Lead Analyst, Information Security (T & I) (Hybrid)

Work at CBC/Radio-Canada
Behind the scenes, but ahead of the curve: help us develop the next-generation public broadcaster.
Created in 2015 to align, lighten and modernize infrastructure, the Technology & Infrastructure (T & I) team is the backbone and the future forward arm of CBC/Radio-Canada. We are the people that make stuff work. We make connections; between media content, systems, people and places. We are the space in between.
A place with purpose. CBC/Radio-Canada has always been a highly regarded pioneer of media technology. Not just in Canada, but around the world. Today, we’re transforming ourselves from conventional radio and television broadcaster into a modern digital media company. Technology is the driving force and we are the team making it happen.
This is a hybrid role with the requirement to work in the office 2 days a week.
Your role
Please note that this position is based in Montreal but may also be based in Quebec City, Toronto or Ottawa.
CBC/Radio-Canada is looking for a Information Security Lead Analyst who will oversee the Security Governance, Risk Reporting, and Compliance Program for CBC/Radio-Canada in alignment with established methodology/processes and industry good practices.
The Lead Analyst will be responsible for all deliverables related to the information security activities, communicating the posture of CBC/Radio-Canada Information Security to the information security Committee, TI Management and Senior Executive Team.
What’s in it for you?
Challenges. We spend our days solving problems on an unbelievable scale. Media files are highly nuanced and incredibly complicated; updating, installing and supporting technologies that are organization-wide and that impact broadcasting content is a time-sensitive, complex technical feat. And that’s just the beginning. Not to mention, you will be working with cutting edge technology in data management, cloud migration, IP for broadcast, AI and security and reliability.
As Our New Senior Analyst, You Will

• Develop policies, directives and processes to ensure adequate coverage and alignment to ISO ISMS framework.
• Engage in third party risk assessments.
• Collaborate with management on the formulation of long-term strategies for the deployment of Information Security technologies, processes and prepares planning and project documents as required.
• Coordinate the efforts of professionals within various disciplines for implementation processes, audit response, document evidences and commit resources to bring action plan to completion.
• Act as the subject matter expert for Security Governance, Risk reporting, and Compliance, while ensuring proper security controls are in place to ensure that risks are mitigated to an acceptable level and are aligned with CBC/Radio-Canada risk appetite.
• Perform hands-on gap or risk assessments to identify significant information security risks (including applications, systems, data centers, infrastructure and vendor security risk assessments) to determine the organizational risk posture.
• Manage remediation efforts and track completion status of deficiencies.
• Provide in-depth technological advice and governance guidance to various groups within CBC/Radio-Canada.
• Ensure that stakeholders are properly consulted, and operational impacts identified to maximize the usage of CBC/Radio-Canada resources, in addition that assigned projects are implemented in an optimum manner, on time and within budget.

We Are Looking For a Candidate With The Following

• Extensive knowledge of security technology and risk assessment methodologies, policies and processes
• Knowledge/experience in LAN, WAN, Routers, firewall, IDS/IPS systems - Ability to scan large networks using vulnerability scan tools and write risk mitigation plans according to the assessment
• Knowledge in the following areas and good knowledge of ISO 27000 standards:
• Excellent analytical, evaluative, problem-solving and innovation abilities to ensure effective mitigation measures and risk treatment are in place
• Excellent written and oral communication skills in both official languages
• Physical security controls
• Interpersonal skills, including the ability to articulate to both technical and non-technical audiences
• Encryption technologies and concepts
• Five years of experience working within the technical arena, with 2 or more years of information security work experience
• Ability to travel occasionally for periods up to three days, depending upon project assignments
• May involve alternative work scheduling and occasional field work.
• Business continuity & Disaster recovery concepts
• Technical certifications within the area Security are a strong plus (CISSP, CCSP, CRISC, CBCP, CISA, CISM or equivalent)
• Database architecture concepts
• Experience in security standards such as ISO 27000 series, NIST publications, COBIT, ITIL, EBU publications
• Experience with compliance programs as well as their technical and security requirements
• Network security tools (IDS/IPS, firewalls, etc.)
• Experience in developing enterprise dashboard and creating reports to the proper level of management (operational, tactical & strategic)
• Web infrastructure security
• Working hours may need to accommodate production requirements.
• A university degree in the field of computer science, IT or Information Security, or other related field

Candidates may be subject to skills and knowledge testing.
If this sounds interesting, please click on ''Apply online''. We thank all applicants for their interest, but only candidates selected will be contacted.
CBC/Radio-Canada is committed to being a leader in reflecting our country’s diversity. That’s because we can only create and tell the stories that connect Canadians, by having a workforce that mirrors the ever-changing makeup of our country. That’s why we, as an employer, value equal opportunity and nurture an inclusive workplace where our individual differences are not only recognized and valued, but also extend to and pervade all the services we provide as Canada’s public broadcaster. For more information, visit the Diversity and Inclusion section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by sending an e-mail to [email protected].
You are invited to consult and familiarize yourself with our Code of Conduct, which can be found on our corporate website . All employees must adhere to the Code as a condition of employment. We also invite you to take a look at our policy on conflicts of interest . In the event that you become an employee, it will be important to inform us, as quickly as possible, of any situation that, because of your hiring, constitutes or could appear to constitute a conflict of interest.
Job Family
Information Technology
Primary Location
Montreal
Position Language Requirement
Bilingual (English / French)
Language Skill Level (Reading)
B
Language Skill Level (Writing)
B
Language Skill Level (Speaking)
B
Status of Employment
Permanent
Work schedule(s)
Full-time
Job Posting Date
Jul 25, 2023, 9:59:22 AM
Unposting Date
Aug 8, 2023, 8:59:00 PM