About the Role
The Security Analyst plays a key role in supporting the delivery of personnel screening initiatives and contributes to security awareness and partnership programs. As an ambassador for the organization’s security function, the incumbent plays a key role in promoting a culture of security and awareness for all employees. This is a high visibility role that requires regular communication and collaboration with internal and external stakeholders.
Responsibilities
- Develop, deliver and maintain the Payments Canada Information Security Awareness Programs.
- Develop bulletins, alerts, and awareness material to advise employees of their role and responsibility for information security.
- Develop and deliver security training.
- Ensure Information Security Awareness compliance requirements are met.
- Develop, deliver and maintain security awareness material relevant to new and ongoing security threats.
- Mitigate insider threat risk through security awareness and education, including role-based training.
- Implement and operate Payments Canada personnel security and screening program.
- Disseminate requirements, conduct compliance audits, and provide operational support for screening.
- Liaise with service providers and conduct insider threat analysis/mitigation.
- Engage with the Government of Canada Industry Security Program.
- Conduct comprehensive risk assessments as part of the personnel screening process.
- Participate in project teams by performing information security functions.
- Provide advisory services to stakeholders for security requirements implementation.
- Assist in the maintenance of Payments Canada’s Information Security policies, standards and procedures.
- Maintain related documentation.
- Perform and/or coordinate information security audits.
- Develop associated reports and findings from audits.
- Participate in third party audits.
- Protect and safeguard sensitive information.
- Categorize systems based on pre-established criteria.
- Assign impact levels to systems and information.
- Select and implement appropriate security controls, and test for effectiveness.
- Respond appropriately when security breaches are discovered.
- Attend various meetings as a representative of the Security team.
- Communicate and collaborate with employees of other Payments Canada divisions and user groups.
- Provide information, advice and solutions on information security and risk management issues.
- Attend courses, seminars, webinars, and pursue technical reading and research annually.
- Remain current with security trends, threats and vulnerabilities, mitigation practices, and new products.
Requirements
- Post-secondary education in Computer Science, Information Systems or related field, or equivalent work experience.
- Minimum of three (3) years of experience in an information security or information risk management capacity.
- Experience in the field of Information Security, including cryptographic controls, authentication, security policies and practices, security reviews and vulnerability assessments, and threat and risk assessments.
- Ability to work outside of regular working hours based on operational requirements.
- Ability to participate in on-call rotation.
- Government of Canada Reliability Clearance or eligibility to obtain.
- Ability to work in person at the Payments Canada Ottawa office as needed.
Skills
- Knowledge of cryptographic, authentication, and access controls for network, database, application, and operating systems.
- Knowledge of industry security standards, laws, and regulations including PIPEDA, NIST/CSE, and CICA Evaluation standards.
- Experience in the use of ISO 27001 control framework and the software development and maintenance process.
- Energetic, self-motivated, quick-learner and able to assume responsibility with minimal supervision.
- High degree of initiative and flexibility.
- Strong communication and organizational skills.
- Strong relationship management skills.
- Strong interpersonal and teamwork skills.
Location
- Ottawa
Work Type
- Hybrid (remote/office)
Experience Level
- 3 years
Education Level
- Post-secondary education in Computer Science, Information Systems or related field, or equivalent work experience.
Salary/Compensations
- $83,300
Benefits
- Flexible, hybrid (remote/office) environment.
- Competitive compensation package, including annual variable bonus and defined contribution pension plan with employer matching percentage (if eligible).
- Comprehensive health and dental benefit coverage, including mental health coverage, life insurance and a health spending account for you and your dependents (Permanent and temporary employees with contracts 12 months and over).
- Paid time off: minimum four weeks paid vacation, sick and personal days, December holiday shutdown and cultural holiday observance days.
- 26 weeks of paid maternity and parental leave top-up (if eligible)
- Rewards and recognition program.
- Access to office gym facilities.
- Internal and external professional development opportunities.
- Fun team and organizational events.
- Monthly all staff forums led by our Executive Leadership Team.
About the Company
- Payments Canada is at the forefront of the Canadian payment ecosystem, making payments easier, smarter and safer for all Canadians.
- We own and operate payment systems that process hundreds of billions of dollars’ worth of payment transactions every business day.
- We convene ecosystem participants to discuss their multiple and diverse interests and ideas and to navigate industry-level challenges.
- Our values are: Inspire trust, build community and enable change.
- Our culture fosters authenticity, collaboration, innovation and development.
- We empower one another, make meaningful contributions that not only impact the organization, but our country!
- We develop and nurture meaningful connections that drive innovation in our ecosystem.
Equal Opportunity
- At Payments Canada, we are dedicated to fair, transparent and inclusive hiring.
- We are an equal opportunity employer and value diversity at our company.
- Our recruitment process uses automated tools, but not generative AI, to objectively screen and evaluate applications and confirm that a candidate’s qualifications meet job requirements.
- Our trained recruitment professionals and hiring managers always make the final hiring decisions.
- We are committed to making everyone feel they can be themselves and thrive at work.
- We will continue to build on a foundation of respect and appreciation for diversity in all forms and collectively create an inclusive and equitable culture where our differences are valued.
- We are committed to employment equity and actively encourage applications from women, Aboriginal people, persons with disabilities and visible minorities.
- If selected for an interview, please advise us if you require special accommodation by emailing hrinfo@payments.ca.
- Preference will be given to Canadian citizens and permanent residents.
