Selection Process Number:
26-27-SIF-IA-JR100587
Group and Level:
RE 06
Salary Range:
$124,500.00 - $160,800.00
Employment Tenure:
Indeterminate
Positions Available:
2

POSITION DETAILS

CLASSIFICATION

This position is classified at the RE-06 group and level which is roughly equivalent to the CT-FIN-04 group and level.

LOCATION

This position is located in Toronto. Working from the Ottawa, Montreal, or Vancouver office may be approved, depending on worksite availability.

OSFI's work model includes telework and mandatory onsite presence. The terms of the employee's telework arrangement will be established in accordance with the Directive on Telework and related organizational directions. These arrangements must be reviewed annually, at a minimum, and can be subject to change. OSFI employees are currently required to work in the office 4 days per week, however this may be subject to change depending on new direction.

PROCESS INTENT

The immediate need is to staff 2 positions with a language requirement of English essential on an indeterminate (permanent) basis.

A pool of qualified or partially qualified candidates may be created to staff similar or identical positions with various linguistic requirements and/or profiles, security requirements, tenures, and/or locations within the Office of the Superintendent of Financial Institutions (OSFI), which may vary according to the position being staffed.

KEY RESPONSIBILITIES

The Specialist of the Technology Risk Division will provide specialty technology and cyber risk expertise in identifying FRFI-specific risks, industry-wide risks and/or sector specific trends and developments related to technology and cyber risks, including emerging risks that may impact a FRFI's operational resilience. Expertise includes technology and cyber risk assessment and management practices, familiarity with threat intelligence, penetration testing, red and blue team work and in-depth understanding of threats to any process or function that involves systems, data, infrastructure, networks, cyber security and digital technology impacting Deposit Taking Institutions (DTIs), insurers and pension plans.

ESSENTIAL QUALIFICATIONS

Official Language Proficiency

• English Essential
  • Information on language requirements

In order to be considered, your application must clearly explain how you meet each of the following education and experience criteria.

ESSENTIAL EDUCATION

• A degree from a post-secondary institution specializing in information technology, information security, computer science, engineering, commerce, business, finance, economics, mathematics or another relevant field OR an acceptable combination (1*) of relevant experience AND education or formal training or a relevant designation/certification.

*NOTE:

(1*) At the manager's discretion, OSFI may consider candidates who do not possess the stated education but meet the combination of experience and education or formal training if concrete examples are provided.

Information on degree equivalency

ESSENTIAL EXPERIENCE

• Recent (2*) and significant (3*) experience related to technology risk management and/or cyber risk in one of the following areas:
  • Business or Technology Operations,
  • Secure Software Development,
  • Application or Network Security,
  • Cyber Security Operations Centre,
  • System/data analysis,
  • Risk management function,
  • Or a related control function (i.e. information security, disaster recovery, operational risk or internal/external audit [e.g. application audit, cyber security audit, IT governance, operational risk audit]).
• Experience in report writing.

*NOTE:

(2*) Recent is defined as relevant experience acquired in the last five (5) years.

(3*) Significant is defined as having the depth and breadth of experience that is normally acquired by performing the tasks over a period of approximately five (5) years. Candidates must clearly demonstrate their roles and responsibilities pertaining to this experience.

The following essential knowledge, competencies and abilities will be assessed at a later date.

ESSENTIAL KNOWLEDGE

• Knowledge of current cyber and technology threats and risks facing financial institutions.

• Knowledge of technology risk and innovative FinTech products as they relate to the financial services industry.

ESSENTIAL COMPETENCIES

• Collaboration
• Results Orientation
• Interpersonal Communication

• Innovation

ESSENTIAL ABILITIES

• Ability to communicate effectively in writing.

• Ability to communicate effectively verbally.

ASSET QUALIFICATIONS

If you possess any of the following education or experience criteria, your application must clearly explain how you meet them (may be needed for the job).

ASSET EDUCATION

• One or more of the following designations/certifications:
  • Certified Information Security Manager (CISM),
  • Certified Information Systems Security Professional (CISSP),
  • Certified Information Systems Auditor (CISA),
  • Certified in the Governance of Enterprise IT (CGEIT),
  • Certified Cloud Security Professional (CCSP),
  • Certified Ethical Hacker (CEH),
  • Offensive Security Certified Professional (OSCP),
  • GIAC Certified Incident Handler (GCIH)
  • Or other relevant designations.

