System Administrator III - IT Security Officer B062-26

Legal Aid BC; Vancouver; On-site; CAD 82,000 - 93,000; Full time

Job summary

Legal Aid BC is seeking a SYSTEM ADMINISTRATOR III – IT SECURITY OFFICER in Vancouver to design, implement, and oversee cloud-based security solutions, ensuring secure business operations.

The role covers monitoring, patching, risk assessments, and incident response, with responsibilities spanning privacy reviews, security standards, and governance across IT systems.

Qualifications

• Bachelor’s degree in computer science, information systems, or equivalent education or work experience.
• 3+ years of prior relevant experience as outlined in the rated requirements.
• Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification.
• Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent) at start date OR an equivalent combination of education and experience.
• An equivalent combination of education and experience.

Responsibilities

• Plan, install and monitor cyber security systems, including enterprise security on computers, servers, networks and cloud technologies.
• Develop and maintain security standards, policies, and procedures, including access control and governance.
• Lead risk assessments, audits, and risk registers aligned to frameworks like NIST and ISO 27001.
• Provide advisory services on security policies, governance, and compliance to business units and project teams.
• Monitor incidents, support incident response, and coordinate remediation actions with stakeholders.
• Develop and test disaster recovery plans and incident response playbooks.

Skills

Security concepts

TCP/IP knowledge

Incident response

Vulnerability scanning

SIEM familiarity

Problem solving

Multi-tasking

Education

Bachelor’s degree in CS/IS or equivalent

Tools

SIEM platform

Security certifications (GIAC/CISSP)

DoD-8570 IAT Level 2

Job description

LEGAL AID BC

POSTING

TO: LABC STAFF (cc: BCGEU)

FROM: HUMAN RESOURCES DEPARTMENT

POSITION: SYSTEM ADMINISTRATOR III – IT SECURITY OFFICER

ONE FULL-TIME REGULAR POSITION – VANCOUVER

COMPETITION NO: B062-26

DATE POSTED: November 10, 2026

CLOSING DATE: November 24, 2026

STARTING DATE: ASAP

SALARY: Job Class 23 (Market Adjusted) ($81,542 - $93,249) *under review*

HOURS OF WORK: 35 hours per week, Monday to Friday

This position has the option to participate in a modified work week schedule (37.5 hours/week) Monday to Friday, with the extra hours worked as one earned day off taken once every three-week scheduled cycle.

Legal Aid BC is dedicated to promoting equity, diversity, and inclusion in all aspects of our work. We welcome individuals from diverse backgrounds and experiences to contribute to the future of legal aid. We care deeply about the culture we are building and are looking for staff members who not only excel in their respective areas but are also passionate about supporting the people we serve and each other.

PRIMARY FUNCTION:

To provide design, implementation, integration, and oversight of the organizations cloud-based security solutions and systems, with an emphasis on securely facilitating business operations.

The following job duties are illustrative examples and shall not be construed as an exhaustive description of all the work requirements that may be inherent in the job.

DUTIES:

PLAN, INSTALL AND MONITOR CYBER SECURITY SYSTEMS:

