Manager, Security Operations Center

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

Duties

Manage the development, implementation and evolution of approved strategic and operational plans and business processes governing Security Operations, ensuring compliance with Government of Canada (GoC) and OSFI’s security legislative and policy frameworks. This includes management of the security infrastructure to include product installation, configuration, lifecycle/patch management, tuning, maintenance, and capacity and performance reviews. The Manager will ensure process monitoring, event analysis, incident response and reporting. Upon identification of a security threat or receipt of an alert, the manager will control the receipt, review, and escalation until resolution.

Manage all Infrastructure security related staff. As a key member of OSFI’s security team, the Manager will work closely with the Cyber Security Directorate (CSD), Service Desk and any outsourced security providers to ensure appropriate measures for containment, response, and recovery strategies during data loss or breach events. The Manager will participate on various committees or working groups as directed and provide briefings as needed.

Duties include development of operational procedures, technical standards, Service Level Agreements (SLA) and other measures will occur. Initiates, plans and manages security infrastructure-related projects, including the change management process for the deployment of new or changed security infrastructure.

Work environment

The Office of the Superintendent of Financial Institutions (OSFI) is an independent agency of the Government of Canada, established in 1987 to contribute to the safety and soundness of the Canadian financial system. OSFI supervises and regulates federally registered banks and insurers, trust and loan companies, as well as private pension plans subject to federal oversight.

What OSFI offers
OSFI is a separate agency that offers a competitive salary and eligibility for performance pay annually. People are the foundation of our organization. You will become part of a diverse community that acknowledges that everyone has varied experience and fosters an environment where communication and teamwork amplify our effectiveness.

Mandate
The work you do at OSFI matters. Your efforts contribute to the safety and soundness of the financial sector. A strong financial sector promotes competition, and benefits all Canadians.

Learning & Development
Our organization understands that ongoing learning and development is critical and necessary, and must evolve with developments in the Financial Sector. Learning and Development is a key component of our Human Capital Strategy.

Community & Culture
We strive to create a working environment that allows employees to work to their fullest potential. We strive to promote employee wellbeing, including a focus on balancing work and personal needs. Subject to operational requirements, we offer opportunities for flexible working arrangements.

Benefits
As a Federal Government Agency, OSFI offers a number of competitive benefits to its employees, including a Defined Benefit Pension Plan, maternity and parental leave benefits, vacation (4 weeks), personal and family leave days.

Intent of the process

This selection process may be used to establish a pool of qualified candidates, which could be used to staff similar or identical positions with various linguistic profiles and requirements, security profiles and various tenures.

Positions to be filled: 1

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

ESSENTIAL QUALIFICATIONS:

Education:
- Successful completion of an acceptable post-secondary educational program in computer science, information technology, information management or security management specialty relevant to the position to be staffed.
OR
- An equivalent combination of education, training and/or experience.

Degree equivalency

Experience:
- Extensive* experience in IT security.
- Significant** experience handling cyber security incidents.
- Significant** experience installing, configuring, tuning and operating cybersecurity devices (e.g., firewalls, IPS / IDS, monitoring tools, vulnerability management tools).
- Significant** supervisory experience in IT with a minimum of three direct reports.

*Extensive means the depth and breadth of experience that is normally acquired by performing the tasks continuously over a period of 5 years or more.
**Significant means the depth and breadth of experience that is normally acquired by performing the tasks over a period of 3 years or more.

If you possess any of the following, your application must also clearly explain how you meet it (other qualifications)

ASSET QUALIFICATIONS:

Education:
- Relevant security professional certifications such as CISSP, CIP, CEH, Security+, GSEC, CCSP, CISM, CISA, OSCP, CCIE, and/or PCNSE certification.
- Relevant professional certifications such PMP, Prince2, ITIL and/or TOGAF certification.

Degree equivalency

Experience:
- Proven experience in a Security Operations Center (e.g. SIEM, firewalls, anti-virus).
- Experience leading discussions and working effectively with various management levels.
- Experience with and strong ability to prioritize and execute tasks and make sound decisions in emergency situations.
- Experience in designing, updating, coordinating and/or implementing or applying ITIL principles and practices and frameworks.
- Experience delivering or assisting in the delivery of Service Level Agreements (SLA) and/or Service Level Objectives (SLO).

The following will be applied / assessed at a later date (essential for the job)

English essential

Information on language requirements

ESSENTIAL QUALIFICATIONS:

Knowledge:
- Expert knowledge applying principles of cyber security using cyber security products (e.g., SIEM, IPS/IDS, web/proxy gateway).
- Expert knowledge of the theories and principles of IT related to IT operations, Systems Development Life-Cycle (SDLC), agile methodologies, and change management processes.
- Expert knowledge of patch management.