ASSET EXPERIENCE

• Experience working in a security and network operations centre/cyber security operations centre.
• Experience analyzing data, preparing reports and briefing on cyber threats and technology issues.
• Significant (3*) experience in liaising with stakeholders, building relationships and conducting outreach on cyber and technology issues.
• Experience managing projects.
• Experience in liaising with and making presentations to Senior Management.

*NOTE:

(3*) Significant is defined as having the depth and breadth of experience that is normally acquired by performing the tasks over a period of approximately five (5) years. Candidates must clearly demonstrate their roles and responsibilities pertaining to this experience.

The following asset knowledge and competencies may be assessed at a later date.

ASSET KNOWLEDGE

• Knowledge of emerging technology and cyber risks related to AI, Blockchain, Distributed Ledger, and Quantum computing as they relate to the financial services industry.

ASSET COMPETENCIES

• Critical Thinking
• Grit
• Leading People

OPERATIONAL REQUIREMENTS

• Ability and willingness to work overtime.
• Ability and willingness to travel within Canada when required.

CONDITIONS OF EMPLOYMENT

• Security - Reliability Status
• The ability to work remotely from home within Canada with access to the Internet in one's residence is a condition of employment.

ORGANIZATIONAL NEEDS

• Retaining OSFI affected/opting employees
• OSFI is committed to having a skilled and diverse workforce representative of the Canadian population. In order to meet our employment equity objectives, selection for this position may be made from among qualified candidates who self-declare as belonging to one or more of the following Employment Equity groups: Persons with a disability, Indigenous Peoples, Members of a Visible Minority, or Women. OSFI is committed to diversity and inclusion, and we strongly encourage candidates to self-declare if they belong to one of these designated employment equity groups.

OTHER INFORMATION

• Organizational needs may be applied first, therefore, OSFI affected/opting employees may be given first consideration over other applicants. Please note that in some cases deployments may also be considered for the retention of employees.
• The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.
  • Employment equity - Canada.ca
• Eligible candidates may be considered and offered a deployment before considering other applicants.
• A DEPLOYMENT is a permanent movement of an employee at level or equivalent level within an organization to another organization in the core public administration, the OAG, or to the five separate agencies named in Schedule V to the FAA whose appointments are made in accordance with the Public Service Employment Act (PSEA). A deployment does not constitute a promotion or change a person's period of employment from a specified term to indeterminate.
• This process may also be used to staff a Manager position.
• OSFI is a separate agency with its own classification and compensation system. OSFI's staffing is subject to the Public Service Employment Act (PSEA).
• All written and verbal communication obtained throughout the staffing process, from the time of application to close of process, may be used to evaluate the candidate.
• Candidates must meet all of the essential qualifications to be appointed; however, depending on the requirements of the specific position(s) being staffed, one or more asset criteria or organizational need may be invoked at any stage of the process.
• Staffing strategies such as random selection, top-down approach and/or establishing cut-off scores to determine who will continue in the staffing process, may be used for the purpose of managing applications.
• Please note that although you may attain the established pass mark on any of the assessments used in this staffing process, management may decide to use a higher cut off score.
• During the staffing process, various assessment methods can be utilized, including but not limited to written exams and interviews. These assessments may be conducted either remotely or in-person at one of our OSFI offices (Toronto, Ottawa, Montreal or Vancouver).
• Candidates are entitled to participate in the appointment process in the official language of their choice.
• Email correspondence will be the primary method of communication with candidates for this selection process. Ensure you check your spam folder for any communications from OSFI ([email protected]). You must provide valid and updated contact information.
• All job applications must be submitted through Workday: OSFI's recruiting platform. Do not email your application as it will not be accepted. To submit an application online, please click on the "Submit" button.
• If you have a limitation that may impact your performance at any step of the assessment process (such as submitting the application, written test, or an interview), you may request an accommodation. Assessment accommodations are designed to remove barriers, and to ensure that candidates with limitations can fully demonstrate their abilities. Should you wish to be accommodated, please inform us by sending an e-mail to the following address: [email protected]. All information received in relation to accommodation will be kept confidential.
• You are responsible for ensuring that the personal information provided in your candidate profile in Workday is accurate and up to date (e.g., contact information, status of any priority entitlements, veteran/mobility status, citizenship, etc.). If your personal information needs to be updated after you have submitted your application, you must contact us at [email protected]. Failure to do so may mean that you are either not considered or eliminated from the process.

CONTACT INFORMATION

OSFI Staffing Team

• EMAIL: [email protected]

PLEASE DO NOT APPLY TO THIS EMAIL ADDRESS, USE THE APPLY BUTTON.