Technical Advisor, Security (various positions)

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

At the Public Service Commission of Canada, we foster a healthy, modern, diverse and inclusive workplace. Our efforts to create and maintain an outstanding workplace have been recognized. According to Forbes magazine, we are one of Canada’s Best Employers in 2021. Apply for a job today to join a great team.

The Information Technology Services Directorate (ITSD) of the Public Services Commission (PSC) is creating opportunities for people ready to positively impact and contribute to a top federal employer.

Opportunities include but are not limited to:

- Career development and learning opportunity
- Chance to develop new skills and competencies
- Innovate in how digital services are provided
- Influence the future direction of ITSD

If you value teamwork, collaboration, achieving results, providing high quality service to clients, and adaptability to change – this is for you!

N.B. : Working remotely is the current preferred working arrangement in light of the challenges presented by COVID-19.

Duties

Stream 1: IT Security Advisor – IT Security Risk Management

Under the supervision of the IT Security Manager and in collaboration with fellow colleagues, duties include:
- Maintaining and supporting the IT Security Assessment & Authorization (SA&A) program;
- Providing guidance in support of SA&A execution;
- Participating actively on SA&A monitoring and reporting activities;
- Providing IT security risk-based guidance through appropriate cost-effective timely assessments;
- Providing clear and concise guidance for each of the SA&A program’s families of security controls

Stream 2: IT Security Advisor – IT Security Operations

Under the supervision of the IT Security Manager, duties include:
- Taking the technical lead in support of delivering services as expected from an IT Security Operations Centre such as, but not limited to, active security events monitoring.
- Sharing knowledge with fellow colleagues in support of increasing overall maturity and becoming an active member of the Cyber Security Incident Response Team (CSIRT).
- Performing IT Security Forensics related activities when necessary.

Stream 3: IT Security Advisor – IT Security Awareness & Governance

Under the supervision of the IT Security Manager and in collaboration with fellow colleagues, duties include:
- Helping to establish and maintain an effective IT security awareness program with supporting governance in place. This program must remain aligned with Treasury Board Secretariat’s and Government of Canada IT Security Lead Agencies’ associated policy instruments and best practices.
- Actively participating or taking the lead in support of clear and concise communication of IT or cyber security related matters.

Intent of the process

The intent of this process is to staff one (1) position indeterminately.

A pool of qualified candidates may be created to fill future vacancies within the Public Service Commission (PSC) at the CS-03 group and level. Other government departments may use the pool upon the PSC's approval but only once the PSC has completed its appointments.

By applying to this process, you consent to your personal application-related information being shared with other government departments interested in staffing similar positions.

Positions to be filled: 1

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

EDUCATION - ALL STREAMS
ED1: Successful completion of two years of an acceptable post-secondary educational program in computer science, information technology, information management or another specialty relevant to the position to be staffed.

Notes:
1.Indeterminate period incumbents of positions in the CS group on May 10, 1999, who do not possess the education prescribed above, are deemed to meet the minimum education standards based on their education, training and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the CS group.
2.It is the recognized educational institution (e.g. community college, CÉGEP or university) that determines if the courses taken by a candidate correspond to two years of a post-secondary program at the institution.
3.At the manager’s discretion, an acceptable combination of education, training and/or experience may serve as an alternative to the minimum post-secondary education stated above. Whenever the minimum education is met using this alternative, it is met for the specific position only and must be re-assessed for other positions for which this alternative has been specified by the manager.

Degree equivalency

EXPERIENCE - ALL STREAMS
EX1: Recent* experience providing advice and guidance on security related policy, guidance, and procedures related to IT technologies.
EX2: Experience in technical writing and the preparation of documentation such as, but not limited to, policy instruments, best practices, guidance, operating procedures, options analysis, presentations, R&D findings, and related material.

*Recent refers to experience acquired within the last 3 years.
**Recent and significant refers to the breadth and depth of experience acquired over 3 consecutive years within the last 5 years. Breadth and depth is defined as a combination of time spent doing the activity, as well as type (range, scope, and complexity) of work performed.

The following will be applied / assessed at a later date (essential for the job)

Bilingual - Imperative (BBB/BBB)

Information on language requirements

Second Language Writing Skills Self-Assessment
In order to help you decide if you should apply to a bilingual position, an optional self-assessment of your writing skills in your second official language is available for you to take before completing your application.

For more information, please consult:
Unsupervised Internet Test of Second Language Writing Skills

EXPERIENCE - STREAM 1: IT Security Advisor – IT Security Risk Management
EX3: Recent and significant** experience in assessing IT security related risk and on
providing specialized advice and recommendations for the application of security controls.

EXPERIENCE - STREAM 2: IT Security Advisor – IT Security Operations
EX4: Recent and significant** experience in analyzing system logs to identify and address potential IT security related issues.

EXPERIENCE - STREAM 3: IT Security Advisor – IT Security Awareness & Governance
EX5: Recent* experience in creating and delivering training or information sessions.

COMPETENCIES - ALL STREAMS
COMP1: Ability to communicate effectively orally
COMP2: Ability to communicate effectively in writing
COMP3: Analytical Skills
COMP4: Working effectively with others
COMP5: Demonstrating integrity and respect
COMP6: Client Service
COMP7: Showing initiative and being action oriented

The following may be applied / assessed at a later date (may be needed for the job)

AED1: IT Security certifications from recognized certification bodies such as ISC2 (ex CISSP, CCSP), ISACA (ex CISA, CISM), SANS (ex GCIH, GSNA), CompTIA (ex Security+), EC-Council (ex CEH)

AED2: Industry certifications for Project Management

AEX1: Experience in the preparation, testing and evaluation of infrastructure /security controls of IT systems.

AEX2: Experience in the design, implementation, operations and maintenance of Cloud services and technologies including Software-As-a-Service (SaaS), Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS).

AEX3: Experience with collaboration tools including Microsoft Teams and integration / use of Office 365

AEX4: Experience with IT security incident related activities

AEX5: Experience with managing workloads and prioritizing associated tasks

AEX6: Experience with the Security Assessment and Authorization methodology based on ITSG-33.

AK1: Knowledge of Government of Canada policy instruments, the Policy on Government Security and the Directive on Security Management.

Conditions of employment

Secret security clearance

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

Candidates have the right to be assessed in the official language of their choice.

Candidates must clearly demonstrate in the screening questionnaire how they meet the education and experience criteria listed as essential and asset qualifications on the statement of merit criteria. In order to do so, the candidate must provide the information as part of their answer to the pertinent screening question, using concrete examples, in the textbox provided. The assessment board cannot and will not make any assumptions about your experience. Note that it is not sufficient to only state that the qualifications are met or to provide a listing of current or past responsibilities. Resumes may be used as a secondary source to validate the experience described in the experience questionnaire. Failure to clearly demonstrate in the questionnaire how you meet the education and experience, both essential and asset, where applicable, may result in the rejection of your application. Candidates will not be solicited for incomplete or missing information.

Communication for this process will be sent via email. It is the responsibility of the candidate to ensure accurate contact information is provided and updated as required. Candidates who apply to this selection process should include an email address that accepts email from unknown users (some email systems block these types of email).

Volume management mechanisms may be used.

All the information collected during the selection process, from the time of application until the end of the process, will be used to assess the candidates.

Asset qualification(s) may be applied in this selection process.

Written communication will be assessed via the candidate's job application.

You will be asked to provide a minimum of three (3) references.

Preference

Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.