Our Ability Jobs

Position Title:

Lead Analyst, Information Security (T & I) (Telework/Hybrid)

Status of Employment:

Permanent

Position Language Requirement:

English, French

Language Skills:

English (Reading - B - Intermediate), English (Speaking - B - Intermediate), English (Writing - B - Intermediate), French (Reading - B - Intermediate), French (Speaking - B - Intermediate), French (Writing - B - Intermediate)

Work at CBC/Radio-Canada

At CBC/Radio-Canada, we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance.

Do you think you have the ability and drive to keep up with this exciting, ever-changing industry? Whether it be in front of the camera, on air, online or behind the scenes, you would be joining a team that thrives on making connections and telling stories that are important to Canadians.

Unposting Date:

2024-06-21 11:59 PM

Behind the scenes, but ahead of the curve: help us develop the next-generation public broadcaster.

Created in 2015 to align, lighten and modernize infrastructure, the Technology & Infrastructure (T & I) team is the backbone and the future forward arm of CBC/Radio-Canada. We are the people that make stuff work. We make connections; between media content, systems, people and places. We are the space in between.

A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology. Not just in Canada, but around the world. Today, we’re transforming ourselves from conventional radio and television broadcaster into a modern digital media company. Technology is the driving force and we are the team making it happen.

This role is a hybrid work arrangement. Work schedule to be discussed with Hiring Manager according to the guidelines defined by the department.

Please note: This position is preferably based in Montreal but can also be done in Quebec City, Toronto or Ottawa.

Your role

CBC/Radio-Canada is looking for a Lead Analyst, Information Security, who will work on managing security risks for the organization in alignment with established methodology/processes and industry best practices.

In this role, you will be responsible for certain deliverables related to information security activities and could be asked to present CBC/Radio-Canada’s information security posture to the Information Security Committee and T&I leadership.

What’s in it for you?

Challenges. We spend our days solving problems on an unbelievable scale. Media content is highly nuanced and complicated; updating, installing and supporting technologies that are organization-wide and that impact broadcasting content is a time-sensitive, complex technical feat. And that’s just the beginning. You’ll be working with leading-edge data management, cloud, IP broadcasting, AI, security and reliability technologies.

As our new Lead Analyst, you will:

• Act as a governance, risk reporting and compliance expert, ensuring that proper security controls are in place to mitigate risk to an acceptable level in line with CBC/Radio-Canada’s risk appetite.

• Develop and maintain CBC/Radio-Canada’s framework of information security controls based on industry best practices.

• Support the implementation of the organization’s data protection strategy against the backdrop of emerging generative AI technologies.

• Perform hands-on gap or risk assessments to identify significant information security risks (including applications, systems, data centres, infrastructure and vendor security risk assessments) to determine the organizational risk posture.

• Manage remediation efforts and track completion status of deficiencies.

• Provide technology security advice and governance guidance to various groups at CBC/Radio-Canada.

• Organize and lead access review campaigns for the organization’s critical assets, with a focus on data security. Also determine and maintain the annual calendar for access review campaigns as well as the integration calendar in the access review solution.

• Work with management on formulating long-term strategies for implementing information security controls.

• Co-ordinate the efforts of professionals across various disciplines to develop implementation processes and audit responses, document evidence and commit resources to bring the action plan to completion.

• Ensure that stakeholders are adequately consulted and that operational impacts are easily identified in order to optimize the use of CBC/Radio-Canada resources, seeing to it that projects are implemented to the highest standards, on time and on budget.

What you bring:

• University degree in computer science, IT or information security, or other related field

• Five years’ experience working in information security

• Extensive knowledge of security technology and risk assessment methodologies, policies and processes

• Experience with compliance programs as well as their technical and security requirements

• Outstanding analytical, evaluative, problem-solving and innovation abilities to ensure effective mitigation measures and risk treatment are in place

• Experience with NIST, ISO 27000 and ITIL security standards

• Security-related technical certifications a definite asset (CISSP, CRISC, CISA, CISM or equivalent)

• Excellent written and oral communication skills in both official languages

• Excellent interpersonal skills, including the ability to articulate to both technical and non-technical audiences

Additional notes:

• Occasional travel may be required for periods up to three days, depending upon project assignments.

• May involve alternative work scheduling and occasional field work.

• Working hours may need to accommodate production requirements.

Candidates may be subject to skills and knowledge testing.

We thank all applicants for their interest, but only candidates selected for an interview will be contacted.

CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country. That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section (http://cbc.radio-canada.ca/en/working-with-us/jobs/diversity-inclusion-cbc-rc) of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to recruitment@cbc.ca .

You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website (http://cbc.radio-canada.ca/en/vision/governance/corporate-policies/values-ethics/conduct) . All employees must adhere to the Code as a condition of employment. We also invite you to take a look at our policy on conflicts of interest (http://cbc.radio-canada.ca/en/vision/governance/corporate-policies/human-resources/conflicts) . In the event that you become an employee, it will be important to inform us, as quickly as possible, of any situation that, because of your hiring, constitutes or could appear to constitute a conflict of interest.

Primary Location:

1000, Rue Papineau, Montreal, Quebec, H2K 0C2

Number of Openings:

1

Work Schedule:

Full time

At CBC/Radio-Canada (http://cbc.radio-canada.ca/en) , we create content that informs, entertains and connects Canadians on multiple platforms. Our successes and accomplishments are driven by embodying and upholding values, which include creativity, integrity, inclusiveness and relevance.