Lead Advisor, Privacy and Information Security Risk - Vancouver, Canada - UBC

UBC

Verified Company

Vancouver, Canada

1 week ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Staff - Non Union

Job Category
M&P - AAPS

Job Profile
AAPS Salaried - Information Systems and Technology, Level D

Job Title
Lead Advisor, Privacy and Information Security Risk

Department
Privacy and Information Security | Safety & Risk Services | VP Finance and Operations

Compensation Range
$8, $12,575.08 CAD Monthly

The Compensation Range is the span between the minimum and maximum base salary for a position.

The midpoint of the range is approximately halfway between the minimum and the maximum and represents an employee that possesses full job knowledge, qualifications and experience for the position.

In the normal course, employees will be hired, transferred or promoted between the minimum and midpoint of the salary range for a job.

Posting End Date
May 14, 2024

Note:
Applications will be accepted until 11:59 PM on the day prior to the Posting End Date above.

Job End Date

**This position is expected to be filled by promotion/reassignment and is included here to inform you of its vacancy at the University.

At UBC, we believe that attracting and sustaining a diverse workforce is key to the successful pursuit of excellence in research, innovation, and learning for all faculty, staff and students.

Our commitment to employment equity helps achieve inclusion and fairness, brings rich diversity to UBC as a workplace, and creates the necessary conditions for a rewarding career.

Job Summary

This position is a management position within the Privacy & Information Security Management (PrISM) Safety & Risk Service (SRS) team.

UBC's PrISM program is an ongoing initiative to reduce the risk of a major privacy or information security breach at UBC through security governance, technology advancement, training, awareness and communications, risk management and compliance support, system identification and classification.

This is an exciting opportunity to work with a dynamic, risk focused team that collaborates across UBC including with management and staff in other units, such as the Cybersecurity team, University Counsel, Enterprise Risk and Assurance, the Office of the CIO and UBC IT teams.

The Safety & Risk Services team is a key component of the PrISM program, delivering Privacy Impact Assessments (PIA) including information security reviews, campus wide training and risk advisory services to UBC.

The team's focus is to maintain public trust in UBC, protect personal information of the UBC community and keep UBC confidential information secure, whilst enabling technology-supported business initiatives to succeed.

This role combines operational project assurance responsibilities with risk assessment content and tools development to enable the success of the PrISM Safety & Risk Services team

Key responsibilities include:

For large, complex and high-risk projects, conduct or oversee Privacy Impact Assessments and Security Threat Risk Assessments, utilizing assessment frameworks and tools.

Provide highly specialized privacy and information security technical expertise and mentoring to project teams, and PIA Risk Advisors to ensure reasonable privacy and information security measures are in place through every phase of the project's life cycle including project planning, requirements definition, procurement, implementation and operationalization of new technology services.

Work with the CISO office, UBC IT, Procurement and project teams to embed privacy and information security activities, including privacy and security requirements, architectures, testing and risk assessments, in project lifecycles.

Lead special projects relating to privacy and information security risk assessment e.g.

investigations into emerging risk areas, writing briefing notes for the PrISM Executive Leadership Committee, responding to special requests for process and technology review.

Organizational Status

The Lead Advisor, Privacy and Information Security Risk will support the Privacy and Information Security Management (PrISM) program at UBC as part of the SRS team.

The incumbent will collaborate and work closely with management and staff in other units, including Office of the University Counsel, the Office of the CIO, Enterprise Data Governance, UBC IT and Faculty IT teams.

Work Performed

For large, complex and high-risk projects, conduct or oversee Privacy Impact Assessments and Security Threat Risk Assessments, utilizing assessment frameworks and tools.

Engage broadly (through training, workshops and relationship building) within assigned projects to raise awareness of privacy and information security risk and mitigations.