Selection Process Number:

26-27-SIF-EA-JR100484

Division:

Technology Risk Division

Group and Level:

RE 05

Salary Range:

$105,200.00 - $135,300.00

Employment Tenure:

Indeterminate

Positions Available:

1

WHO CAN APPLY

Persons residing in Canada, and Canadian citizens and Permanent residents abroad.

IMPORTANT INFORMATION

This poster will close at 12:00 AM EST on the posting’s indicated closing date (note that for those in the Pacific Time Zone, this corresponds to 9:00PM PST on the previous day). To be considered, your application must be submitted before the specified deadline. If you experience any technical issues submitting your application, please email a screenshot of the issue to [email protected].

 

Due to weekly system maintenance, Workday will be unavailable for 3 hours every Friday from 11pm to Saturday 2am EST.

Applicants must submit a resume as part of this job application. Do not include a cover letter as part of your submission.

We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.

Information on assessment accommodation.

POSITION DETAILS

CLASSIFICATION:

This position is classified at the RE- 05 group and level which is roughly equivalent to the CT-FIN-03 group and level.

LOCATION:

This position is located in Toronto. Other satellite locations such as Ottawa, Vancouver or Montreal may be approved, depending on worksite availability.

OSFI’s work model includes telework and mandatory onsite presence. The terms of the employee’s telework arrangement will be established in accordance with the Directive on Telework and related organizational directions. These arrangements must be reviewed annually, at a minimum, and can be subject to change.

PROCESS INTENT

The immediate need is to staff one position with a language requirement of bilingual imperative CBC/CBC on an indeterminate basis.

A pool of qualified or partially qualified candidates may be created to staff similar or identical positions with various linguistic requirements and/or profiles, security requirements, tenures, and/or locations within the Office of the Superintendent of Financial Institutions (OSFI), which may vary according to the position being staffed.

KEY RESPONSIBILITIES:  

Provides specialty technology and cyber risk expertise in assessing risks at Federally Regulated Financial Institutions (FRFIs). Assessment may involve identifying FRFI-specific risks, industry-wide risks and/or sector specific trends and developments related to technology and cyber risks that may impact a FRFI’s operational resilience. Expertise includes technology and cyber risk management practices, familiarity with penetration testing, red and blue teamwork and in-depth understanding and assessments of threats to any process or function that involves systems, data, infrastructure, networks, cyber security and digital technology impacting the financial services industry.

ESSENTIAL QUALIFICATIONS

Official Language Proficiency:

• Bilingual - Imperative (CBC/CBC)

Information on language requirements

In order to be considered, your application must clearly explain how you meet each of the following education and experience criteria.

ESSENTIAL EDUCATION:

• A degree OR diploma from a recognized post-secondary institution with specialization in information technology, information/cyber security, computer science, engineering, business, commerce, economics, finance, mathematics or other relevant field.

OR

• An acceptable combination of relevant experience AND education or training. 

At the manager’s discretion, OSFI may consider candidates who do not possess the stated education but meet the combination of experience and education or training if concrete examples are provided.

Information on degree equivalency

ESSENTIAL EXPERIENCE:

• Significant (1) experience in the financial services industry (2) related to technology and cyber risk management and response in one of the following areas: Business or Technology Operations, system/data analysis, or a related control function (i.e.  cyber security, business continuity management or operational risk).
• Significant (1) experience of performing regulatory supervision of technology and cyber risk.
• Experience analyzing data, generating reports, liaising with and making presentations to Senior Management (3).

NOTE:

(1) Significant is defined as the depth and breadth of the experience normally associated with the performance of the duties for a period of 3 years.

(2) Financial services industry experience is defined as experience working in one or more of the following areas: (a) financial institutions including banks, trust and loan companies, insurance companies and pension plans (b) firms dealing with audits or consulting engagements to such institutions (including reinsurance brokers) (c) technology and data companies providing services to financial institutions or linked to the delivery of financial services (d) government departments that directly deal with the supervision and regulation of these institutions (e) Indigenous Institutions including: Band operations, trustees or administrators of pension plans, insurance institutions, lending institutions or other related areas providing financial services (f) other relevant areas, such as but not limited to, financial risk management, investment management, corporate treasury functions or commercial lending.

(3) Senior Management is Managing Director (or equivalent e.g., Director-General, Vice-President) and above.

Experience is understood to mean the depth and breadth of experience normally associated with having performed a broad range of related activities. The amount of complexity and the diversity of tasks, as well as the autonomy level will be taken into consideration.

The following essential knowledge, competencies and abilities will be assessed at a later date.

ESSENTIAL KNOWLEDGE:

• Knowledge of cyber security penetration testing process, methods, and frameworks.
• Knowledge of current and emerging technology or cyber risks and trends, as they relate to the financial services industry.
• Knowledge of current and emerging cyber threats, as they relate to the financial services industry.

ESSENTIAL COMPETENCIES:

• Collaboration
• Results Orientation
• Critical Thinking

ESSENTIAL ABILITIES:

• Ability to communicate effectively in writing.
• Ability to communicate effectively verbally.

ASSET QUALIFICATIONS

If you possess any of the following education or experience criteria, your application must clearly explain how you meet them (may be needed for the job).

ASSET EDUCATION:

• A relevant graduate degree from a recognized post-secondary institution.
• One or more relevant designations/certifications such as: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA).

