Information Security and Business Analyst

Job Responsibility:

Date Posted: 11/20/2023 Req ID: 34984 Faculty/Division: Ofc of the Chief Information Officer Department: Information Security Campus: St. George (Downtown Toronto) Position Number: 00055800

Description:

About us: The Information Security team, part of the Information Technology Services (ITS), provides expertise and services to protect the University of Toronto's data and digital infrastructure assets based on an understanding of risk. Information Security staff engage with academic, research and administrative groups in multiple areas, including assessing the security of new and existing services, and working with product teams to design and maintain security for digital assets. Additionally, they implement security capabilities and provide security services such as identity and access management, vulnerability scanning, and detection and response capabilities to address cyber attacks. Information Security team's vision is to enable the mission of the University while providing guardrails within which research, teaching and administration are securely managed. The Information Security team offers a challenging and exciting environment to develop your skills and contribute to increasing the safety and reliability of our digital world. Your opportunity: Under the general direction of the Associate Director, Information Security Strategic Initiatives, you will be part of a dynamic team focused on delivering transformational security solutions to the University. Through your efforts, you will promote the security program and help maintain and advance the University's strategic Information Security initiatives. You will be required to design, implement, and deliver training and informational material and workshops that clarify, support, and advance strategic information security objectives and programs. You will train end-users on security best practices and security solutions. You will analyze and document business requirements; co-ordinate efforts; assess needs and contribute to the development and implementation of new processes and solutions. You will also analyze complex projects and business practices to identify potential security risks. Your responsibilities will include:

• Analyzing and documenting business requirements
• Assessing needs and contributing to the development of business systems
• Analyzing and preparing documents required for each project or product
• Planning the implementation of new business system processes
• Drafting and editing training content
• Conducting Threat RiskAssessment (TRA) and Privacy Risk Assessment (PRA)
• Training end-users on procedures and the use of supported IT systems
• Scheduling and assigning work to a small group in a limited area

Essential Qualifications:

• Bachelor's Degree or acceptable combination of equivalent experience.
• Minimum four years experience in an Information Security environment.
• Demonstrated experience writing and disseminating reports and presentations.
• Demonstrated experience working with instructional designers to build information security training modules.
• Demonstrated experience writing both strategically and creatively under tight deadlines; ability to write, edit and revise content, structure and format of written material; skilled at developing key messaging and talking points.
• Experience working with SCORM
• Demonstrated understanding of security solutions, and the ability to learn new tools quickly.
• Demonstrated ability to communicate in a variety of styles and voices for a range of audiences.
• Demonstrated ability to build and maintain close working relationships with all levels of staff and internal and external stakeholders.
• Ability to work and execute on multiple tasks with competing deadlines in a high-pressure environment.
• Strong analytical ability, attention to detail and problem-solving skills.
• Good organizational skills and the ability to work accurately and quickly under pressure with frequent interruptions.

Assets (Nonessential):

• An appreciation for / exposure to information security and threat / risk analysis activities

To be successful in this role you will be:

• Communicator
• Cooperative
• Motivated self-learner
• Self-directed
• Team player

Closing Date: 11/28/2023, 11:59PM ET Employee Group: USW Appointment Type : Budget - Continuing Schedule: Full-Time Pay Scale Group & Hiring Zone: USW Pay Band 12 - $78,308 with an annual step progression to a maximum of $100,144. Pay scale and job class assignment is subject to determination pursuant to the Job Evaluation/Pay Equity Maintenance Protocol. Job Category: Information Technology (IT) Recruiter: Khristen Sivaramalingam

Lived Experience Statement Candidates who are members of Indigenous, Black, racialized and 2SLGBTQ+ communities, persons with disabilities, and other equity deserving groups are encouraged to apply, and their lived experience shall be taken into consideration as applicable to the posted position.