Cyber Security Advisor-Risk Management

City of Calgary; Calgary; Hybrid; CAD 110,000 - 150,000; Full time

Job summary

The City of Calgary's Cyber Security Business Unit safeguards the information, technology, and operational systems that enable the delivery of services to Calgarians.

As a Cyber Security Advisor, you will provide authoritative guidance to leadership on opportunities, objectives and compliance with risk management, lead cross‑functional initiatives, maintain risk documentation, and support security governance; certifications and strong communication are essential.

Qualifications

• A diploma in Computer Science, Information Technology, Cyber Security, Business Administration, or a related field and at least 8 years of experience in cyber security, vulnerability or risk management, cyber security architecture, software engineering, or a related function, OR;
• A degree in Computer Science, Information Technology, Cyber Security, Business Administration, or a related field and at least 5 years of experience in cyber security, vulnerability or risk management, cyber security architecture, software engineering, or a related function.
• One or more recognized, current cybersecurity or risk management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) is required.

Responsibilities

• Provide authoritative advisory guidance to business leadership regarding opportunities, objectives, and compliance with The City's cyber security risk management program, including:
• Lead and coordinate resources and efforts from diverse City business units, technology teams, and external parties through the cyber security risk management process and multidisciplinary cyber security governance framework (without formal supervisory authority).
• Serve as the primary Cyber Security point of contact for cyber risk assessment activities, including testing readiness, maintaining cyber risk management documentation, compliance to standards and supporting related cyber security activities and assurance programs.
• Establish and deliver Key Performance Indicators (KPIs) and reporting for cyber security risk and control effectiveness; contribute to executive briefings and governance documentation that support informed, risk-based decision-making.

Skills

Cyber security

Risk management

Security architecture

Software engineering

Communication skills

Influence without authority

Education

Diploma in Computer Science / IT / Cyber Security / Business Administration or related field

Degree in Computer Science / IT / Cyber Security / Business Administration or related field

Job description

If you are committed to public service, enjoy collaborating with others, share our values and have a desire to learn and grow, join The City of Calgary. City employees deliver the services, run the programs and operate the facilities which make a difference in our community. We support work-life balance, promote physical and psychological safety, and offer competitive wages, pensions, and benefits. Together we make Calgary a great place to make a living, a great place to make a life.

The City is committed to fostering a respectful, inclusive and equitable workplace which is representative of the community we serve. We welcome those who have demonstrated a commitment to upholding the values of equity, diversity, inclusion, anti-racism and reconciliation. Applications are encouraged from members of groups that are historically disadvantaged and underrepresented. Accommodations are available during the hiring process, upon request.

The City of Calgary's Cyber Security Business Unit safeguards the information, technology, and operational systems that enable the delivery of services to Calgarians.

As a Cyber Security Advisor, you will be responsible for authoritative and strategic advisory services pertaining to the cyber security of assets including data, information, processes and technology systems. You will drive cyber security risk management outcomes while contributing more broadly to the City's Cyber Security mandate and roadmap. Primary duties include:

• Provide authoritative advisory guidance to business leadership regarding opportunities, objectives, and compliance with The City's cyber security risk management program, including:
• Cyber security risk and threat identification and assessment activities;
• Control evaluations and recommendations;
• Analysis of potential impact areas including operations and service delivery, reputation and citizen trust, financial and regulatory.
• Lead and coordinate resources and efforts from diverse City business units, technology teams, and external parties through the cyber security risk management process and multidisciplinary cyber security governance framework (without formal supervisory authority).
• Serve as the primary Cyber Security point of contact for cyber risk assessment activities, including testing readiness, maintaining cyber risk management documentation, compliance to standards and supporting related cyber security activities and assurance programs.
• Provide advisory guidance and interpretation of cyber security requirements, standards, controls, risks and threats to inform:
• Business adoption of Cyber Security architecture and design patterns, monitoring of cyber security events and exposures, incident response and operational continuity processes;
• Development, implementation, modification and change management of systems and data that enable critical City services;
• Procurements, new business initiatives and/or transformations that introduce or modify cyber risk exposure.
• Champion a strong security-conscious culture through cyber awareness, communication and role-specific training initiatives, ensuring clear calls to action, alignment to risk priorities, and leading by example.
• Establish and deliver Key Performance Indicators (KPIs) and reporting for cyber security risk and control effectiveness; contribute to executive briefings and governance documentation that support informed, risk-based decision-making.

Qualifications

• A diploma in Computer Science, Information Technology, Cyber Security, Business Administration, or a related field and at least 8 years of experience in cyber security, vulnerability or risk management, cyber security architecture, software engineering, or a related function, OR;
• A degree in Computer Science, Information Technology, Cyber Security, Business Administration, or a related field and at least 5 years of experience in cyber security, vulnerability or risk management, cyber security architecture, software engineering, or a related function.
• One or more recognized, current cybersecurity or risk management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) is required.
• Demonstrated experience at a senior level in a minimum of two cyber security domains (for example: security risk management, security architecture, data security, security operations, industrial control systems security, identity and access management, application security/SDLC) is required.
• Global Industrial Cyber Security Professional (GICSP), Certified Cloud Security Professional (CCSP), Certificate of Cloud Security (CCSK) certifications and knowledge of ISA/IEC 62443 standards will be considered an asset.
• Demonstrated experience in continuous monitoring, automated logging, and cloud-native environments is an asset.
• Demonstrated Project Management skills will also be an asset.
• Experience in complex, public sector, or highly regulated environments will be considered an asset.
• Success in this position requires highly developed communication and relationship building skills.
• You have a well-developed ability to influence without authority and build a shared vision for security outcomes.

Working Conditions:

Occasional coordination with vendors, project teams, or other interested parties outside of regular business hours may be required to support assessments, deadlines, or time-sensitive advisory activities.

Pre-employment Requirements

• A security clearance will be conducted.
• Successful applicants must provide proof of qualifications.

Workstyle

• This position may be eligible to work from home for at least part of the time as one of several flexible work options available to City employees. These arrangements depend on the operational requirements of the role, employee suitability, and are subject to change based on operational needs and corporate direction.