Senior Analyst, Information Security

CityofOttawa•Ottawa, ON

1d•CA$93,765 - CA$114,098•Onsite

About The Position

The Technology Security Branch is responsible for the security engineering, architecture support, and maintenance of the City of Ottawa’s technology infrastructure. This branch plays a critical role in safeguarding the City’s security infrastructure and related systems, which are essential enablers of all IT services delivered to the corporation and residents. This includes strategic planning for complex security technologies and projects. The Senior Security Analyst provides advanced technical leadership across the City’s security program, overseeing data protection, cloud security, and technical security operations. This role leads monitoring, investigation, and remediation of data activity across cloud platforms and SaaS applications, including reviewing DLP reports, validating approved tools, and engaging business units to address risky behaviors. The analyst also provides hands‑on oversight of security tools, alert triage, and remediation coordination across cloud, endpoint, infrastructure, and application environments. Working closely with enterprise technology teams, this position supports integrated security service models that embed security operations into daily technology delivery while ensuring alignment with corporate security standards.

Requirements

Completion of 3 year university degree or community college diploma in computer science.
Minimum of 5 years of network related experience
Information security principles such as access control, encryption, authentication, etc.
Threat and risk assessment methodologies
Computing environments including networks, servers, operating systems, platforms, firewalls, etc.
Security tools and solutions at both the client and enterprise levels
Data security methods, access control systems, encryption and authentication tools
Project management methodologies
Enterprise-wide networking concepts & related security issues
Communication protocols and their inherent security risks and exposures
Public key infrastructure policies and practices
Intrusion detection systems
Security software reporting capabilities
City services & applications dependent on the network
Windows desktop operating system
Knowledge of applicable health and safety legislation, including the rights and duties of workers.
Write clear and concise reports, documentation and procedures
Prepare and deliver presentations to all levels of staff and clients
Manage technical resources in a project environment
Analyze problems and situations and develop feasible solutions
Think in conceptual or abstract terms
Analyze and accurately document new and existing processes
Work in close partnership with other IT resources
Work with sensitive information and maintain confidentiality
Work calmly and systematically under stressful situations
Liaise effectively with all levels of staff, city partners and vendors
Plan for the impact of technology changes on the city
Tactful and helpful with other staff
Able to interact with other organizations’ technical and non-technical staff effectively
Well organized and reliable
Able to handle multiple tasks, and work independently with minimum supervision
Trustworthy with sensitive information
English oral, reading, writing

Nice To Haves

Experience and formal training combined with demonstrated performance and ability may substitute for stipulated academic requirements.

Responsibilities

Provides advanced technical leadership across the City’s security program, overseeing data protection, cloud security, and technical security operations.
Leads monitoring, investigation, and remediation of data activity across cloud platforms and SaaS applications.
Reviews DLP reports, validates approved tools, and engages business units to address risky behaviors.
Provides hands-on oversight of security tools, alert triage, and remediation coordination across cloud, endpoint, infrastructure, and application environments.
Supports integrated security service models that embed security operations into daily technology delivery while ensuring alignment with corporate security standards.