Cyber Security Analyst (RE-05), Cyber Security Division

Important messages

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Assessment accommodation

POSITION LOCATION:
This position is located in Ottawa.

As a result of the global pandemic, OSFI employees are currently working from home. Should the current telework environment no longer apply, and contingent on the operating model adopted by OSFI, you may be required to report into and work onsite from the Ottawa Office. As our telework arrangements are evolving, we encourage you to apply.

VACCINATION REQUIREMENT:
On October 6, 2021, the Government of Canada announced details of its plans to require vaccination across the federal public service.
• https://www.canada.ca/en/treasury-board-secretariat/news/2021/10/backgrounder-covid-19-vaccine-requirement-for-the-federal-workforce.html

As per OSFI’s Policy on COVID-19 Vaccination, employees must attest to their vaccination status. The requirement for employees to be fully vaccinated applies whether they are teleworking, working remotely or working on-site. This is a condition of employment and it applies to indeterminate (permanent), determinate (term), casual, and student hiring. Should you reach the point in the selection process where it is necessary to verify terms and conditions of employment, then the hiring manager or a human resources representative will contact you in order to complete an attestation.

EMPLOYMENT EQUITY:
Achieving a representative and diverse workforce has been identified as an organizational need for OSFI and may be applied at any time during this appointment process. If this criterion is used, only those who have indicated that they are members of the specified designated group(s) will be considered. As such, first consideration for an appointment may be given to candidates who self-declare as belonging to one of the four designated employment equity groups (Persons with a disability, Aboriginal people, Members of a Visible Minority, or Women).

In order to self-declare, please ensure to check off the appropriate box within the online application under the Employment Equity section. We encourage you to consult theses links to learn more about employment equity and self-declaration:
• https://www.canada.ca/en/public-service-commission/jobs/services/gc-jobs/employment-equity.html
• https://www.canada.ca/en/public-service-commission/jobs/services/gc-jobs/applying-government-canada-jobs-how-to-apply.html#EE

Duties

Under the supervision of the Manager, Cyber Security, the Cyber Security Analyst provides security architecture guidance and requirements during design and development of new and changing cloud and on-premise systems and networks. Works closely with the design and development team including developers, other architects, and network and security engineers to ensure security architecture has been implemented into the solution to reduce and mitigate risk. Oversees the secure design and implementation of cloud and on-premise systems and applications. Provides input and support to cyber risk management specialists throughout the Security Assessment and Authorization (SAA) process.

The primary duties include:
- Establishes security architecture requirements and validates application, system and network security configurations against industry best practices such as NIST 800-53, ISO 27001/2, OWASP Top 10, GC Guardrails, and CSE Top 10 and recommends changes to enhance security and reduce risk where applicable.
- Provides security architecture advice as the cyber security representative in application, system, and network projects.
- Translates OSFI /GoC Cyber Security policy instruments as they relate to security architecture, design, implementation, and risk management into security architecture requirements and works with project stakeholders to ensure those requirements have been implemented into the design.

Work environment

The Office of the Superintendent of Financial Institutions (OSFI) is an independent agency of the Government of Canada, established in 1987 to contribute to the safety and soundness of the Canadian financial system. OSFI supervises and regulates federally registered banks and insurers, trust and loan companies, as well as private pension plans subject to federal oversight.

What OSFI offers
OSFI is a separate agency that offers a competitive salary and eligibility for performance pay annually. People are the foundation of our organization. You will become part of a diverse community that acknowledges that everyone has varied experience and fosters an environment where communication and teamwork amplify our effectiveness.

Working at OSFI offers the following:

Mandate
The work you do at OSFI matters. Your efforts contribute to the safety and soundness of the financial sector. A strong financial sector promotes competition, and benefits all Canadians.

Learning & Development
Our organization understands that ongoing learning and development is critical and necessary, and must evolve with developments in the Financial Sector. Learning and Development is a key component of our Human Capital Strategy.

Community & Culture
We strive to create a working environment that allows employees to work to their fullest potential. We strive to promote employee wellbeing, including a focus on balancing work and personal needs. Subject to operational requirements, we offer opportunities for flexible working arrangements.

