Date:	July 3, 2013
Reports to (Job Title):	Director, Information Security Services
Jobs Reporting (Job Titles):	Systems Integration Specialist (2)
Location:	Main Campus
Grade:	USG 14 35 hr/wk

Primary Purpose

This position is accountable for ensuring the day-to-day operational activities of Information Security Services (ISS) support the information security objectives of IST. The incumbent is responsible for ensuring appropriate security monitoring and incident response takes place and that service objectives for ISS technology services are continuously met.

Key Accountabilities:

1. Establishes the priorities for network security monitoring, network access control and security incident response at the University by:

Identifying threats to the campus IT infrastructure and developing strategies to detect, and mitigate those threats.
Participating in security architecture development to ensure threats are appropriately assessed.
Ensuring that the technology employed by Information Security Services evolves to keep-up with the threat landscape and technological change

2. Ensures the effective utilization, deployment, and development of human and capital resources for information security operations at the University

Hires and develops the information security operations team
Coaches, trains and develops employees to enable their professional development
Conducts regular reviews with direct reports

3. Leads the day-to-day activities of the information security operations team

Ensures resources are available to respond to requests of the Security Operations Centre (SOC)
Develops operational processes and procedures related to information security
Acts as Director, Information Security Services, in his/her absence.

4. Senior technical resource for information security operations, providing leadership in the areas of:

Security Monitoring
Incident Response
Forensics
Network access controls (e.g. Firewalls, ACLs, NAC, etc…)
SSL/TLS Certificate Support
Compliance scanning and reporting
Threat intelligence
Information sharing with other institutions and partner organizations

Position Requirements

Education:

University degree in a computing discipline together with relevant experience, or a combination of education and experience deemed to be equivalent. Technical security certification (e.g. GIAC) is an asset.

Experience:

7-10 years of progressive experience in a technical support role requiring in-depth technical expertise in security, network, and/or systems administration. Previous experience in a security administration role is preferred. Supervisory experience is an asset.

Technical:

MS Word	Excel	PowerPoint	Other
Intermediate	Basic	Basic	Advanced/Expert knowledge with: network intrusion detection/prevention systems, log management/security information and event management (SIEM), network firewalls, public key infrastructure (PKI), network packet capture tools, network threat intelligence, systems administration (Unix/Linux and Windows), vulnerability scanning tools, TCP/IP and related communications protocols

Nature and Scope

Interpersonal Skills:

Communicates with information technology support staff across all areas of the University to ensure that security incidents are resolved in a timely manner. Often deals with situations that are sensitive in nature where a high degree of tact and diplomacy are required. Externally, this position will have significant contacts with suppliers in the context of procurement, and with partner organizations for the sharing of network security intelligence.

Level of Responsibility:

The position is responsible and accountable for the results of the information security operations team and is responsible for meeting defined objectives. The position is also expected to be forward looking, aware of trends and bring innovative and creative concepts and opportunities to the Director, Information Security Services.

Decision-Making Authority:

The incumbent is responsible and accountable for day-to-day activities of the information security operations team as well as the evolution of the University’s information security monitoring and incident response capabilities.

Physical and Sensory Demands:

The incumbent experiences physical and sensory demands typical of a position whose main focus involves attention to detail and computer use. It requires extension sitting, repetitive hand/finger movements and concentrated visual tasks. Frequent breaks are encouraged.

Working Environment:

Physical conditions are typical of an office setting, with minimal exposure to disagreeable conditions. On occasion, may be exposed to stress and pressures as a result of dealing with critical incidents.

Manager, Information Security Operations