Security Analyst

Role Responsibilities

Reporting to the Manager, Privacy and Security, the Security Analyst is responsible for planning, implementing, monitoring, and evaluating information security controls supporting Alberta’s Health Sector. This includes leading security incident response, assessing cyber threats, supporting the implementation of the Information Security Management Directives (ISMD), and ensuring alignment with GoA security policies and standards. You will collaborate closely with both technical and non-technical stakeholders across the GoA, public sector, and healthcare organizations to develop, maintain, and strengthen the province’s information security posture.

The job responsibilities include:
Information Security Governance & Program Support

• Contribute to the development, implementation, maintenance, and monitoring of departmental information security programs, policies, standards, and processes.
• Ensure provincial information security requirements are adhered to by custodians connecting to the Electronic Health Record (EHR).
• Support IT project teams by vetting deliverables, completing threat risk assessments, and helping identify appropriate risk mitigation strategies.
• Lead or participate in cross-government security initiatives, as required.

Threat Intelligence & Risk Management

• Identify, assess, document, and treat security threats and risks.
• Maintain awareness of emerging cyber threats, conduct research, and translate findings into actionable recommendations.
• Ensure risks are recorded in the GoA Information Technology Security Risk Register.
• Provide executive-level reporting on threats, incidents, and security posture.

Technical Security Controls Management

• Maintain and configure security tools and systems in alignment with evolving threats.
• Recommend technical and process controls to balance security needs with business requirements.
• Conduct research and engage in peer learning to remain current with best practices.

Security Incident Response

• Monitor and respond to information security incidents according to established protocols.
• Manage escalated or critical incidents, potentially leading a small incident response team.
• Produce detailed incident reports and provide status updates to management.

Role Responsibilities Cont.

Awareness, Training, & Stakeholder Engagement

• Contribute to development of security training and awareness materials.
• Deliver training sessions and promote security best practices across the organization.
• Provide guidance and advice to stakeholders on information security practices and exceptions.

Disaster Recovery Support

• Support program areas in developing IMT Disaster Recovery plans and documentation.
• Provide recommendations to enhance organizational resilience.

Leadership & Mentorship

• Mentor junior staff and support team development.
• Lead or coordinate small projects or related activities.
• Participate as a subject matter expert on information security initiatives.

Please click on this link to view the job description for this position.

APS Competencies

Competencies are behaviors that are essential to reach our goals in serving Albertans. We encourage you to have an in depth understanding of the competencies that are required for this opportunity and to be prepared to demonstrate them during the recruitment process.

This link will assist you with understanding competencies:
https://www.alberta.ca/system/files/custom_downloaded_images/psc-alberta-public-service-competency-model.pdf

• Systems Thinking: Take a long-term, holistic view when approaching organizational objectives. Consider whole-of-system impacts, future risks, and emerging opportunities. Anticipate outcomes and incorporate diverse stakeholder perspectives. Develop actions and plans aligned with APS values and strategic goals. Identify opportunities for collaboration across teams and functions.
• Creative Problem Solving: Tackle complex issues with curiosity and resourcefulness. Seek root causes and challenge assumptions. Identify ways to improve and streamline complex systems. Leverage resources and expertise from across the organization. Encourage open debate, idea generation, and responsible risk-taking.
• Agility: Comfortable navigating change and uncertainty. Identify alternative approaches and help others do the same. Clearly communicate the impacts of change and guide others through transitions. Anticipate emotional responses and adjust communication accordingly. Stay focused on goals, foresee obstacles, and develop contingency plans. Make informed decisions even in ambiguous environments.
• Develop Networks: Build strong, purposeful relationships that support shared outcomes. Connect with the right people to drive initiatives forward. Represent and balance the needs of diverse stakeholder groups. Go beyond to support and understand stakeholder requirements. Ensure all voices are heard and respected in decision-making.
• Build Collaborative Environments: Foster a culture of teamwork and open communication. Encourage broad thinking and remove barriers to progress. Facilitate effective communication and effective cross-functional collaboration. Anticipate and reduce conflict early. Recognize and highlight the achievements of others. Promote an environment where collaboration, trust, and commitment thrive.

Qualifications

Minimum Recruitment Standards
University graduation in computer, information systems or information security, plus two years related experience; or equivalent as described.

Equivalency: A related two-year diploma in computer technology or a related discipline from a recognized postsecondary institution and four years related experience; or a related one-year certificate from a recognized post-secondary institution and five years related experience.

The following experience is required: 

• Technical and policy experience in the Information security field, in operational and tactical roles.
• Experience in information systems security, information technology infrastructure planning and information technology architecture.
• Experience with research and analysis to enhance knowledge in current and emerging trends within Information Systems Security.
• Extensive knowledge of information security standards and practices, information security frameworks (ISO 27K, NIST, COBIT, etc.).
• Information Security testing tools and techniques, and security & privacy enhancing technologies. 
• Working knowledge of HIA and health specific principles and practices, including other relevant legislation compliance management.
  
  

The following experience is considered as assets:

• One security certification (CISSP, CISM, CISA, CEH, GPEN, or equivalent).
  
  

The following experience will be given preference:

• Oral and written communication skills.
• Ability to work both independently and in a team environment.

Minimum recruitment standards outline the minimum education and experience required for appointment to a job classification.

Refer to https://www.alberta.ca/alberta-public-service-minimum-recruitment-standards.

Notes

Hours of work are 8:15 AM to 4:30 PM, Monday to Friday. This is a full-time position working 36.25 hours per week.

If a security screening is required:

• Final candidates will be required to undergo a security screening.
• Any costs associated with obtaining the required documents/checks as noted or interview travel expenses, will be the responsibility of the candidate. Out-of-province applicants can obtain the required documents/checks from the province they currently reside in.
  

A cover letter outlining how your experience relates to the qualifications of this role is required.

In your resume, please include dates (including months and years) associated with all education and work experience. Also, please indicate whether your work experience is casual, part-time, or full-time. For example, January 15, 2006 - June 25, 2009: Assistant (PT three 8 hrs. shifts/week).

Links and information on what the GoA have to offer to prospective employees.

• Working for the Alberta Public Service - https://www.alberta.ca/advantages-working-for-alberta-public-service.aspx.
• Public Service Pension Plan (PSPP) - https://www.pspp.ca.
• Alberta Public Service Benefit Information - https://www.alberta.ca/alberta-public-service-benefits.    
• Professional learning and development - https://www.alberta.ca/professional-development-support-directive.
• Research Alberta Public Service Careers tool - https://researchapscareers.alberta.ca.
• Positive workplace culture and work-life balance.
• Leadership and mentorship programs.