Job Description

The Department of Finance is committed to Equity, Diversity, Inclusion and Accessibility. Our goal is to build a public sector workforce that reflects the diverse communities we serve and to promote welcoming, diverse, inclusive, respectful workplaces that are accessible to all. We welcome all interested individuals including Indigenous People, persons with disabilities, Black, racialized, ethnic and culturally diverse groups, as well as people regardless of their sexual orientation, gender identities, and gender expressions. Those looking for more information are invited to visit ourOur Vision: Forward-looking people, service, and technology.Our Mission: Our Team proudly delivers quality IT expertise and advice with our partners to make citizen and business-centric service possible.Reporting to the Chief Information Security Officer for the Province of PEI, the Security IT Consultant and Assistant CISO is responsible for the delivery of the Governments Cybersecurity Program. This position is a key liaison between assigned Departments/Crowns supporting Senior Management to proactively address and remediate security vulnerabilities, threats, risks, incidents, and overall cybersecurity needs for the Government.Duties will include but are not limited to:

• Conduct network monitoring and intrusion detection analysis using systems such firewalls, intrusion prevention systems (IPS), security information & event management (SIEM), host based security systems, etc.;
• Supports the information security function across the Government to ensure consistent and high-quality information security management in support of the business goals under the guidance of the CISO
• Determines the information security approach and operating model in consultation with a department or agency stakeholder to align with Governments risk management approach and compliance monitoring of non-digital risk areas under the guidance of the CISO
• Develops and enhances an up-to-date information security management framework based on the following: National Institute of Standards and Technology (NIST) Cybersecurity Framework with recognition and appropriate augmentation from International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, and COBIT/Risk IT.
• Provides a business process re-engineering services and configuration for systems based on security practices and standards understanding specific business needs and assessing acceptable levels of risk.
• Provides input for the IT section of the Government's code of conduct
• Communicates vision and values of the organization, emphasizing excellence at all levels engaging all staff in the division
• Prepares capital budget submissions for projects which support the strategic plans
• Other related duties.

Minimum Qualifications:

• Degree in business administration or a technology-related field
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar Security credentials
• Demonstrated experience and success in senior leadership roles in risk management, information security, and IT or OT security
• Considerable experience in a leadership role
• Considerable relevant experience in the field of information security and/or risk management
• Knowledge and understanding of relevant legal and regulatory requirements, such as: such as Personal Information Protection and Electronic Documents Act (PIPEDA), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry/Data Security Standard.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework
• Up-to-date knowledge of methodologies and trends in both business and IT
• Experience successfully executing programs that meet the objectives of excellence in a dynamic business environment
• Experience with contract and vendor negotiations
• Poise and ability to act calmly and competently in high-pressure, high-stress situations
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change
• High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from board members to technical specialists
• Strategic leader and builder of both vision and bridges, and able to energize the appropriate teams in the organization
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exists
• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Applicants must have a good previous work and attendance record;
• Security Clearance of Secret required for this position
• The successful applicant must provide a satisfactory Criminal Records Check prior to beginning employment.

Other Qualifications:

• A critical thinker, with strong problem-solving skills
• Strong problem-solving and trouble-shooting skills
• Self-motivated and possessing of a high sense of urgency and personal integrity
• Excellent stakeholder management skills
• Project management skills: financial/budget management, scheduling and resource management
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital

This competition may be used to fill future job vacancies.Please Note: Please ensure the application clearly demonstrates how you meet the noted qualifications as applicants will be screened based on the information provided. We would like to thank all applicants for their interest; however, only those who are selected for an interview will be contacted.Where possible, submitting an electronic resume or job application is preferred. Otherwise, please return forms to PEI Public Service Commission, P.O. Box 2000, Charlottetown, Prince Edward Island, C1A 7N8. Applications may be sent by fax to (902) 368-4383.IT IS THE RESPONSIBILITY OF THE APPLICANT TO CONFIRM RECEIPT OF THE APPLICATION, BY TELEPHONE OR IN PERSON PRIOR TO THE CLOSING DATE.Please ensure that the appropriate Posting ID number is stated on all application forms. You can apply online or obtain an application form by visiting our web site at . Forms may also be obtained by contacting any PEI Government office, ACCESS PEI Centre, Regional Services Centre, or by telephone (902) 368-4080.No. 6 on Forbes list of Canadas Best Employers 2024The Public Service is inspired to make a positive impact and proud to shape the future of our Island Community.

Government of PEI