Benefits
As a Federal Government Agency, OSFI offers a number of competitive benefits to its employees, including a Defined Benefit Pension Plan, maternity and parental leave benefits, vacation (4 weeks), personal and family leave days.

Intent of the process

The immediate need is to staff one position with a language requirement of bilingual imperative BBB/BBB on an indeterminate basis.

A pool of qualified or partially qualified candidates may be created to staff similar or identical positions with various linguistic profiles and requirements, security profiles and/or various tenures within the Office of the Superintendent of Financial Institutions, which may vary according to the position being staffed.

Positions to be filled: 1

Information you must provide

Your résumé.

In order to be considered, your application must clearly explain how you meet the following (essential qualifications)

ESSENTIAL EDUCATION:
- Successful completion of two years of an acceptable post-secondary educational program in computer science, information technology, cyber security or another specialty relevant to the position to be staffed OR an equivalent combination of education, training and/or experience.

Degree equivalency

ESSENTIAL EXPERIENCE:
- Minimum 5 years’ experience working in an organization with 750 users or greater, performing cyber security related functions.
- Recent* and significant** experience in at least one of the following areas:
• providing technical security architecture recommendations to enhance the organization’s cyber security capability and reduce risk.
• conducting Cyber threat and risk assessments of on-premise or cloud based systems and infrastructures.
- Recent* and significant** experience in providing expert cyber security architecture or risk management advice to project teams and governance committees, arising from research and analyses into varying types of cyber security issues.


*Recent experience is defined as experience gained within the last 3 years and where the activities were a core part of the candidate’s regular employment duties for a minimum of 1 year.

**Significant is defined in terms of both depth and breadth of experience that is normally acquired by performing the tasks continuously over a minimum period of five (5) or more years.

If you possess any of the following, your application must also clearly explain how you meet it (other qualifications)

ASSET EDUCATION:
In addition to the Essential Qualifications identified above, please provide details if you possess one or more of the following Asset Education and Asset Experience criteria identified below.

- Graduation with a degree* from a recognized university** in Computer Science, Cyber Security, or Information Security
- One or more industry-recognized cyber certifications such as CISSP, CISA, CISM, CEH, CHFI, CCNA, CCNP

* The term “degree” refers to a baccalaureate or a higher-level degree, as established by educational authorities.
**A "recognized" university is a Canadian university that has provincial or territorial degree-granting status.

Degree equivalency

ASSET EXPERIENCE:
You may be required to meet a combination of any of these asset experience criteria:
- Minimum 5 years’ experience working within the Government of Canada performing cyber security related functions.
- Experience in the provision of cyber security metrics and preparing Cyber Security status reports and dashboards to Management
- Experience in cloud security architecture working with GC Guardrails
- Experience in implementing Data Loss Prevention (DLP) controls, technologies and/or strategies

The following will be applied / assessed at a later date (essential for the job)

Bilingual - Imperative (BBB/BBB)

Information on language requirements

Second Language Writing Skills Self-Assessment
In order to help you decide if you should apply to a bilingual position, an optional self-assessment of your writing skills in your second official language is available for you to take before completing your application.

For more information, please consult:
Unsupervised Internet Test of Second Language Writing Skills

ESSENTIAL KNOWLEDGE:
- Knowledge of IT security safeguards for both on premise and in cloud environments
- Knowledge of IT Security strategies and providing expert security advice to clients
- Knowledge of threat and risk assessment methodology

ESSENTIAL COMPETENCIES:
- Collaboration
- Developing Myself
- Service Orientation
- Excellent Written Communication Skills
- Excellent Oral Communication Skills

The following may be applied / assessed at a later date (may be needed for the job)

ORGANIZATIONAL NEEDS:
- OSFI is committed to having a skilled and diverse workforce representative of the Canadian population. In order to meet our employment equity objectives, selection for this position may be made from among qualified candidates who self-declare as belonging to one of the following Employment Equity groups: Persons with a disability, Aboriginal people, Members of a Visible Minority, or Women. OSFI is committed to diversity and inclusion and we strongly encourage candidates to self-declare if they belong to one of these designated employment equity groups.

