Junior IT Security Specialist (12 month temporary)

About the Workplace Safety and Insurance Board (WSIB)

We’re here to help. When an injury or illness happens on the job, we move quickly to provide wage-loss benefits, medical coverage and support to help people get back to work. Funded by businesses, we also provide no-fault collective liability insurance and access to industry-specific health and safety information. We are one of the largest insurance organizations in North America covering over five million people in more than 300,000 workplaces across Ontario. For more information, visit wsib.ca.

At the WSIB, you’ll have the opportunity to:

• explore many career paths and follow your passion
• continuously learn and grow professionally
• be recognized for the great work you do
• participate in programs that support your health and wellbeing

You’ll also receive a competitive salary and may be eligible to participate in our health and dental plan.

This role is an on-site position and requires the successful applicant to commit to an in-office work arrangement up to 5 days a week.

JuniorSecurity Specialist

12-month temporary opportunity

Salary Grade: N05 | $71,200.00 - $89,000.00

About the role

We’re looking for a Junior Security Specialist to join our Cybersecurity Design and Governance team. This is a broad cybersecurity opportunity for someone early in their career who wants exposure to cybersecurity governance, risk management, security awareness, procurement, projects and day-to-day security activities. You’ll work with cybersecurity specialists and partners across WSIB, as well as third-party providers, to help maintain cybersecurity policies and standards, support security risk assessments, coordinate cybersecurity education and awareness initiatives, and contribute to projects and procurement activities. A key part of this role is also supporting our Cybersecurity Champions Program, including conferences, webinars, workshops and other communications that help strengthen cybersecurity awareness across the organization.

What you’ll do

Cybersecurity Governance & Compliance

• Support the development, review and maintenance of cybersecurity policies, standards, processes and procedures.
• Work with internal stakeholders and third-party providers to ensure cybersecurity requirements and controls are understood and applied.
• Maintain Design and Governance information and documentation, including quality assurance, appropriate storage and completeness.
• Support cybersecurity-related audit requests.

Security Risk Management

• Support the annual cybersecurity risk analysis and monthly risk reporting.
• Assist Senior Security Specialists with security risk assessments and help ensure appropriate control practices are implemented.
• Contribute to ongoing information security risk management activities.

Cybersecurity Education & Awareness

• Coordinate the Cybersecurity Champions Program, including meetings, workshops and guest speaker sessions.
• Plan and coordinate annual Cybersecurity Conference Days.
• Coordinate Cybersecurity Intelligence Squad webinars and support webinar development.
• Support cybersecurity communications and phishing exercises in collaboration with Senior Security Specialists.

Projects, Operations & Procurement

• Support cybersecurity activities on smaller projects and assist Senior Security Specialists on larger initiatives.
• Contribute to the planning, design and implementation of security architectures, procedures and solutions that safeguard access to WSIB data and technology resources.
• Support logical access controls and user/resource verification mechanisms.
• Help ensure cybersecurity controls are implemented across projects and business-as-usual activities.
• Facilitate cybersecurity requirements for RFP and procurement requests, including evaluations for procurements under $100K.
• Research security products, services and emerging technologies to support procurement recommendations.
• Monitor security publications, forums and other sources to stay informed about emerging threats and security control technologies.

What you’ll need

• 1 year of experience in cybersecurity, IT risk, IT governance, IT compliance, or a related IT security environment.
• Post secondary education in Information Technology, Cybersecurity, or a related field.
• Foundational knowledge of cybersecurity governance, IT risk management and security controls.
• Familiarity with recognized frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, ITIL or CRISC concepts.
• Strong coordination and organizational skills, with the ability to support multiple initiatives, projects and stakeholders.
• Strong written and verbal communication skills, including the ability to help develop cybersecurity communications, presentations, webinars and awareness materials.
• Ability to work collaboratively with IT teams, business partners, vendors and cybersecurity specialists.
• Comfort working with documentation, reporting, risk information, policies, standards and processes.

Certifications may include

Relevant information security or technical certifications such as:

• CISSP
• CRISC
• SANS/GIAC
• CompTIA Security+
• Cisco security certifications
• Microsoft technical certifications

Why this role?

This role offers exposure to several areas of cybersecurity rather than focusing on just one specialty. You’ll have the opportunity to contribute to governance, risk, awareness, procurement and security projects, while working alongside experienced cybersecurity professionals. It’s a strong opportunity for someone looking to continue building their cybersecurity career while contributing to work that helps protect WSIB’s information, technology and services.

Our commitment to equity, diversity and inclusion

We respect and value the diversity of our people. We strive to create an environment where employees can be themselves and where our differences are celebrated. We value and celebrate diversity and are committed to creating inclusive experiences for both our employees and prospective employees. We invite all interested individuals to apply. If you require accommodations in order to apply to this position please contact [email protected]. If you are invited to participate in the interview or assessment process, you can advise our Recruiter of your accommodation needs at that time. Please visit our EDI Vision to learn more about what actions WSIB are taking to advance our commitment to equity, diversity and inclusion and to support all employees participating and contributing to their full potential

Disclosing conflicts of interest

As public servants, employees at the WSIB have a responsibility to act in an ethical way at all times to create a respectful workplace and maintain public trust. Job applicants are required to disclose any circumstance that could result in a real, potential or perceived conflict of interest. A conflict of interest is any situation where your private interests may impair or be perceived to impair the decisions you make in your official capacity. This may include: political activity, directorship, other outside employment and certain personal relationships (e.g. with current WSIB employees, customers and/or stakeholders). If you have any questions about conflict of interest obligations and/or how to make a disclosure, please contact the Talent Acquisition Centre at [email protected].

Privacy information

We collect personal information from your resume, application, cover letter and references under the authority of the Workplace Safety and Insurance Act, 1997. The Talent Acquisition Centre and WSIB hiring parties will used this information to assess/validate your qualifications, determine if you meet the requirements of vacant positions and/or gather information relevant for recruitment purposes. If you have questions or concerns regarding the collection and use of your personal information, please contact the WSIB’s Privacy Office at [email protected]. The Privacy Office cannot provide information about the status of your application.

As a precondition of employment, the WSIB requires that prospective candidates undergo a criminal records name check any time before or after they are hired.

To apply for this position, please submit your application by the closing date.