Director, Cyber Security Intelligence, Analytics and Monitoring

Director, Cyber Security Intelligence, Analytics and Monitoring

Cyber Security Modernization

Burnaby, BC

In accordance with the Purpose, Vision, Values and Coast Salish Teachings, and strategic directions of PHSA, safety, including both patient and employee safety, is a priority and a responsibility shared by everyone at PHSA. As such, the requirement to continuously improve quality and safety is inherent in all aspects of this position.

The Provincial Health Services Authority (PHSA) plans, manages, and evaluates selected specialty and province-wide health care services across BC, working with the geographic health authorities to deliver technology solutions that improve the health of people living in BC. PHSA embodies values that reflect a commitment to excellence.

Reporting to the Senior Executive Director, Security for Provincial Digital and Health Information Systems (PDHIS), the Director acts as an interface between the Senior Executive Directors, strategic and governance-based activities, and the tactical work of the technology-focused analysts, engineers, and managers in their teams that provide services to PHSA, Vancouver Coastal Health (VCH), Providence Health Care (PHC), Fraser Health Authority (FHA), in addition to security services made available to other regional health organizations.

The Director provides reporting to the Senior Executive Director, Vancouver Coastal Health Authority, PHSA, and Providence Health Care (VPP) risk management program and PDHIS technology leads, and develops and implements long-term and short-term security strategies, policy developments, and operational requirements, including evaluation of services and capabilities, in relation to security strategies. The Director collaborates with other provincial security leaders within BC, and represents PHSA, VCH, PHC, Cyber Security operations on provincial security committees, enabling a consistent and strategic approach to applying security controls to enable the overall strategic directions and organizational goals.

The Director manages the definition, supervision, and sustainment of a wide variety of security strategies; makes critical decisions based on many competing factors and views of vested parties; proactively engages and provides direction or advice; and leads a team of professional experts in the delivery of services and advice. The Director is accountable for developing and managing an operating budget, allocating and monitoring resources, as well as all portfolio staff including hiring, termination, and performance management.

The Director oversees their team's operations for the entire VPP and Fraser Health Authorities, and for certain systems on behalf of the Ministry of Health (MoH) and services sector wide. This large and complex mandate requires an experienced Cyber Security professional to lead fast-paced teams of professionals and manage executive reporting.

Specific Portfolio's:

Cyber Security Operations - Security Operations and Cyber Incident Response teams are responsible for overseeing the PHSA's overall security operations with a specific focus on clinical systems, administrative systems, operational technologies (OT), information, data security, and network security. Security Operations teams will work closely with relevant teams to manage deployed security technologies across on-premises and cloud environments, and other asset focused security processes. Cyber Incident Response Management teams will work closely with supporting teams to ensure effective and efficient response to cyber incidents, including triage, investigation, and response, and is the primary leader working with management during a cyber crisis. The Director of Cyber Security Operations leads the Cyber Security Operations team by providing oversight to management of daily operations and holding accountability to executive vested parties.

Cyber Security Intelligence, Analytics & Monitoring - These teams are responsible for delivering Cyber Security threat detection capabilities and leveraging threat intelligence to proactively identify cyber events to maintain PHSA's Cyber Security resiliency. Additionally, the Security Monitoring & Vulnerability Management teams work with adjacent Cyber Security teams to leverage technology to enable more efficient protect, detect, and respond processes. These teams are supported by the Security Operations and Incident Response team and broader PDHIS teams to respond to identified Cyber Security threats. The Director of Intelligence & Analytics leads these teams by providing oversight to management of daily operations and while holding accountability to executive parties.

Cyber Security Strategy, Assessment, & Awareness - The Compliance team develops and maintains security policy and standard documentation. The Assessment and Advisory Services team works closely with technology, security, and privacy teams across Vancouver Coastal Health Authority, PHSA, and Providence Health Care (VPP) to provide delivery of project-based and ongoing security assessment and advisory requirements. The Security Architecture team works closely with Enterprise Architecture teams to develop and maintain the organization's security architecture artifacts that can be used by technology and security teams across supported organizations. The Director of Cyber Security Strategy, Assessment, & Awareness leads these teams by providing oversight to management of daily operations and maintaining accountability to executive parties.

