Application Security Compliance Specialist

Flexible Work Agreement Type

Posting End Date2024-07-03

Job GradePIPSC-3

Pay Range$107,682 - $135,272

Job SummaryThe Application Security Compliance Specialist will be primarily responsible for improving and maintaining a secure software development lifecycle program based on industry standards such as ISO 27001 and Eurocae ED-109. Secondary duties will be supporting the Cyber Risk and/or Vulnerability Management programs.

Job Description

What NAV CANADA offers you:

• Challenging, team-oriented work environment
• Competitive compensation and flexible benefits
• Defined benefit pension plan
• Opportunities for growth and development
• Flexible work arrangements
• Diverse and inclusive workforce

Key Accountabilities:

• Assessing the current situation, evaluating trends and anticipating cyber security requirements.
• Keeping abreast of emerging cyber security trends and evolving technology platforms in areas of specialization.  
• Assisting in the development and improvement of new cyber security initiatives.
• Formulating forward-looking roadmaps, strategies and plans to advance cyber security within NAV CANADA.
• Assesses security controls based on cybersecurity principles and tenets. (e.g., ISO 27001, CIS, NIST SP 800-53, Cybersecurity Framework, etc.).
• Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
• Ensure successful implementation and functionality of security requirements and appropriate Technology (IT/OT) policies and procedures.
• Participates in acquisitions, procurement, and outsourcing efforts to address information security requirements consistent with organization goals.

Job Requirements

Education:

Graduation from a recognized postsecondary institution with specialization in cyber security, computer science, systems engineering, data analytics; or an acceptable combination of education, training and/or experience.

Experience:

• 2 years of professional experience within a Cyber Security or related field considered an asset.
• Previous experience using specialized tools in support of cyber security activities.
• Practical experience in the planning and delivery of small-scale projects, including the preparation of required documentation; and  
• Experience troubleshooting technical issues, conducting research, and presenting solutions to management.

Knowledge:

• Knowledge in applying analytical methods typically employed to support planning and to justify recommended strategies and courses of action.
• Knowledge in keeping abreast of emerging cyber security trends and evolving technology platforms in areas of specialization.  
• Knowledge in collecting, aggregating, and analyzing data from a variety of resources.
• Knowledge in evaluating information for reliability, validity, and relevance.
• Knowledge in applying confidentiality, integrity, and availability principles.

Abilities:

• Ability to develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.
• Ability to prepare and present briefings.
• Ability to work with customer in a respectful manner, regardless of the circumstance; balances both client needs and project goals.
• Ability to contribute to planning, providing estimations and timelines for when activities shall be completed.
• Ability to participates in the research of industry standards to improve internal standards, policies, and procedures.

Personal Suitability:

• Responds to customer inquiries in a timely manner; takes responsibility for meeting customer requirements and solving applicable problems.
• Demonstrates an understanding of how customers affect the development of decision-making processes in the company.
• Assist in guiding and developing junior team members.

Working conditions:

• This position is based at Ottawa Logistics center but may be eligible for a flexible work arrangement.
• Typically conducted in a cubicle and/or open office and/or meeting room and/or lab environments using computer-based tools.
• Participation in one or more active projects / assignments where multi-tasking is required.
• Time pressures are tight with multiple deadlines, but the Specialist has control over the sequencing of work schedule.
• Travel may be required.
• Requirement for onsite work in event of security events
• Eligibility for Level II or higher security clearance from GoC

NAV CANADA is committed to building a skilled, diverse workforce reflective of Canadian society. If you do not believe that you match every job requirement listed on this job posting, we still encourage you to apply. NAV CANADA encourages a culture of learning and growth, and recognizes that although some technical skills are mandatory, many others can be taught.

Our Company strives to create an inclusive and barrier-free selection process and work environment. If you require accommodations during this competition process, please ensure that you inform the interview coordinator or hiring manager of any accommodation measures you may require. NAV CANADA will provide accommodations throughout the recruitment and selection process to applicants with disabilities as required.

The successful candidate must meet the security requirement of the position and be legally able to work in Canada.

We thank all applicants for their interest; only those selected for an interview will be contacted.

-