Bilingual Senior Specialist, IT Security Operations

Canada Mortgage and Housing Corporation; Ottawa; Hybrid; CAD 104,000 - 130,000; Full time

Benefits offered by this job

Annual paid vacation

Performance incentive

Group insurance plan

Training and mentorship

Job summary

Canada Mortgage and Housing Corporation (CMHC) is seeking a bilingual Senior Specialist, IT Security Operations to lead and execute the IT security operations strategy in alignment with CMHC's security programs and objectives.

You will oversee IT Security Operations performance, coordinate with service providers, and ensure data in IT systems is protected by effective controls. The role emphasizes governance, risk indicators, and collaboration with senior leadership.

Qualifications

• Undergraduate degree in IT, information security, or information management.
• IT security certification is required.
• 7+ years of information security experience with leadership in security operations.
• Experience building and guiding a security program roadmap.

Responsibilities

• Identify and implement controls to manage information risks using security frameworks (ISO 27001/2; ITSG-33; NIST).
• Oversee IT Security Operations and coordinate with service providers; track KPIs/KRIs.
• Provide expert advice to senior management on security risk across CMHC.
• Review procedures for policy compliance and support third parties in evaluating controls.
• Conduct focused risk assessments of services and technologies with business partners.
• Develop and monitor risk/performance indicators for the security program.

Skills

Security governance

Risk management

Incident response

Executive advisory

Stakeholder engagement

Education

Undergraduate degree in IT/Security

IT security certification

Tools

SIEM

Firewalls

Vulnerability management

IAM

Job description

Select how often (in days) to receive an alert:

Bilingual Senior Specialist, IT Security Operations

Position Status:Permanent Full Time

Position Type:Hybrid

Travel Requirement:Limited

Language Skill Levels (Read/Write/Speak):BBB

Security Requirement:Secret

Salary:Our salaries generally range from $104180.28to $130225.36and are based on qualifications and experience.

About CMHC

The work you do and the work we do together matters. We come to work every day with a common purpose: to contribute to a well-functioning housing system.

At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements. We thrive on collaboration, connecting across CMHC and involving the right people to get our work done. Our leadership style is guided by trust, where our leaders favour an adaptive approach based on the needs of their teams.

Join us and be part of a team that's committed to making a real difference and be part of something meaningful.

Our commitment to diversity, equity, and inclusion

We're committed to advancing employment equity and fostering an inclusive workplace. To reflect the diversity of Canada’s population, we encourage applications from women, Indigenous Peoples, persons with disabilities, 2SLGBTQI+ individuals, veterans, and racialized peoples. We also welcome applications from all individuals eligible to work in Canada.

We are also committed to advancing reconciliation with Indigenous Peoples and supporting the meaningful inclusion of First Nations, Inuit, and Métis voices and priorities. While this position is hybrid requiring some in-office presence, a work from home arrangement may be considered for First Nations candidates on reserve or Indigenous candidates that reside further than 125KM from a CMHC office.

We’ve got the purpose, the people and the perks you need for a fulfilling career. Here’s the comprehensive and generous benefits you get when you’re a permanent employee:

• Annual paid vacation.
• Annual individual performance incentive.
• Comprehensive group insurance plan to support your well-being from day one.
• Support towards your personal and professional growth with training, mentorship and more.
• While positions at CMHC require some in-office presence, alternative work arrangements may be considered for Indigenous candidates.

About the role

Join the Information Technology team, in the Bilingual Senior Specialist, IT Security Operations position. In this role, you will be responsible of implementing and executing the IT Security Operations strategy in line with the objectives of security programs and CMHC’s needs as well as safeguarding the interest of CMHC’s overall security environment.

You will provide oversight and governance for IT Security Operations and continuously evaluate overall effectiveness of the service by tracking and reporting key performance and key risk indicators of the overall service and material components of the service.

This role is accountable for the outcomes and the performance of IT Security Operations, including the performance of service providers or partners, for CMHC. You will ensure that data in IT systems are adequately protected through the effective operations of IT security devices and/or controls.

What you will do:

• Identify and facilitate the implementation of appropriate controls to effectively manage information risks as needed and reference organizationally relevant security frameworks (ISO 27001/2; ITSG-33; NIST).
• Perform oversight and work with service provider to manage day to day IT Security Operations including: maintaining an up-to-date inventory of security controls; providing the requirements for and ensuring the onboarding of new IT projects to security operations; ensuring the scheduling and performance of maintenance activities; evaluating the continued effectiveness of the implemented controls through the establishment and monitoring of key performance or key risk indicators; proposing recommendations for improvement.
• Provide expert level advice to senior management to guide and influence the management of security risks across the corporation, as well as complex consultative advice to relevant stakeholders.
• Review security procedures to ensure compliance with security policy and guidelines and support IT service providers and other relevant 3rd parties in identifying and evaluating the effectiveness of security controls.
• Perform focused information risk assessments of existing or new services and technologies along with business counterparts.
• Develop, gather and track key risk and performance indicators to track overall risk status and the information security program performance, and support the development or evolution of the program.
• Identify opportunities to improve the security risk posture, the security program and in how to proactively mitigate risks or improve security controls at CMHC, whether they are policy related controls, awareness, or other means.
• Stay abreast of industry risk trends and evaluate applicability to the organization and recommend opportunities for improved risk mitigation.

What you should have:

• An undergraduate degree in a related field such as information technology, information security, or information management. The successful completion of an IT security certification is required. A combination of education and/or experience will be considered.
• At least seven (7) years of relevant experience in information security, including work experience in leading complex security operations project.
• Experience and/or knowledge of establishing and implementing a security program roadmap of initiatives.
• Demonstrated experience leading project teams and coaching team members.
• Extensive experience providing strategic advice and recommendations to senior leadership teams and committees.
• Demonstrated experience engaging and influencing internal and external stakeholders.
• Experience managing and tracking budgets as well as building and evolving performance metrics.
• Ability to plan and manage multiple concurrent priorities and work under tight time constraints.

It would be great if you also had:

• Experience managing or working with security operations centers or IT operations is an asset.
• Experience with common and frequent security tools and devices such as firewalls, anti-malware, security incident and event management (SIEM), and vulnerability management is an asset.

Posting closing date: Note, the competition will remain active until filled.

Standby and Call Back duties are a requirement of this position and will be subject to CMHC policies, including the Standby and Call Back Pay Procedure.

What happens after you apply

We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process . If you are selected for an interview or testing, please advise us if you require an accommodation.

If you applied before and you were not successful don’t worry – we're always posting new positions, so don’t hesitate to give it another shot. We’re excited to see what you bring to the table this time around!