What you'll do

• Negotiates and facilities consensus both internally across PDHIS and PHSA and externally including VCH, PHC, regional Health Organizations, MoH, as well as vendors, suppliers, and contractors, thereby managing the intersections of a complex mandate with various on-going initiatives.
• Implements and leads the effective tactical execution of the entire team's strategic and capability roadmap, in consultation with organizational leadership.
• Promotes effective relationships across VPP organizations, FHA, and various internal and external groups and partner organizations including the MoH and other regional health authorities, by engaging vested parties.
• Partners with other business and Cyber Security leaders to direct PHSA's strategy, ensure directional alignment and drive continual improvement.
• Develops and maintains the vision and service plan that supports the goals and strategies of PHSA, and other partner organizations served.
• Oversees the team's operations and cyber risk reporting mandates to key vested parties.
• Administers the team's delivery of periodic security audits to provide assurance for the security of systems and data.
• Develops and manages the operating budget, allocates resources, and supports the annual capital planning process. Monitors budget performance, planning and adjusting operations-and/or-staffing to meet projections and annual targets, approves expenditures and prepares summaries for fiscal reporting.
• Oversees and approves budget for direct reports.
• Manages and advances Cyber Security standards and policies to ensure continual effectiveness and alignment with relevant and emerging best practices.
• Ensures effective programs are in place to deliver and maintain a high level of security awareness among staff at all levels.
• Executes periodic security audits to provide assurance for the security of systems and data and ensures that the risks associated with security audit findings are adequately tracked from identification through remediation.

What you bring

Qualifications

• A level of education, training, and experience equivalent to a Master's degree in Computing Science or related discipline and at least ten (10) years of recent, progressive experience in information security management roles.
• Excellent communication skills including the ability to facilitate, negotiate, and persuade others.
• Ability to respond to vested parties' needs supported by an acute awareness of actions' impact.
• Demonstrated ability to problem-solve with a global perspective in order to incorporate the organization's systems and strategies when developing viable solutions to problems.
• Hold a valid CISSP, CISM or similar certification.
• Be results-oriented with highly developed leadership skills.
• Ability to supervise, lead and mentor staff.
• Ability to establish courses of action for self and others that are results oriented.
• Commitment to the value of continuous learning.
• Ability to deal effectively with all levels of staff.
• Ability to manage a technically complex and fast-changing environment.
• .• Working knowledge of security frameworks such as NIST and CIS.
• Experience leading or performing Cyber Security assessments and familiarity with formal audit processes.

Skills & Knowledge

• Demonstrated knowledge and understanding of legislative obligations and provincial commitments found in the foundational documents - including Truth & Reconciliation Commission's Calls to Action (2015), In Plain Sight (2020), BC's Declaration on the Rights of Indigenous Peoples Act (2019), United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP), Reclaiming Power and Place Missing and Murdered Indigenous Women & Girls Calls for Justice (2019), the Declaration Act Action Plan and Remembering Keegan: A First Nations Case Study - and how they intersect across the health care system.
• Models and supports full team commitment to Indigenous-specific anti-racism, anti-racism and Indigenous Cultural Safety including oversight and commitment to education strategy.
• Collaborates with peers to ensure Indigenous-specific Anti-racism and ICSH are applied holistically through department as whole.
• Commitment to upholding the shared responsibility of creating lasting and meaningful reconciliation in Canada as per TRC (2015) and BC's Declaration on the Rights of Indigenous Peoples Act (2019).
• As a strong asset for consideration, we are looking for our successful candidate to have: Knowledge of social, economic, political and historical realities of settler colonialism on Indigenous Peoples and familiarity with addressing Indigenous-specific anti-racism, anti-racism and Indigenous Cultural Safety and foundational documents and legislative commitments (The Declaration Act, the Declaration Action Plan, TRC, IPS, Remembering Keegan, etc.).

