Senior Manager (RE-07), Technology Risk Division

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

Toronto-based position. There is a possibility that the successful candidate may be able to work remotely from one of the OSFI offices across Canada; the one closest to their place of residence. Working remotely will require travel to Toronto.

Duties

The Senior Manager provides specialty technology and cyber risk expertise in identifying FRFI-specific risks, industry-wide risks and/or sector specific trends and developments related to technology and cyber risks that may impact a FRFI’s operational resilience. The candidate’s expertise includes technology crisis reporting, expertise in emerging technologies and threats/risks associated with it, cyber incident response and in-depth understanding and assessments of threats to any process or function that involves systems, data, infrastructure, networks, cyber security and digital technology impacting DTIs, insurers and pension plans.

Work environment

Who we are:
The Office of the Superintendent of Financial Institutions (OSFI) is an independent agency of the Government of Canada, established in 1987 to contribute to the safety and soundness of the Canadian financial system. OSFI supervises and regulates federally registered banks and insurers, trust and loan companies, as well as private pension plans subject to federal oversight.

What OSFI offers:
OSFI is a separate agency that offers a competitive salary and eligibility for performance pay annually. People are the foundation of our organisation. You will become part of a diverse community that acknowledges everyone has varied experience and fosters an environment where communication and teamwork amplify our effectiveness. Working at OSFI offers the following:

Mandate:
The work you do at OSFI matters. Your efforts contribute to the safety and soundness of the Canadian Financial Sector. A strong financial sector promotes competition, and benefits all Canadians.

Learning & Development:
Our organisation understands that ongoing learning and development is critical and necessary, and must evolve with developments in the Financial Sector. Learning and Development is a component of our Human Capital Strategy.

Community & Culture:
We strive to create a working environment that allows employees to work to their fullest potential. We strive to promote employee wellbeing, including a focus on balancing work and personal needs. Where available, we offer opportunities for flexible working arrangements.

Benefits:
As a Federal Government Agency, OSFI offers a number of competitive benefits to its employees, including a Defined Benefit Pension Plan, maternity and parental leave benefits, vacation (4 weeks), personal and family leave days.

Intent of the process

This selection process may be used to establish a pool of qualified candidates, which could be used to staff similar or identical positions with various linguistic profiles and requirements, security profiles and various tenures.

Positions to be filled: Number to be determined

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

ESSENTIAL EDUCATION
● A university degree with specialization in information technology, information security, computer science, engineering, commerce, business, finance, economics, mathematics OR a combination of education, experience and/or training in the fields of Cloud computing, AI/ML, Robotic Process Automation, Technology Threat Modeling, Incident Response or Threat Intelligence.
● One of the following designations/certifications: Certified Cloud Security Professional (CCSP), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT) or other relevant designations.

Degree equivalency

ESSENTIAL EXPERIENCE
● Recent and significant experience related to technology risk management and/or cyber risk in the in two or more of the following areas:
Business or Technology Operations, Technology Incubation, Emerging Technology, Threat Intelligence, Cyber Incident Response system/data analysis, risk management, or a related control function (i.e. information security, business continuity management, operational risk or internal/external audit e.g. application audit, cyber security audit, IT governance, operational risk audit).
● Significant experience making presentations to Senior Management.
● Experience in leading and managing projects.

The following will be applied / assessed at a later date (essential for the job)

English essential

Information on language requirements

ESSENTIAL KNOWLEDGE
● Knowledge of current and/or emerging technology risks, issues or trends facing financial institutions.
● Knowledge of current and emerging business and environmental trends/issues as they relate to the financial services industry.

ESSENTIAL COMPETENCIES
● Developing Myself
● Professional Judgement
● Innovation
● Critical Thinking
● Excellent Written Communication Skills
● Excellent Oral Communication Skills

The following may be applied / assessed at a later date (may be needed for the job)

In addition to the Essential Qualifications identified above, please provide details if you possess one or more of the following Asset Education and Asset Experience criteria identified below.

ASSET EDUCATION
● A relevant post-graduate degree.
● Two of the following designations/certifications: Certified Cloud Security Professional (CCSP), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), GIAC Certified Threat Intelligence (GCTI), Certified Risk and Information Systems Controls (CRISC), Offensive Security Certified Professional (OSCP) or other relevant designations.

