Senior Information Security Officer

City of Burnaby; Burnaby; On-site; CAD 142,000 - 159,000; Full time

Job summary

A municipal government in Burnaby is seeking a Senior Information Security Officer to lead their cybersecurity initiatives. The ideal candidate will have significant experience in cybersecurity management, including risk assessment and incident response. Responsibilities include developing policies to protect information assets and ensuring alignment with risk management strategies. Candidates should have a degree in a relevant field and experience in local government operations. Competitive salary of $142,501 - $158,352 per year offered.

Qualifications

• Master's or Bachelor's degree in Computer Science, Information Security, Business Administration or related field.
• Minimum seven years of recent experience in cybersecurity with five years in management, preferably in municipal government.
• Expert knowledge of cybersecurity frameworks, principles, and practices.

Responsibilities

• Identify, evaluate and report on cybersecurity risks to information assets.
• Determine cybersecurity approach and operating model aligned with City’s risk management.
• Implement policies for cybersecurity to protect information assets.

Skills

Cybersecurity risk assessment

Team leadership

Stakeholder management

Incident response planning

Cybersecurity awareness training

Education

Master’s or Bachelor’s degree in Computer Science or related field

Job description

Senior Information Security Officer

Competition No: 2025-076

Duration: Regular Full Time

Salary: $142,501 - 158,352 per year with $9,492 annual stipend

Last Updated: 10/29/25

Overview

We have an exciting opportunity for you to join our team as a Senior Information Security Officer! Reporting to the Director of Planning and Governance, the Senior Information Security Officer (SISO) is a technology leader that establishes, directs, implements and maintains the City’s enterprise cybersecurity program.

Responsibilities

• Identify, evaluate and report on legal, regulatory, IT and cybersecurity risk to information assets.
• Determine the cybersecurity approach and operating model in consultation with stakeholders and align with the City’s risk management approach.
• Implement practices that meet policies and standards for cybersecurity to protect information assets and associated technology, applications, systems, infrastructure and processes.
• Serve as the process owner of second‑line assurance activities related to confidentiality, integrity and availability of information owned or processed by the City, including periodic security audits.
• Coordinate the development and implementation of incident response plans and procedures to ensure business‑critical services are recovered in the event of a security event.
• Direct the creation of a targeted cybersecurity awareness training program for staff, contractors and approved system users.
• Develop and oversee effective resilience policies and standards to align with the enterprise resilience program goals, acknowledging that components supporting primary business processes may be outside the City’s perimeter.
• Liaise with external agencies, such as law enforcement and advisory bodies, to maintain a strong security posture and stay abreast of relevant threats.

Qualifications

• Master’s or Bachelor’s degree in Computer Science, Information Security, Business Administration or related field.
• Minimum of seven years of recent experience in the field of cybersecurity with five years of management level experience preferably in municipal government.
• Expert knowledge of frameworks, principles, practices, techniques, legislation and methods applicable to the work.
• Considerable knowledge of City rules, regulations, policies, procedures and operations related to the work performed.
• Ability to lead a team of direct and functional reports, recruit, manage performance, train, coach, investigate and administer discipline.
• Ability to support a wide variety of technology projects while exercising sound judgement and discretion under tight deadlines and constant change.
• Skill to develop, communicate, implement and evaluate information security initiatives while handling sensitive, contentious, complex and highly confidential issues involving multiple stakeholders with skill, tact and diplomacy.
• Leading investigations, analyzing impacts, making recommendations on Information Security incidents and events and use of various software applications.

The closing date for this position has been extended until filled. New applications are welcome!

Equal Opportunity Employer

Visit us at www.burnaby.ca