What we bring

Every PHSA employee enables the best possible patient care for our patients and their families. Whether you are providing direct care, conducting research, or making it possible for others to do their work, you impact the lives of British Columbians today and in the future. That's why we're focused on your care too - offering health, wellness, development programs to support you - at work and at home.

• Join one of BC's largest employers with province-wide programs, services and operations - offering opportunities for growth, development, and recognition programs that honour the commitment and contribution of all employees.
• Access to professional development opportunities through our in-house training programs, including +2,000 courses, such as our San'yas Indigenous Cultural Safety Training course, or Core Linx for Leadership roles.
• Enjoy a comprehensive benefits package, including municipal pension plan, and psychological health & safety programs and holistic wellness resources.
• Annual statutory holidays (13) with generous vacation entitlement and accruement.
• PHSA is a remote work friendly employer, welcoming flexible work options to support our people (eligibility may vary, depending on position).
• Access to WorkPerks, a premium discount program offering a wide range of local and national discounts on electronics, entertainment, dining, travel, wellness, apparel, and more.

Job Type: Regular, Full-Time
Wage:

Salary Range: $$141,146 - $202,898 /year. The starting salary for this position would be determined with consideration of the successful candidate's relevant education and experience, and would be in alignment with the provincial compensation reference plan. Salary will be prorated accordingly for part time roles.
Location: 1795 Willingdon Ave, Burnaby, BC V5C 6E3
Closing date: Applications accepted until position is filled
Hours of Work: 0800-1600 (Monday to Friday)
Requisition # 172335E

What we do

The Provincial Health Services Authority ( PHSA ) plans, manages and evaluates specialized health services with the BC health authorities to provide equitable and cost-effective health care for people throughout the province. Our values reflect our commitment to excellence and include: Respect people - Be compassionate - Dare to innovate - Cultivate partnerships - Serve with purpose.

Learn more about PHSA and our programs: jobs.phsa.ca/programs-and-services

PHSA is committed to equity in our hiring and employment practices. With learning and compassion, we are addressing existing inequities and barriers throughout our systems. PHSA is seeking to create a diverse workforce and to establish an inclusive and culturally safe environment. We invite applications and enquiries from all people, particularly those belonging to the historically, systemically, and/or persistently marginalized groups identified under the B.C. Human Rights Code.

One of PHSA's North Star priorities is to eradicate Indigenous-specific racism, which includes dismantling barriers to health care employment at every level. We welcome Indigenous individuals to apply and/or contact the Sanya'kula Team (Indigenous Recruitment & Employee Experience) for support at indigenous.employment@phsa.ca .

Indigenous-specific anti-racism initiatives are rooted in addressing the unique forms of discrimination, historical and ongoing injustices, and marginalization faced by Indigenous peoples. These initiatives align with an Indigenous rights-based approach, recognizing the inherent rights and self-determination of Indigenous communities. PHSA must uphold legislative obligations and provincial commitments found in the foundational documents such as including Truth & Reconciliation Commission's Calls to Action (2015), In Plain Sight (2020), BC's Declaration on the Rights of Indigenous Peoples Act (2019), United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP), Reclaiming Power and Place Missing and Murdered Indigenous Women & Girls Calls for Justice (2019), the Declaration Act Action Plan and Remembering Keegan: A First Nations Case Study.

ATTN: PHSA Employees:

To be considered as a PHSA employee (internal applicant) for this position, you must apply online via your internal profile at http://internaljobs.phsa.ca

Please note the internal job posting will no longer be accessible after the expiry date of September 16, 2024. If the internal job posting has expired, please contact the Internal Jobs Help Desk and advise that you would like to be considered as a late internal applicant for this position. Please do not apply for the external job posting.

If you have not registered your internal profile, a password is required to log in for the first time. To obtain your password, please contact the Internal Jobs Help Desk at 604-875-7264 or 1-855-875-7264. Please note regular business hours are Monday - Friday (excluding stats), 8:30am to 4:30pm. For inquiries outside of regular business hours, please email the Internal Jobs Help Desk at internaljobshelpu@phsa.ca and a Help Desk Representative will contact you the next business day.