IT Security & Incident Response Lead

Saskatoon Police; Saskatoon; On-site; CAD 92,000 - 108,000; Full time

Job summary

Saskatoon Police Service is seeking an Information Security leader to develop and manage security documents, coordinate the IT Incident Response Plan, and ensure integration of security controls across IT programs. The role requires 4–6 years of information security management experience and relevant certifications.

The successful candidate will oversee security incident response, deployment of security solutions, and ongoing monitoring while interfacing with the Director of IT.

Qualifications

• Degree in Computer Science, Information Systems or recognized equivalent.
• Four to six years’ continuous experience in information security management activities, e.g. security and risk management, asset security, security architecture and engineering, communications and network security, identity and access management, security assessment and testing, and security operations, etc.
• Possession of any of the following certifications: CISSP, CISM, CISA Recognized Certifications, SSCP, CCSP.
• Strong understanding of IP, TCP/IP, and other network administration protocols; experience using SIEM tools.
• Regulatory compliance experience such as the Local Authority Freedom of Information and Protection of Privacy Act, PIPEDA, NERC-CIP would be an asset.
• Knowledge of cybersecurity frameworks (NIST CSF, NIST SP800-53, ITSG-33, CIS, ISO 27001).
• Knowledge of RCMP Cybercrime Operational Framework and National Police Services Network Secured Communications Policy would be an asset.
• Demonstrated ability to support cloud and on-prem environments.
• Knowledge of operating systems, database management systems, communications and network technologies.
• Ability to plan, direct and monitor budgets, projects, and processes.
• Ability to communicate effectively verbally and in writing.
• Ability to pass the Saskatoon Police Service security clearance process.

Responsibilities

• Leads the creation of Saskatoon Police Service security documents (policies, standards, baselines, guidelines, audit, and procedures) under the direction of the Director of IT, where appropriate.
• Develops, tests and coordinates the cybersecurity components of the Saskatoon Police Service IT Critical Incident Response Plan to ensure the continued availability of the information technology infrastructure and operations, including disaster recovery.
• Provides input into annual and quarterly IT planning and budgeting processes, under the direction of the Director of IT, where appropriate.
• Manages Information Security Program projects and tasks and provides input into IT projects to ensure integration of security controls and activities within the lifecycle.
• Leads the technical response in the detection, analysis, containment and remediation process for all security incidents.
• Performs the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions.
• Maintains up-to-date knowledge of the IT security industry including awareness of new or revised security solutions and threat vectors.
• Monitors all in-place security solutions for efficient and appropriate operations.
• Reviews logs and reports, interprets results, develops and executes the appropriate action plans to resolve identified issues.
• Participates in investigations into problematic activity.
• Participates in vulnerability assessments, penetration tests, and security audits.
• Prepares capital and operating budget requests, participates in divisional annual budget planning and provides budget reports as required.
• Prepares and presents reports as required.
• Performs other related duties as assigned.

Skills

Security management

Incident response

Network security

Security architecture

Asset security

Identity and access management

Vulnerability assessment

Budget planning

Communication skills

Education

Degree in Computer Science or Information Systems

Tools

SIEM tools

Job description

Saskatoon Police Service is seeking an Information Security leader to develop and manage security documents, coordinate the IT Incident Response Plan, and ensure integration of security controls across IT programs. The role requires 4–6 years of information security management experience and relevant certifications.

The successful candidate will oversee security incident response, deployment of security solutions, and ongoing monitoring while interfacing with the Director of IT.