Senior Officer, Digital Risk Mgmt & Advisory

Ottawa, ON
On-site
Posted Oct 22, 2026
1 position

$95,128–$120,309 / year

Opens an external site

Employment type: Full-time, Temporary
Experience level: Senior · 5+ years
Minimum education: Bachelor’s degree
Apply by: Nov 5, 2026
Posting language: English
Working hours: 35 hours per week

Job summary

The role involves overseeing cyber security and digital risk management programs, including conducting comprehensive evaluations of technology systems and security controls. You will provide strategic advice and design security protocols that impact organizational compliance, employee performance management, and internal investigations.

Job details

Requisition ID: 23680 Department: Finance and Corporate Services Dept. Service: Chief Information Security OfficeEmployment Type: 2 Full Time Temporary Positions (Up to 1 Year)Work Hours: 35.00 /hours per weekAffiliation: MPE/New City MPE Salary Information: $95,127.76 - $120,309.28 annually (2025 rates of pay)Location: 100 Constellation, Nepean Job Category: Cybersecurity Application Close: 04/11/2026JOB SUMMARY The Chief Information Security Office is responsible for delivering and overseeing cyber security and digital risk management programs across all City business lines, including strategic enablement and emerging threats identification, policy and implementation oversight, digital risk management, and security governance and culture transformation. The Digital Risk Management and Advisory Unit is responsible for the governance of security risk management programs across the organization. In this role, you will conduct comprehensive evaluations of technology programs, systems, networks, and security controls to assess compliance, effectiveness, vulnerabilities, and deviations from established standards and policies. Based on these evaluations you will develop cyber threat intelligence and supply chain risk management practices to identify, assess, communicate, and respond to evolving digital risks across the enterprise. You are responsible for designing and supporting digital risk management and cyber security programs that have a direct impact on and involvement in confidential matters affecting the City’s workforce, including assessments of cyber threats with implications on confidential data, employee performance, organizational security, and compliance with labour-related legislation. You provide strategic advice and make recommendations that directly impact employee performance management and disciplinary actions, directing access, privacy, and policy compliance, and working in close collaboration with HR, Legal, and Labour Relations to address situations of misconduct where applicable. You play a critical role in developing strategies and controls that may inform or result in disciplinary action, workplace investigations, or employment restrictions. You are entrusted with designing and recommending digital security protocols, internal investigations protocols, and system access criteria in line with collective agreements and legislative obligations, impacting the economic lives of employees.EDUCATION AND EXPERIENCE Completion of a 4 year university degree in Information Security, Computer Science, Risk Management or other related field Minimum of 7 years of progressively responsible experience in an Information Technology role, Information Systems Audit role, Information Security role, or Digital Risk Management role CERTIFICATIONS AND LICENCES Related Information/Technology Security certification is desirable (e.g. CISSP, CISM, CISA, CRISC, SABSA, CAP, EC-Council)KNOWLEDGE Deep subject matter expertise in Information Security, Compliance and/or Risk Management programs and best practices, preferably within the Tech and Public Administration Sectors Experience in building or maintaining risk management programs across a wide variety of regulatory and compliance frameworks In depth knowledge of least two of the following: the NIST Cyber Security Framework, ISO 2700x, SOC1 & 2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc. Sufficient technical knowledge of technical concepts relevant to cloud computing environments: logical access, agile development process, security architecture, information security, network security, and privacy Strong understanding of current digital products and services to include web, mobile, chat, text and the evolving use of artificial intelligence Legislation, regulations, policies, standards and guidelines relevant to the work Industry trends and developments Must be familiar with applicable health and safety legislation, have knowledge of any potential or actual danger to health or safety in the work place, and have knowledge of appropriate actions to be taken in order to ensure the health and safety of staff in accordance with applicable legislation and City policies and procedures COMPETENCIES, SKILLS AND ABILITIES Ability to work well in fast paced team environment with a wide range of technical and non-technical teams Excellent writing, communication, and organizational skills - strong attention to detail Ability to confidently convey nuanced information to a variety of audiences, including senior leaders Core Behaviours Core behaviours define the City’s expectations of the behaviours employees should demonstrate in performing their work. They are reflective of the City’s culture and values and guide all our present and future activities. Every employee is encouraged to learn, embody and demonstrate these core behaviours. Review the Core Behaviours. Leadership Competencies The City has defined key competencies that leaders are expected to embody and demonstrate to successfully move the organization towards achieving its strategic objectives and create an organizational culture that supports and empowers employees to excel, grow and reach their full potential. These leadership competencies and associated behaviours are expected to be demonstrated by leaders at all levels of the organization. Review the Leadership Competencies. WHAT YOU NEED TO KNOW Language Requirement: English oral, reading, writing Police Record Check: The successful candidate will be required to complete a Criminal Records and Judicial Matters Check (Level 2) with the Police Services detachment in their jurisdiction to the City of Ottawa’s satisfaction. Experience and formal training combined with demonstrated performance and ability may substitute for stipulated academic requirements. Please save a copy of the job poster. Once the closing date has passed, it will no longer be available. We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted. The City of Ottawa promotes the principles of diversity and inclusion and adheres to the tenets of the Canadian Human Rights Act and the Ontario Human Rights Code. We encourage applications from members of Indigenous, Black and other racialized communities, persons with disabilities, women and non-binary persons, persons of all ethnic origins, religions, sexual orientations, classes, gender identities and expressions. Candidates are encouraged to self-identify as a member of one or more designated employment equity groups in the self-identification questionnaire. The City of Ottawa provides accommodation to applicants during all parts of the hiring process, upon request. If contacted to proceed to the selection process, please advise us if you require any accommodation. Accessible formats and communication supports are available upon request. Please contact the Employee Service Centre at 613-580-2424 extension 12211 or via email at esc-cse@ottawa.ca. .

What you’ll do

Requirements

Candidates must possess a 4-year university degree in a relevant field and a minimum of 7 years of progressively responsible experience in IT, audit, or security roles. Deep expertise in regulatory frameworks such as NIST, ISO 2700x, or PCI DSS is required, along with strong communication skills.