Under the general supervision of the IT Manager - Infrastructure, the Information Security Specialist is responsible for administering the Information Security Program for Winnipeg Police Service (WPS). The position provides strategic and technical leadership in the areas of information security governance, security operations, security architecture, risk management, identity and access security, and security assurance.
The Information Security Specialist designs, implements, and maintains security controls, policies, standards, and procedures to protect WPS information assets and technology services. The position leads security incident investigations, threat and risk assessments, security architecture reviews, vendor security assessments, and security compliance activities, and serves as the technical authority for identity and access security services.
The Information Security Specialist works closely with business stakeholders, project teams, vendors, and external service providers to ensure security requirements are integrated into technology solutions and operational processes. The position provides technical direction to the Information Security Analyst and maintains the documentation, standards, and operational procedures required to support an effective Information Security Program.
As an Information Security Specialist you will:
-
Lead and administer the Information Security Program for the Winnipeg Police Service.
-
Lead security operations and incident response.
-
Lead security architecture, assurance, and risk management.
-
Lead identity and access security services.
-
Document the technical and operational environment.
Your education and qualifications include:
-
University Degree in Computer Science (or related field), or College Diploma in Business Information Technology (or related field) with demonstrated equivalent amount of experience.
-
Minimum of 48 months' progressive experience in information technology with a focus on Information Security and Networking within the last 5 years, preferably in a senior role.
-
Advanced working knowledge of and experience implementing Information Security methods and procedures.
-
Knowledge of enterprise networking and security technologies, including TCP/IP, routing, switching, VLANs, VPNs, wireless networks, network segmentation principles, and firewall technologies such as Fortinet FortiGate.
-
Thorough knowledge of identity and authentication technologies, including Public Key Infrastructure (PKI), certificate-based authentication, PIV standards, Single Sign-On (SSO), SAML, and OIDC.
-
Demonstrated knowledge of IT network security scanning technologies.
-
Knowledge of Microsoft Certificate Authority.
-
Knowledge of Microsoft server and desktop operating systems.
-
Knowledge of Microsoft Active Directory Management.
-
Knowledge of security frameworks and benchmarks, including CIS Controls, NIST SP 800-53, and the National Police Service (NPS) network security policy.
-
Expert knowledge of Microsoft Entra ID security controls, with expert-level ability to design, implement, and administer Conditional Access policies, multifactor authentication, and role assignments.
-
Advanced knowledge of configuring and tuning Endpoint Detection and Response (EDR) platforms, including detection policies, automated response actions, and exclusions.
-
Knowledge of platform security concepts, hardware-based security risks, and trusted computing technologies, including the ability to evaluate associated risks and recommend appropriate security controls.
-
Knowledge of emerging cryptographic threats, quantum-resistant security concepts, and their potential impact on enterprise security architectures, authentication systems, and long-term data protection strategies.
-
Knowledge of Data Loss Prevention (DLP) concepts, data classification, and the tracking of sensitive data movement.
-
Ability to plan, design, and lead security initiatives using a business and technical risk-based approach.
-
Ability to manage a RADIUS/NAC-based solution for user and machine authentication policies, such as Aruba ClearPass or Cisco ISE.
-
Demonstrated effective verbal and written communication skills and the ability to interact professionally with a diverse group, executives, directors, and subject matter experts.
-
Ability to successfully multitask with frequent interruptions and complete assignments in a timely manner, coordinate multiple initiatives simultaneously.
-
Ability to work independently with minimal supervision, developing and implementing new procedures.
-
Ability to conduct information security threat and risk assessments, maintain an organization-wide information security risk register, and support risk identification, analysis, treatment, and acceptance processes.
-
Ability to assess security, privacy, and compliance risks associated with vendors, cloud services, AI technologies, applications, and other technology solutions.
-
Ability to evaluate results, assess severity and probability of risk, determine priorities, propose mitigations/solutions, and assist with/implement appropriate remediation activities.
-
Ability to troubleshoot and problem solve.
-
The ability to establish and maintain a positive, respectful, safe and healthy work environment that supports the physical, psychological and social working relationships with members at all levels in a team environment.
*IMPORTANT: Applicants who have been educated outside of Canada must have education which is comparable to the minimum qualification in Canada. Applicants submitting foreign credentials require an official academic assessment report issued by a recognized Canadian assessment service** at application. If you are not submitting proof of Grade 12 completed within Canada, we require you to submit proof of a full-time, two-year post-secondary program completed in Canada.
If you are not submitting proof of Grade 12 completed within Canada, we require you to submit proof of a full-time, two-year post-secondary program completed in Canada.
Minimum requirements:
Conditions of Employment:
-
Ability to pass a level 3 Winnipeg Police Service security check and maintain clearance
-
Possess and maintain a valid Class 5.0 Driver's License
-
Ability to successfully complete additional training as defined by the Service
-
Willingness and ability to work overtime, holidays and weekends as required by the Service
-
Ability to obtain and maintain Certified Information Systems Security Professional (CISSP) certification. (within 18 months of commencement in the position)
Winnipeg Police Service Competencies:
-
Dealing with Ambiguity
-
Conflict Management
-
Integrity and Trust
-
Priority Setting
-
Results Oriented