1. Implement and maintain enterprise business systems and maintain stable performance levels on all systems;
2. Implement and monitor security on computers, servers, networks, and cloud technologies;
3. Implement and maintain system security, including proactively assessing and applying patches and upgrades which will strengthen organization security measures;
4. Safeguard information system assets by identifying and solving potential and actual security problems, including abnormalities, and reporting issues;
5. Ensure data and information breaches are reported and managed;
6. Develop and implement security standards, guidelines, policies and procedures, including defining access privileges, control structures, and resources;
7. Proactively identify gaps in security strategies, policies, practices or standards;
8. Implement security improvements by assessing current situation, evaluating trends, and anticipating requirements;
9. Ensure Privacy Impact Assessments are performed and reviewed by General Counsel’s office for new applications, and changes to existing systems;
10. Support Cyber Security projects that drive efficiency and effectiveness of cyber security;
11. Develop, test, and maintain disaster recovery plans and procedures;
12. Develop and maintain Incident response plan and various playbooks;
13. Perform Compliance monitoring, and IT security risks and vulnerability assessments, and supports security audits including periodic audits to determine security violations and inefficiencies;
14. Conduct various risk, control, maturity, and compliance assessments based on established security frameworks including but not limited to NIST CSF, CIS, ISO 27001, ISF, CSA N290.7, NERC-CIP, etc.;
15. Perform Third party Cyber risk assessments by working with vendors and ensure adherence to Cyber Security Terms and Conditions using a Risk based approach;
16. Lead the examination of security events that are not part of the standard operation of service and which cause or may cause an interruption to or a reduction in the quality of IT service;
17. Meet with business stakeholders to identify top security risks. Evaluate and perform business level cyber risk assessments using established risk methodology and provide recommendations for improving security posture and resolving identified risk and issues;
18. Develop and maintain risk registers, risk management framework and, risk acceptance forms to provide oversight for the cyber security program;
19. Assist in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for cyber security to report on cyber program efficiency by using KPIs and KRIs;
20. Provide advisory service to business units, project teams and external consultants on security policies, procedures, best practices, governance, risk, and compliance; and,
21. Participate in meetings where security matters are discussed.
22. Monitor and investigate reported incidents, including suspicious and phishing emails submitted by staff, and perform or coordinate appropriate remediation and follow-up actions through resolution.

2. PROVIDE COMPUTER AND CYBER SECURITY TRAINING SUPPORT FOR USERS:

1. Provide support related to hardware, software, application programs and complex network communications by performing duties such as diagnosing and resolving problems;
2. Respond to technical problems with microcomputers, minicomputers and networked computers and find solutions to minimize downtime;
3. Work with IT department and communications team to release security news updates and bulletins related to Cyber Security to facilitate and encourage the adoption of proper information security processes, procedures and practices for employees;
4. Develop Security awareness training and assist in conducting phishing simulation campaigns and associated trainings; and,
5. Provide training to users on internal network and answer employee questions.

3. PERFORM OTHER RELATED DUTIES:

1. Liaise with outside consultants and other organizations to give information about the LSS network and to ensure that their projects work with LSS systems;
2. Evaluate existing and emerging technologies, identify requirements, analyze alternative products, prepare business cases, and make recommendations;
3. Monitor and analyze computer network traffic and performance;
4. Keep supervisor informed by preparing performance reports; communicating system status;
5. Provide end-user support and assistance, and one-on-one training;
6. Develop procedures for computer and network backup and recovery; and
7. Perform other related duties as required.

QUALIFICATIONS:

Basic requirements

1. Bachelor’s degree in computer science, Information Systems, or equivalent education or work experience
2. 3+ years of prior relevant experience as outlined in the rated requirements
3. Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification
4. Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent) at start date OR
5. an equivalent combination of education and experience

Rated Requirements

1. Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
2. Hands‑on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations
3. Experience with vulnerability scanning solutions
4. Familiarity with the DOD Information Assurance Vulnerability Management program.
5. Familiarity with the NIST Cybersecurity framework
6. Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host Based Forensics, Network Forensics, and RSA Security
7. In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform
8. Understanding of mobile technology and OS (i.e. Android iOS, Windows), and VMware technology,
9. knowledge of server architecture
10. knowledge of best practices in system security including firewalls, intrusion detection, and anti‑virus solutions
11. knowledge of interaction and relationships of computer hardware and software
12. knowledge of the installation configuration and maintenance of current Microsoft computer operating system software
13. knowledge of software/hardware required for operating secured computer networks e.g. modems, concentrators, hubs, file servers, cabling and connectivity standards
14. knowledge of applications software, and their configuration on a network
15. knowledge of the IT marketplace and emerging technologies 
16. ability to multi‑task
17. ability to cope with heavy volume of work
18. ability to identify and analyse and solve  problems
19. ability to work well under pressure and meet  deadlines
20. ability to work independently and