Bilingual Senior Specialist, IT Security Operations

Job Requisition ID: 12626  

Position Status: Permanent Full Time 

Position Type: Hybrid 

 Office Location: Ottawa (ON); Montreal (QC); Toronto (ON)

Travel Requirement: Limited 

Language Designation: Bilingual 

Language Skill Levels (Read/Write/Speak): BBB 

Security Requirement:  Secret 

Salary: Our salaries generally range from $ 104180.28 to $ 130225.36 and are based on qualifications and experience. 

About CMHC

The work you do and the work we do together matters. We come to work every day with a common purpose: to contribute to a well-functioning housing system.

At CMHC, we hold ourselves accountable for our results and support our colleagues in their achievements. We thrive on collaboration, connecting across CMHC and involving the right people to get our work done. Our leadership style is guided by trust, where our leaders favour an adaptive approach based on the needs of their teams.

Join us and be part of a team that's committed to making a real difference and be part of something meaningful.

Our commitment to diversity, equity, and inclusion

We're committed to advancing employment equity and fostering an inclusive workplace. To reflect the diversity of Canada’s population, we encourage applications from women, Indigenous Peoples, persons with disabilities, 2SLGBTQI+ individuals, veterans, and racialized peoples. We also welcome applications from all individuals eligible to work in Canada.

We are also committed to advancing reconciliation with Indigenous Peoples and supporting the meaningful inclusion of First Nations, Inuit, and Métis voices and priorities. While this position is hybrid requiring some in-office presence, a work from home arrangement may be considered for First Nations candidates on reserve or Indigenous candidates that reside further than 125KM from a CMHC office.

Learn more about our commitment to diversity and inclusion 

What’s in it for you

We’ve got the purpose, the people and the perks you need for a fulfilling career. Here’s the comprehensive and generous benefits you get when you’re a permanent employee:

• Annual paid vacation.
• Annual individual performance incentive.
• Defined benefit pension plan.
• Comprehensive group insurance plan to support your well-being from day one.
• Support towards your personal and professional growth with training, mentorship and more. 
• While positions at CMHC require some in-office presence, alternative work arrangements may be considered for Indigenous candidates. 

About the role

Join the Information Technology team, in the Bilingual Senior Specialist, IT Security Operations position. In this role, you will be responsible of implementing and executing the IT Security Operations strategy in line with the objectives of security programs and CMHC’s needs as well as safeguarding the interest of CMHC’s overall security environment.

You will provide oversight and governance for IT Security Operations and continuously evaluate overall effectiveness of the service by tracking and reporting key performance and key risk indicators of the overall service and material components of the service.

This role is accountable for the outcomes and the performance of IT Security Operations, including the performance of service providers or partners, for CMHC. You will ensure that data in IT systems are adequately protected through the effective operations of IT security devices and/or controls.

What you will do:

• Identify and facilitate the implementation of appropriate controls to effectively manage information risks as needed and reference organizationally relevant security frameworks (ISO 27001/2; ITSG-33; NIST).
• Perform oversight and work with service provider to manage day to day IT Security Operations including: maintaining an up-to-date inventory of security controls; providing the requirements for and ensuring the onboarding of new IT projects to security operations; ensuring the scheduling and performance of maintenance activities; evaluating the continued effectiveness of the implemented controls through the establishment and monitoring of key performance or key risk indicators; proposing recommendations for improvement.
• Provide expert level advice to senior management to guide and influence the management of security risks across the corporation, as well as complex consultative advice to relevant stakeholders.
• Review security procedures to ensure compliance with security policy and guidelines and support IT service providers and other relevant 3rd parties in identifying and evaluating the effectiveness of security controls.
• Perform focused information risk assessments of existing or new services and technologies along with business counterparts.
• Develop, gather and track key risk and performance indicators to track overall risk status and the information security program performance, and support the development or evolution of the program.
• Identify opportunities to improve the security risk posture, the security program and in how to proactively mitigate risks or improve security controls at CMHC, whether they are policy related controls, awareness, or other means.
• Stay abreast of industry risk trends and evaluate applicability to the organization and recommend opportunities for improved risk mitigation.

What you should have:

• An undergraduate degree in a related field such as information technology, information security, or information management. The successful completion of an IT security certification is required. A combination of education and/or experience will be considered.
• At least seven (7) years of relevant experience in information security, including work experience in leading complex security operations project.
• Experience and/or knowledge of establishing and implementing a security program roadmap of initiatives.
• Demonstrated experience leading project teams and coaching team members.
• Extensive experience providing strategic advice and recommendations to senior leadership teams and committees.
• Demonstrated experience engaging and influencing internal and external stakeholders.
• Experience managing and tracking budgets as well as building and evolving performance metrics.
• Ability to plan and manage multiple concurrent priorities and work under tight time constraints.
• Bilingual (French, English).

It would be great if you also had:

• Experience managing or working with security operations centers or IT operations is an asset.
• Experience with common and frequent security tools and devices such as firewalls, anti-malware, security incident and event management (SIEM), and vulnerability management is an asset.

Posting closing date:  Note, the competition will remain active until filled.

Standby and Call Back duties are a requirement of this position and will be subject to CMHC policies, including the Standby and Call Back Pay Procedure.

What happens after you apply

We know that applying for a new job can be both exciting and daunting, and we appreciate your effort. Learn more about our hiring process.  If you are selected for an interview or testing, please advise us if you require an accommodation.

If you applied before and you were not successful don’t worry – we're always posting new positions, so don’t hesitate to give it another shot. We’re excited to see what you bring to the table this time around!