Degree equivalency

ASSET EXPERIENCE
You may be required to meet one or a combination of any of these asset experience criteria, and therefore, if you possess it you should provide details in your resume.

● Experience in analysing fintech products (i.e. machine learning, artificial intelligence) relating to key risk areas for financial institutions.
● Experience in supervising, examining or auditing financial institutions.
● Recent and significant experience related to technology risk management and/or cyber risk in the financial services industry* in three of the following areas:
Business or Technology Operations, system/data analysis, risk management, or a related control function (i.e. information security, business continuity management, operational risk or internal/external audit e.g. application audit, cyber security audit, IT governance, operational risk audit).

*Financial services industry includes experience working in a financial institution, including banks, insurance companies, pension funds, wealth management firms, and accounting firms (dealing with audits), as well as government departments that directly deal with the supervision and regulation of these institutions, or other relevant areas.

ASSET KNOWLEDGE
● Knowledge of current and/or emerging information security risk/ information risk in financial institutions.
● Knowledge of IT risk management practices and IT controls.
● Knowledge of technology risk, innovative FinTech products and/or cyber risk as they relate to the financial services industry.
● Knowledge of the banking and/or insurance sectors including key products and functions, and the information and techniques used in their measurement and management.
● Comprehensive understanding of OSFI’s Supervisory Framework.

ASSET COMPETENCIES
● Impact and Influence
● Results Orientation
● Collaboration
● Change Leadership
● Working as a Team
● Building Business Relationships

ORGANIZATIONAL NEEDS
● In order to meet the organization’s employment equity objectives in support of a diversified workforce, ‘right fit’ selection for this position may be made from among qualified candidates who self-declare as being Persons with a disability or Aboriginal peoples.

OPERATIONAL REQUIREMENTS
● Some out-of-town travel may be required.

Conditions of employment

Reliability Status security clearance

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

Internal employees of OSFI at the same group and level may be considered and offered a deployment or assignment before considering other applicants.

For this selection process, it is our intention to communicate with candidates via email. Candidates must include a valid email address in their application. It is the candidate’s responsibility to ensure accurate information is provided and updated as required. As a result you must update your personal information on your Public Service Resourcing System profile if it changes.

RESUMES:
Applicants must clearly demonstrate using sufficient details, how they meet the education and experience factors listed under the essential qualifications, as well as any of the asset qualifications that are applicable, including timelines of when this experience was gained (please indicate month and year). Lack of DETAILS may result in your application being rejected as the Assessment Board may have insufficient information to determine whether you meet the qualifications.

SCREENING QUESTIONS (if applicable):
It is the responsibility of the candidate to clearly outline that they meet each of the screening criteria (i.e. Education and Experience Qualifications, both Essential and Assets) by RESPONDING TO THE SCREENING QUESTIONS IN THE ONLINE APPLICATION. Please note that it is not sufficient to only state that the requirement is met or to provide a listing of current responsibilities, rather the candidate must provide concrete examples that illustrate how they meet the requirement. Your resume will be used to validate the answers provided; therefore, it should also contain sufficient details regarding your education and experience.

REFERENCE CHECKS/PERFORMANCE REVIEWS:
As part of the assessment, reference checks may be sought and candidates may be required to submit their performance reviews. For internal candidates of the Public Service, the Assessment Committee reserves the right to contact the internal candidates’ current manager(s).

Your application may be used to assess written communication.

The following options may be used at any stage of the selection process in the determination of those to be given further consideration: random selection, top down selection, or meeting any asset qualifications.

An assignment/secondment or an acting appointment requires approval of your supervisor.

OSFI is a separate agency with its own classification and compensation system. OSFI's staffing is subject to the Public Service Employment Act (PSEA).

The client organization will accept applications on-line only. All job applications must therefore be submitted through the Public Service Resourcing System. To submit an application on-line, please select the button 'Apply online' below. Persons with disabilities preventing them from applying on-line are asked to contact 1-800-645-5605.

Applicants with disabilities: If you require special accommodation at any stage in the selection process, including technical aid to ensure an equitable assessment of your qualifications, please inform us by sending an e-mail to the following address .

Preference

Preference will be given to veterans and to Canadian citizens, in that order, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.