Competencies:
- Collaboration
- Professional Judgement
- Critical Thinking
- Impact and Influence
- Building Business Relationships
- Excellent Oral Communication Skills
- Excellent Written Communication Skills

The following may be applied / assessed at a later date (may be needed for the job)

ASSET QUALIFICATIONS:

Knowledge:
- Knowledge of frameworks such as NIST, CIS Controls, ISF Benchmark, ISO2700x.
- Knowledge of Government of Canada’s Policy on Government Security.
- Knowledge of Cloud technologies and security tools.
- Knowledge of strategic and operational planning, leadership, cost/benefit, risk and issues analyses required to manage Security Operations.

Competencies:
- Impact and Influence
- Building Business Relationships

Abilities:
- Ability to work under pressure.

ORGANIZATIONAL NEEDS:
- In order to meet the organization’s employment equity objectives in support of a diversified workforce, ‘right fit’ selection for this position may be made from among qualified candidates who self-declare as being Persons with a disability or Aboriginal peoples.

OPERATIONAL REQUIREMENTS:
- Willingness and ability to travel domestically on short notice.
- Willingness and ability to work overtime.

Conditions of employment

Reliability Status security clearance

Ability to work remotely from home with access to reliable high-speed internet.

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

In order for your application to be considered, you must submit a completed questionnaire. You will be required to demonstrate how you meet the education and experience criteria (essential and asset) for the initial screening, in answering online screening questions. It is NOT sufficient to only state that the qualifications are met or to provide a listing of current or past responsibilities. Rather, you must clearly demonstrate HOW, WHEN and WHERE the qualification was met through substantiation by examples. Information on your described education and experience provided in the screening questions should be supported by your résumé. Failure to provide the above information in the format required may result in your application being rejected from the process.

By providing the required information in the suggested format, you will ensure that the assessors are in a position to assess the depth, complexity and scope of your experience.

A written examination may be administered.

An interview may be administered.

Reference checks may be sought.

The ability to communicate effectively in writing may be assessed using the candidate's application, as well as through the evaluation process.

Please note that OSFI has offices located in Ottawa, Toronto, Montreal, and Vancouver. If you are screened in, you may be required to travel to one of these locations to complete assessment (exam, interview, etc.).

Candidates invited to an interview will be required to bring proof of their education credentials, in the form of a diploma or official transcript (original documents only). Candidates with foreign credentials must provide proof of Canadian equivalency. Consult the Canadian Information Centre for International Credentials for further information at http://www.cicic.ca/.

Candidates must meet all of the essential qualifications to be appointed to a position. A candidate may be appointed to a position even though he/she does not meet any or all of the asset qualifications. However, meeting these criteria is desirable and may be a deciding factor in choosing the person to be appointed.

Depending on the requirements of the position(s) being staffed from this process, for current or future vacancies, any or all of the asset qualifications may be applied at any time during the staffing process, including screening. Candidates may be contacted and assessed against these criteria at any time during this process.

Achieving a representative workforce has been identified as an organizational need and may be applied in this appointment process. If this criterion is used, only those who have indicated that they are members of the specified designated group(s) will be considered.

A top down selection of candidates may be used in the determination of those to be given further consideration in the assessment process.

Persons are entitled to participate in the appointment process in the official language of their choice. Applicants are asked to indicate their preferred official language in their application.

For this selection process, our intention is to communicate with applicants by e-mail (including sending invitations for written tests and interviews). Applicants who apply to this selection process must include in their application a valid e-mail address and make sure this address is functional at all times and accepts messages from unknown users.

All job applications must be submitted through the Government of Canada public service jobs website. Do not email, fax, or mail hard copy documents as these will not be accepted. To submit an application online, please click on the "apply now" button.

If you do not have Internet access in your home or through friends, relatives or neighbours, here are some suggested locations: campus career centers, libraries, community centers, Internet cafés and Services Canada. You may also call 1-800-O-Canada (1-800-622-6232), or TTY 1-800-926-9105, for information on the nearest public Internet access locations.

Persons with a disability preventing them from applying on-line are asked to contact 1-800-645-5605.

Applicants with disabilities: If you require special accommodation at any stage in the selection process, including technical aid to ensure an equitable assessment of your qualifications, please inform us by sending an e-mail to the following address: .

OSFI's Ottawa location is downtown with easy access to shopping, restaurants, gyms, financial institutions and more. The building is less than a five minute walk from LRT and STO stops.

As a Separate Agency, the Office of the Superintendent of Financial Institutions (OSFI) appoints employees in accordance with the Public Service Employment Act (PSEA). OSFI is named in Schedule V of the Financial Administration Act (FAA) and it offers the same pension and benefits plans as the core Federal Public Service. In addition to this, OSFI employees obtain a minimum of 4 weeks of vacation leave per year, earn a competitive salary, and are eligible for an annual performance bonus.

Preference

Preference will be given to veterans and to Canadian citizens, in that order, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.