Job Description

attacks. In order to do so, you must have JavaScript enabled in your web browser otherwise this site will fail to work correctly for you. See details of your web browser for how to enable JavaScript.Attention Safari users: This site requires cookies to function. Please click to accept the cookie. Cookies will be used strictly for the functioning of the site.Toggle navigationJob DetailsThis site attempts to protect users against attacks. In order to do so, you must have JavaScript enabled in your web browser otherwise this site will fail to work correctly for you. See details of your web browser for how to enable JavaScript.Information Security Analyst - (992126.3)Share this job as a link in your status update to LinkedIn.Organizational UnitUniversity of Victoria -> VP Finance and Operations -> University SystemsLocationUniversity of Victoria - Victoria, BC V8W 2Y2 CA (Primary)Posting Close Date25 September 2024Please note that positions will close at 4 p.m. on the closing date.FTE1.0Salary Grade$72,242.00 - $93,951.00Additional Posting InformationN/ASalary posted will be pro-rated based on FTE and achieved as per the collective agreement, if applicable.ClassificationSG10Employee Group:PEA - Regular# of Hires Needed1CategoryInformation TechnologyAbout this OpportunityUniversity Systems is UVic\xe2\x80\x99s information technology department, responsible for enterprise services and applications, cybersecurity, digital infrastructure, student learning spaces, IT governance, and data governance. These functions span the entire university and serve the campus, which includes students, faculty/staff, and the broader community. University Systems is committed to advancing equity, diversity, inclusion and accessibility in the department and the university.University Systems also plays a leadership role within the higher education ecosystem as one of the leaders in research computing. As one of five national research computing host sites, UVic is a Canadian leader for cloud computing for research. UVic also provides technical support for BCNET and CANARIE, the national research and education network, and is actively engaged in cybersecurity collaborations in BC and Canada. We exist in a complex work environment where we must effectively navigate complex, cutting edge and ever-changing technology, and information security and privacy issues and we strive to be the best information systems organization in the Canadian university system.The Information Security Office is looking for motivated individuals who want to be part of a collaborative team advancing cybersecurity culture at UVic and beyond. We are looking for people who understand the mission and purpose of the university, and who care deeply about serving our faculty, staff, students and the broader higher-education commnunity.*This position is eligible for a Hybrid Work Arrangement*The salary range for this position is:Recruitment range: $72,242- $79,650 starting salary determined by the PEA Collective Agreement.Performance range: starting salary to max of $93,951 is available through annual performance increases.**This position receives an annual market adjustment of $5,700**Job SummaryReporting to the Associate Director, Information Security Office, the Information Security Analyst assists in the monitoring and enforcement of information security policy and standards to protect the University\xe2\x80\x99s Information Resources. The Information Security Analyst supports day-to-day operations; analyzes and consults on security matters; responds to operational security issues; serves as a resource on security-related projects or projects with a security component; and leads select information security projects. The Information Security Analyst is a trusted resource, providing guidance to technical staff and staff in units within the University, as well as collaborating closely with technical staff. The Senior Information Security Analysts, Associate Director, Chief Information Security Officer, and other senior leaders provide guidance and direction on resolving complex issues.Objectives:

• implements the components (such as policies, projects, etc.) that make up the information security program at the University;
• provides support and analysis on information security gaps; and researches, plans, and executes additional projects to secure Information Resources;
• participates in incident response and operational aspects of information security;
• provides training and awareness to ensure the campus community is aware of their information security responsibilities, and promotes good information security practices;
• maintains up-to-date knowledge of security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the University.

Job RequirementsThis position requires a Bachelor\'s degree in a technical discipline (Computer Science or Computer Engineering preferred) and 3-5 years\' experience working in an enterprise networking environment, and 1-3 years\xe2\x80\x99 experience in an information security-related function,An equivalent combination of education, training and experience would be considered.Essential knowledge and experience requirements include:

• Good understanding of TCP/IP and related network protocols
• Broad knowledge of N-tier computing environments (web applications, database, networking, firewall, etc.)
• Basic scripting/programming knowledge (e.g. shell scripts, Perl, Ruby, Python, SQL)
• Broad knowledge of Windows, Mac, and Linux operating system environments
• Working knowledge of and experience in the environment of information security
• Experience with common open source security tools (Nessus, nmap, Wireshark, Snort, Metasploit, etc.)
• Experience with security services, such as Disk Encryption, Antivirus and Endpoint Protection, Intrusion Detection/Prevention and Firewalls, Desktop Management, Security Event and Incident Management, and Data Loss Prevention, is strongly desired
• Experience in securing remote-access and mobile computing environments

Essential competencies include:

• Demonstrate the highest standards of ethical conduct in ensuring the confidentiality, integrity, and availability of information resources
• Demonstrated trust from peers and supervisors in regard to working with highly confidential and personally identifiable information
• Ability to communicate complex technical concepts to a non-technical audience through written and verbal communication
• Ability to work both collaboratively in a team environment as well as independently

The following criteria are considered an asset:

• Cybersecurity industry certifications such as GIAC, CISSP, ISACA, CEH or OSCP
• Experience with public sector privacy legislation and regulations (PIPEDA, FIPPA)
• Experience working in a post-secondary education environment or comparable size/complex organization
• Experience in delivering training and awareness to end users and being a spokesperson or ambassador for information security issues.

Territory Acknowledgement: We acknowledge and respect the L\xc9\x99k\xcc\x93\xca\xb7\xc9\x99\xc5\x8b\xc9\x99n (Songhees and Esquimalt) Peoples on whose territory the university stands, and the L\xc9\x99k\xcc\x93\xca\xb7\xc9\x99\xc5\x8b\xc9\x99n and WS\xc3\x81NE\xc4\x86 Peoples whose historical relationships with the land continue to this day.Equity and Diversity Statement: UVic is committed to upholding the values of equity, diversity, and inclusion in our living, learning and work environments. In pursuit of our values, we seek members who will work respectfully and constructively with differences and across levels of power. We actively encourage applications from members ofRead our full equity statement here:Accessibility Statement: If you anticipate needing accommodations for any part of the application and hiring process contact:

University of Victoria