OPERATIONAL REQUIREMENTS:
- Ability and willingness to work overtime as required
- Ability and willingness to travel

Conditions of employment

Secret security clearance

- All employees of the Office of the Superintendent of Financial Institutions (OSFI) are required to be fully vaccinated against COVID-19 and attest to their vaccination status unless accommodated based on a medical contraindication, religion, or another prohibited ground for discrimination as defined under the Canadian Human Rights Act.

- In our current telework environment, the ability to work remotely from home within Canada with access to Internet in one’s residence is a condition of employment

Other information

The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.

Information on employment equity

In order for your application to be considered, you must submit a completed questionnaire. You will be required to demonstrate how you meet the education and experience criteria (essential and asset) for the initial screening, in answering online screening questions. It is NOT sufficient to only state that the qualifications are met or to provide a listing of current or past responsibilities. Rather, you must clearly demonstrate HOW, WHEN and WHERE the qualification was met through substantiation by examples. Information on your described education and experience provided in the screening questions should be supported by your résumé. Failure to provide the above information in the format required may result in your application being rejected from the process.

By providing the required information in the suggested format, you will ensure that the assessors are in a position to assess the depth, complexity and scope of your experience.

A written examination may be administered.

An interview may be administered.

Reference checks may be sought.

The ability to communicate effectively in writing may be assessed using the candidate's application, as well as through the evaluation process.

Please note that OSFI has offices located in Ottawa, Toronto, Montreal, and Vancouver. If you are screened in, you may be required to travel to one of these locations to complete assessment (exam, interview, etc.).

Candidates invited to an interview will be required to bring proof of their education credentials, in the form of a diploma or official transcript (original documents only). Candidates with foreign credentials must provide proof of Canadian equivalency. Consult the Canadian Information Centre for International Credentials for further information at http://www.cicic.ca/.

Candidates must meet all of the essential qualifications to be appointed to a position. A candidate may be appointed to a position even though he/she does not meet any or all of the asset qualifications. However, meeting these criteria is desirable and may be a deciding factor in choosing the person to be appointed.

Depending on the requirements of the position(s) being staffed from this process, for current or future vacancies, any or all of the asset qualifications may be applied at any time during the staffing process, including screening. Candidates may be contacted and assessed against these criteria at any time during this process.

Achieving a representative workforce has been identified as an organizational need and may be applied in this appointment process. If this criterion is used, only those who have indicated that they are members of the specified designated group(s) will be considered.

A top down selection of candidates may be used in the determination of those to be given further consideration in the assessment process.

Persons are entitled to participate in the appointment process in the official language of their choice. Applicants are asked to indicate their preferred official language in their application.

For this selection process, our intention is to communicate with applicants by e-mail (including sending invitations for written tests and interviews). Applicants who apply to this selection process must include in their application a valid e-mail address and make sure this address is functional at all times and accepts messages from unknown users.

All job applications must be submitted through the Government of Canada public service jobs website. Do not email, fax, or mail hard copy documents as these will not be accepted. To submit an application online, please click on the "apply now" button.

If you do not have Internet access in your home or through friends, relatives or neighbours, here are some suggested locations: campus career centers, libraries, community centers, Internet cafés and Services Canada. You may also call 1-800-O-Canada (1-800-622-6232), or TTY 1-800-926-9105, for information on the nearest public Internet access locations. Persons without Internet access may also review jobs open to the public through INFOTEL at 1-800-645-5605.

Applicants with disabilities: If you require special accommodation at any stage in the selection process, including technical aid to ensure an equitable assessment of your qualifications, please inform us by sending an e-mail to the following address: .

OSFI's Ottawa location is downtown with easy access to shopping, restaurants, gyms, financial institutions and more. The building is less than a five minute walk from LRT and STO stops.

As a Separate Agency, the Office of the Superintendent of Financial Institutions (OSFI) appoints employees in accordance with the Public Service Employment Act (PSEA). OSFI is named in Schedule V of the Financial Administration Act (FAA) and it offers the same pension and benefits plans as the core Federal Public Service. In addition to this, OSFI employees obtain a minimum of 4 weeks of vacation leave per year, earn a competitive salary, and are eligible for an annual performance bonus.

Preference

Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.

Information on the preference to veterans

We thank all those who apply. Only those selected for further consideration will be contacted.