358 - $118,094

Work Details (Days/Hours)

Monday – Friday 36.25 hours per week

Hybrid Eligible

Yes

Affiliation

Non-Union: Management/Exempt

Division and Department

Information Technology Services (ITS)

Location

729 Petrolia Road, Toronto

Number Of Vacancies

1

Existing/New Job

Existing

Grade

07

Vacancy Status

Existing

Candidate List Or Eligibility List

Candidate List

Make a difference

Are you passionate about Cyber Security and Information Risk Management and interested in having a positive impact on your local community? If so, the Advisor, IT Security and Risk Management position at Toronto Community Housing may be for you!

This position will have two main focuses: Cyber Security and Information Risk Management. As a key member of the Information Security & Risk team, the Advisor will be responsible for a broad range of information security work while operating with a high level of autonomy, engaging with stakeholders at all levels within the organization, and contributing to the continuous improvement of TCHC’s cyber security posture. Additionally, the Advisor will be the primary point of contact within their own specific area of expertise.

What You’ll Do

• Provide security assessments on our in-house developed products as well as procured products
• Participate in the planning and design of enterprise security architecture, under the direction of the IT Security Manager, where appropriate
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate
• Research, define evaluation criteria and recommend information security controls and procedures
• Develop information security standards, policies and procedures
• Establish information security metrics, gathering data and preparing reports
• Participate in the information security incident response process; and champion and communicate the future state of TCHC’s (Toronto Community Housing’s) cyber security program
• Exercise knowledge of legislation (MFIPPA), regulations, policies, procedures, interpretations and apply applicable orders of Information and Privacy Commissioner of Ontario

Investigations And Audits

• Under the direction of the Manager, IT Security and Risk, participate in investigations into problematic activity
• Conducting audit and providing recommendations to the Manager to address the gaps from investigation and remediation
• In collaboration with the Manager, IT Security and Risk, participate in the design and execution of vulnerability assessments, penetration tests, and security audits and proactively conducts IT security risk and vulnerability assessments for new and existing IT infrastructure elements (network/systems/applications/services)
• Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and provides relevant feedback to the manager for appropriate resolution
• Security and threat risk assessments for projects and security evaluations for tools and solutions
• Product reviews to identify potential vulnerabilities and risks
• Participate in the information security incident response process
• Manage access control for existing information technology and provide feedback on the development of access control methodology for new information technology solutions

Reporting And Compliance Control

• Process and track of Freedom of Information (FOI) requests and ensure TCHC’s compliance with MFIPPA
• Provide input on FOI policies and procedures and update the framework of compliance
• Participate in and provide support to the manager with relevant feedback related to information security standards, policies and procedures
• Through stakeholder engagement, ensure proper documentation standards are adhered to; advise Manager on any recommended documentation standards updated, based on industry best practices
• Gather and collect data and provide support in preparing reports for Cyber security and Risk
• Under the guidance of the Manager, IT Security and Risk, proactively review IT operational processes, identify potential security concerns and risks and recommend mitigation measures

Training And Change Management

• Participate in the development of the annual IT Security Operational Plan, IT Security and Risk Strategy, and roadmap execution
• Champion and communicate the future state of TCHC’s cyber security program
• Promote security awareness and good data protection practices to safeguard TCHC’s information assets
• Provide relevant feedback to Manager, IT Security and Risk to help shape strategic technical direction and standards for the organization
• Serve as a source of trusted information security expertise for various programs and projects
• Support projects by providing governance, and operational delivery of information security services
• Participate in the development of and conduct information security training and other related user education initiatives
• Participate in efforts to identify and evaluate project requirements, as they relate to Cyber Security and Information Risk Management. Provide feedback on the development of applications, test and implement said applications. Sustain information technology solutions to meet business objectives and client needs

What You’ll Need

• An undergraduate degree (or equivalent experience) in Information Technology, Computer Science, Engineering, Business or related degree is required. Information security specific coursework is an asset
• One or more security certifications in good standing that may include the following or industry equivalents
• CEH: Certified Ethical Hacker, ECSA: EC-Council Certified Security Analyst, GSEC / GCIH / GCIA: GIAC Security Certifications, CompTIA CSA+, CCSP, CCSK
• Other industry and product certifications (e.g. MCSE, CCNA, and ITIL) are preferred.
• 5+ years of broad and progressive information security experience in an enterprise environment including: security program development, security risk and vulnerability analyses, system design and architecture required.
• Minimum of 3 years in a senior information security position in a medium to large organization
• Experience working on solutions that support verticals such as government, finance, human resources and information management preferred.
• Demonstrable experience with conducting security reviews, implementing information security recommendations, analyzing technical controls and applying security control standards required
• Demonstrable experience presenting analyses and presentations to both internal and external audiences
• Previous experience with application development security tools would be considered an asset

Our commitment to equity, diversity and inclusion

We are committed to providing equal opportunity to all employees and strive to create a diverse workplace that reflects the cultural mosaic of our great city and the communities we serve. We recognize the value that comes from different viewpoints, unique experiences and diverse perspectives of our employees, who bring fresh, new ideas to our business. Diversity plays a key role in our ability to deliver on our mission to provide clean, safe, well-maintained, affordable homes for tenants.

TCHC is committed to diversity and inclusion within its community and encourages applications from Indigenous peoples, racialized persons/persons of colour, persons with disabilities, women, 2SLGBTQ+ persons, and others who can help us provide vibrant communities and make our city a great place to live. In an effort to ensure access to information for people with disabilities, we have noticed that some screen readers do not function properly with our job portal. If you are a person with a disability and are experiencing issues with our job portal and would like access to our job postings in an alternative format, please email your request to our People and Culture Division at [e-mail].

Accessibility for applicants

Toronto Community Housing is committed to equity in employment. Our goal is a diverse, inclusive, and barrier-free workplace that reflects the communities we serve.

We will provide reasonable accommodation to applicants with disabilities at all stages of the hiring process in accordance with the Ontario Human Rights Code, the Accessibility for Ontarians with Disabilities Act, 2005, and Toronto Community Housing’s Accessibility Policy.

If you are a person with a disability and need the job posting in an alternative format or any other accessible accommodations during the hiring process, please email your request to our People & Culture department at [e-mail] or call our accessible accommodations line at (416) 981 - 4119. Please refer to the job requisition number when you contact us.

We use AI technology through the use of pre-screening questions to assist in the screening process.