ASSET EXPERIENCE:

• Recent (1) and significant (2) experience related to technology and cyber risk management and response in two of the following areas: Business or Technology Operations, system/data analysis, or a related control function (i.e.  cyber security, business continuity management or operational risk).
• Significant (2) experience related to technology risk management and cyber risk management in the financial services industry (3).

NOTE:

(1) Recent is defined as ANY relevant experience gained within approximately the last 5 years.

(2) Significant is defined as the depth and breadth of the experience normally associated with the performance of the duties for a period of 3 years.

(3) Financial services industry experience is defined as experience working in one or more of the following areas: (a) financial institutions including banks, trust and loan companies, insurance companies and pension plans (b) firms dealing with audits or consulting engagements to such institutions (including reinsurance brokers) (c) technology and data companies providing services to financial institutions or linked to the delivery of financial services (d) government departments that directly deal with the supervision and regulation of these institutions (e) Indigenous Institutions including: Band operations, trustees or administrators of pension plans, insurance institutions, lending institutions or other related areas providing financial services (f) other relevant areas, such as but not limited to, financial risk management, investment management, corporate treasury functions or commercial lending.

The following asset knowledge and competencies may be assessed at a later date.

ASSET KNOWLEDGE:

• Knowledge of current and emerging business and environmental trends/issues as they relate to the financial services industry.
• Knowledge of the banking or insurance sectors including key products and functions, and the information and techniques used in their measurement and management.

ASSET COMPETENCIES:

• Innovation
• Growth and development 

CONDITIONS OF EMPLOYMENT

• Security – Reliability Status.
• The ability to work remotely from home within Canada with access to the Internet in one’s residence is a condition of employment.
• Ability and willingness to travel within Canada when required.

ORGANIZATIONAL NEEDS

• Retaining OSFI affected/opting employees.
• OSFI is committed to having a skilled and diverse workforce representative of the Canadian population. In order to meet our employment equity objectives, selection for this position may be made from among qualified candidates who self-declare as belonging to one or more of the following Employment Equity groups: Persons with a disability, Indigenous Peoples, Members of a Visible Minority, or Women. OSFI is committed to diversity and inclusion, and we strongly encourage candidates to self-declare if they belong to one of these designated employment equity groups.

OTHER INFORMATION

• Organizational needs may be applied first, therefore, OSFI affected/opting employees may be given first consideration over other applicants. Please note that in some cases deployments may also be considered for the retention of employees.
• The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply. Employment equity - Canada.ca
• Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first. Information on the preference to veterans
• We thank those who applied; however, only candidates selected for further consideration will be contacted.
• Eligible candidates may be considered and offered a deployment before considering other applicants.
• A DEPLOYMENT is a permanent movement of an employee at level or equivalent level within an organization to another organization in the core public administration, the OAG, or to the five separate agencies named in Schedule V to the FAA whose appointments are made in accordance with the Public Service Employment Act (PSEA). A deployment does not constitute a promotion or change a person's period of employment from a specified term to indeterminate.
• The use of generative artificial intelligence (AI) tools, sites, and applications based on large language models (e.g. ChatGPT, Dall-E, Microsoft Copilot), is forbidden for this application. Plagiarism from any source, or the use of generative AI from any source, may be investigated and result in serious consequences, including the invalidation of your application and consequently, elimination from this selection process.
• OSFI is a separate agency with its own classification and compensation system. OSFI's staffing is subject to the Public Service Employment Act (PSEA).
• All written and verbal communication obtained throughout the staffing process, from the time of application to close of process, may be used to evaluate the candidate. 
• Candidates must meet all of the essential qualifications to be appointed; however, depending on the requirements of the specific position(s) being staffed, one or more asset criteria or organizational need may be invoked at any stage of the process.
• Staffing strategies such as random selection, top-down approach and/or establishing cut-off scores to determine who will continue in the staffing process, may be used for the purpose of managing applications.
• Please note that although you may attain the established pass mark on any of the assessments used in this staffing process, management may decide to use a higher cut off score.
• During the staffing process, various assessment methods can be utilized, including but not limited to written exams and interviews. These assessments may be conducted either remotely or in-person at one of our OSFI offices (Toronto, Ottawa, Montreal or Vancouver).
• Candidates are entitled to participate in the appointment process in the official language of their choice.
• Email correspondence will be the primary method of communication with candidates for this selection process. Ensure you check your spam folder for any communications from OSFI ([email protected]). You must provide valid and updated contact information.
• All job applications must be submitted through Workday: OSFI’s recruiting platform. Do not email your application as it will not be accepted. To submit an application online, please click on the "Submit" button.
• If you have a limitation that may impact your performance at any step of the assessment process (such as submitting the application, written test, or an interview), you may request an accommodation. Assessment accommodations are designed to remove barriers, and to ensure that candidates with limitations can fully demonstrate their abilities. Should you wish to be accommodated, please inform us by sending an e-mail to the following address: [email protected]. All information received in relation to accommodation will be kept confidential.
• You are responsible for ensuring that the personal information provided in your candidate profile in Workday is accurate and up to date (e.g., contact information, status of any priority entitlements, veteran/mobility status, citizenship, etc.). If your personal information needs to be updated after you have submitted your application, you must contact us at [email protected]. Failure to do so may mean that you are either not considered or eliminated from the process.

CONTACT INFORMATION

OSFI Staffing Team

EMAIL: [email protected]

PLEASE DO NOT APPLY TO THIS EMAIL ADDRESS, USE THE APPLY BUTTON.