Senior Security Risk Analyst

Location

Ottawa, ON | Canada

Job description

Senior Security Risk Analyst

Take a central role

The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment. 

Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.

With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers:

Find out more about the next steps in our Recruitment process . 

Did you know? 

The Security Risk Oversight and Policy (SROP) team is the second line of defense in the Bank’s overall enterprise security risk management universe. The team partners with business stakeholders to oversee risk management practices across all Bank departments. It oversees information security risks, cyber and technology risks, physical and personnel security risks. 

What you will do

The Senior Security Risk Analyst works on the SROP team within the Bank’s Corporate Security Service (CSS) department and performs security risk management activities relating to all the Bank’s critical assets. Following a defined enterprise security risk management approach, the analyst leads security risk engagements and assists Bank business groups in identifying and assessing key risks and controls and recommending appropriate safeguards to protect the confidentiality, integrity, and availability of Bank assets. The incumbent works closely with first line stakeholders and provides guidance based on the results of security risk assessments, security policy, and security testing. 

As a Senior Security Risk Analyst, you will: 

• develop an in-depth understanding of the Bank’s core functions, business processes, critical assets, and systems which are subject to security oversight activities. Based on this understanding, the senior security risk analyst prioritizes and assesses the effectiveness of security controls and enables departments to deliver on their core mandate, adds value by ensuring secure and safe business operations 
• plan, lead, and conduct security oversight engagements including developing oversight engagement plans, in-depth assessment of security risks and controls, development of security risk registers and writing of security posture reports in clear and concise business language 
• test the effectiveness of security controls using several testing methodologies including tabletop exercises, site visits and red teaming exercises 
• provide security advisory services to business stakeholders on completeness and effectiveness of their security controls 

What you need to succeed 

• understanding of security risks and controls in one or more domains of cyber security, physical security and/or information security 
• excellent written and oral communication skills, including experience with presenting to a broad variety of stakeholders 
• business relationship and/or stakeholder management skills including experience with a client-centric approach to service delivery 
• project management experience including planning tasks, managing timelines, and reporting on status 
• ability to work well independently as well as on a team 
• problem-solving, critical thinking, and analytical skills 

Nice-to-have

• Knowledge of risk management frameworks such as NIST and ISO 
• Knowledge of and experience with Government of Canada information technology security policies, directives, standards and guidelines (e.g., Policy on Government Security, management of information technology security, ITSG-22/33/38, Directive on Departmental Security Management) 
• Knowledge of and experience with Government of Canada Harmonized Threat and Risk Assessment (HTRA) methodology and other security industry standards (e.g., ISO 27001, NIST 800 series, ITSGs, ITIL, PCI) 
• Knowledge of enterprise risk management approaches and practices, including the three lines of defence model 

Your education and experience 

• A university degree in business, computer science/engineering, risk management or security. 
• At least one valid security and/or related certification (e.g. CISSP, CISA, PSP etc.). 
• A minimum of six years of progressively more responsible and relevant experience in a combination of security policy analysis, communications, audit and compliance, business analysis, security analysis and/or information technology security, physical and personnel security, travel security, broad infrastructure technology (network, storage, server, etc.), applications and software security, and threat and security risk assessment, working in a public or private security function. 
• An equivalent combination of education and experience will be considered. 

What you need to know

• Language requirement: English and French essential (bilingual) with a minimum starting level of functional (level 4) in second official language. Training may be provided to help reach the required level of fully functional (level 5) in second official language.
• Priority will be given to Canadian citizens and permanent residents
• Security level required: Be eligible to obtain Top Secret 
• Relocation assistance may be provided, if required
• Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.

Hybrid Work Model #LI-Hybrid

The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a substantial part of each month as part of the Bank`s hybrid work model, and they are expected on site at the Bank location a minimum of eight days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office.

What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider . 

• Salaries are based on qualifications and experience and typically range from $90,275 to $112,845 (job grade 17)
• The Bank offers an incentive for successfully meeting expectations at 7 to 10% of your base salary. The Bank offers performance pay for those who exceed expectations (15% of your base salary).. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
• Flexible and comprehensive benefits so you can choose the level of health, dental disability and life and/or accident insurance coverage that meets your needs
• Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
• Indexed, defined-benefit pension #LI-POST

We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.

Job tags

Salary