Role Responsibilities

As a Senior Security Analyst, you will work closely with the Manager, Privacy and Security to lead initiatives that secure information systems within the department and across the provincial health sector. You’ll assess and manage risks, respond to incidents, guide major projects, and help build a culture of security awareness.

The job responsibilities include:
Information Security Maintenance and Monitoring

• Develop, implement, and monitor departmental security programs and policies.
• Ensure compliance with provincial security standards across all EHR-connected custodians.
• Lead security awareness efforts and respond to policy exceptions.

Project Management & Collaboration

• Lead and support information security projects from initiation through delivery.
• Conduct threat risk assessments and guide IT project teams on secure design.
• Mentor junior staff and support cross-departmental collaboration.

Security Reviews & Incident Management

• Oversee vulnerability assessments, penetration tests, and external audits.
• Lead and coordinate incident response efforts, including executive reporting.
• Support on-call rotation for incident response and maintain comprehensive documentation.

Threat Intelligence & Risk Management

• Monitor, assess, and report on emerging cyber threats.
• Maintain and contribute to the provincial Information Security Risk Register.
• Develop mitigation strategies and provide threat intelligence to stakeholders.

Technical Controls & Disaster Recovery

• Configure and recommend security controls to defend against current threats.
• Participate in DR planning and ensure operational readiness.
• Contribute to training material and awareness sessions.

Please click on this link to view the job description for this position.

APS Competencies

Competencies are behaviors that are essential to reach our goals in serving Albertans. We encourage you to have an in depth understanding of the competencies that are required for this opportunity and to be prepared to demonstrate them during the recruitment process.

This link will assist you with understanding competencies: https://www.alberta.ca/system/files/custom_downloaded_images/psc-alberta-public-service-competency-model.pdf.

Systems Thinking:

• Analyze and plan with awareness of broad trends, risks, and political environments.
• Integrate organizational vision and long-term strategy into daily planning.
• Recognize and address behaviors or barriers that may hinder progress.

Creative Problem Solving:

• Lead collaborative discussions to break down complex issues with cross-functional teams.
• Foster an open, inclusive environment where all voices are heard and creative ideas flourish.
• Bring together the right people and tools to co-create new solutions for public service challenges.

Drive for Results:

• Take and delegate ownership for results, ensuring performance meets high standards.
• Embrace accountability, even for indirect responsibilities.
• Focus on what is best for Albertans, even when it challenges the status quo.
• Deliver outcomes that align with the Alberta Public Service (APS) direction and vision.

Qualifications

Minimum Recruitment Standards
University graduation in computer science and information technology or a related discipline plus four years related experience; or equivalent as described.

Equivalency: A related two-year diploma in computer technology or a related discipline from a recognized post-secondary institution and six years related experience; or a related one-year certificate from a recognized post-secondary institution and seven years related experience.

The following experience is required: 

• Technical and policy related experience in the Information security field in operational and tactical roles.
• Degree in Computer Science.
• 4 years of progressively responsible experience in computing and information security.
• Experience with Internet technology and security issues. 
• Experience with security policy development, security education, network penetration testing, application vulnerability assessments, risk analysis and compliance testing. 
• CISSP, GIAC, or other security certifications desired.
• Knowledge of information security standards (e.g., NIST, ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis are essential. 
• Strong analytical and problem-solving skills. 
• Excellent communication (oral, written, presentation), interpersonal and consultative skills.

The following experience is considered as assets:

• Governance and/or operational security working experience within a complex and highly regulated environment.
• Previous experience leading a security governance program.  
• Security related certification such as CISSP, CISM, OSCP, CEH. 
• Experience with NIST cybersecurity framework.

The following experience will be given preference:

• Previous experience working in cybersecurity within health industry.
• Previous experience developing security policies and processes as they relate to protecting health information and systems.
• Previous experience leading and developing threat risk modelling and security assessments for complex systems.

Minimum recruitment standards outline the minimum education and experience required for appointment to a job classification.

Refer to https://www.alberta.ca/alberta-public-service-minimum-recruitment-standards.

Notes

Full-time position working 36.25 hours per week.

If a security screening is required:

• Final candidates will be required to undergo a security screening.
• Any costs associated with obtaining the required documents/checks as noted or interview travel expenses, will be the responsibility of the candidate. Out-of-province applicants can obtain the required documents/checks from the province they currently reside in.

A cover letter outlining how your experience relates to the qualifications of this role is required.

Do you have security related certifications such as CISSP, OSCP, CEH? If yes, please include this information in your resume.

In your resume, please include dates (including months and years) associated with all education and work experience. Also, please indicate whether your work experience is casual, part-time, or full-time. For example, January 15, 2006 - June 25, 2009: Assistant (PT three 8 hrs. shifts/week).

Any costs associated with obtaining the required documents/checks as noted or interview travel expenses, will be the responsibility of the candidate. Out-of-province applicants can obtain the required documents/checks from the province they currently reside in. 

Links and information on what the GoA have to offer to prospective employees.

• Working for the Alberta Public Service - https://www.alberta.ca/advantages-working-for-alberta-public-service.aspx
• Public Service Pension Plan (PSPP) - https://www.pspp.ca
• Alberta Public Service Benefit Information - https://www.alberta.ca/alberta-public-service-benefits    
• Professional learning and development - https://www.alberta.ca/professional-development-support-directive
• Research Alberta Public Service Careers tool - https://researchapscareers.alberta.ca
• Positive workplace culture and work-life balance
• Opportunity to participate in flexible work arrangements such as working from home up to two days per week and modified work schedule agreement.
• Leadership and mentorship programs