{"id":2777,"date":"2013-04-22T17:20:19","date_gmt":"2013-04-23T00:20:19","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=2777"},"modified":"2019-04-20T16:25:09","modified_gmt":"2019-04-20T16:25:09","slug":"job-ehealth-saskatchewan-cso","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=2777","title":{"rendered":"Job: eHealth Saskatchewan CSO"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[<strong>eHealth Saskatchewan <\/strong>is looking for a <strong>Chief Security Officer (CSO)<\/strong> to join their team.  The Chief Security Officer is\nresponsible for developing, implementing and managing the overall strategic information security program, policies and procedures (ISO Standards). They will ensure both the technical and physical\nsafeguards and controls are in place to protect the organization, the employees and the integrity of personal health information and systems, ensuring consistency across the sector and with industry\nbest practices.\n<strong>Your Responsibilities Include <\/strong>(but not limited to):\n? Establishing standards and policies and conducting or overseeing the conduct of associated\nsecurity audits and security breach investigations that affect staff, vendors, visitors,\ncontractors, consultants, other government agencies and third party access.\n? Participates with the Enterprise Architect team to ensure awareness and that overall\ngovernance commitments are being met in framework design.\n? Serves as the enterprise?wide focal point for, and cultivates relationships with, clients,\nstakeholders, vendors and health sector security offices to foster collaboration in\naddressing security?related challenges. (e.g. chairs Health Sector Security Officer Forum).\n? Builds the business case, including multi?year budget requirements.\n? Establishes and maintains a Privacy and Security Incident Management System (working\nclosely with the CPO).\n? Conducts investigations on security incidents and breaches, identifies causes, ensures\nresolutions to remediate vulnerabilities and outlines potential policy repercussions.\nConducts and manages risk assessments using an Application Verification Toolkit (AVERT)\n? Create and maintain a Security Dashboard and provide ongoing reports through the\nSecurity Dashboard (of all findings, incidents, breaches, risk levels and suspensions).\n? Ensures legal advice is obtained from the agency solicitor on security matters where\nrequired.\n? Establishes training materials, workshop content, and delivers security training throughout\nthe organization\n<strong>Qualifications<\/strong>\n? Minimum 5?7 years of experience in IT Security, IT Audit or related area\n? Bachelors degree in Information Security, Computer Science, Information Management\nSystems, Business\/Accounting or related field\n? Strong technical skills relevant to Information Security such as secure coding standards, ethical\nhacking techniques, IDS\/IPS (intrusion detection system\/intrusion prevention system)\n? Familiarity with Information Security industry standards\/best practices and relevant\nregulations (e.g., PCI DSS, HIPAA, GLBA, FISMA, NIST, ISO, CobiT, ISF)\n? Analytical and detail oriented\n? Strong written and oral communication skills\nIf you are interested and would like more details, please send your resume to: recruitment@eHealthsask.ca]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[63],"tags":[],"class_list":["post-2777","post","type-post","status-publish","format-standard","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/2777","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2777"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/2777\/revisions"}],"predecessor-version":[{"id":8034,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/2777\/revisions\/8034"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2777"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}