System Administrator III - IT Security Officer B062-26

LEGAL AID BC POSTING   TO:                                LABC STAFF (cc: BCGEU)   FROM:                           HUMAN RESOURCES DEPARTMENT   POSITION:                     SYSTEM ADMINISTRATOR III – IT SECURITY OFFICER                                         ONE FULL-TIME REGULAR POSITION – VANCOUVER   COMPETITION NO:        B062-26   DATE POSTED:             November 10, 2026   CLOSING DATE:            November 24, 2026   STARTING DATE:          ASAP   SALARY:                        Job Class 23 (Market Adjusted) ($81,542 - $93,249) *under review*   HOURS OF WORK:        35 hours per week, Monday to Friday                                  This position has the option to participate in a modified work week schedule (37.5 hours/week) Monday to Friday, with the extra hours worked as one earned day off taken once every three-week scheduled cycle.   Legal Aid BC is dedicated to promoting equity, diversity, and inclusion in all aspects of our work. We welcome individuals from diverse backgrounds and experiences to contribute to the future of legal aid. We care deeply about the culture we are building and are looking for staff members who not only excel in their respective areas but are also passionate about supporting the people we serve and each other. If this resonates with you, we encourage you to apply.     PRIMARY FUNCTION:    To provide design, implementation, integration, and oversight of the organizations cloud-based security solutions and systems, with an emphasis on securely facilitating business operations.     The following job duties are illustrative examples and shall not be construed as an exhaustive description of all the work requirements that may be inherent in the job.     DUTIES:   PLAN, INSTALL AND MONITOR CYBER SECURITY SYSTEMS: Implement and maintain enterprise business systems and maintain stable performance levels on all systems; Implement and monitor security on computers, servers, networks, and cloud technologies; Implement and maintain system security, including proactively assessing and applying patches and upgrades which will strengthen organization security measures; Safeguard information system assets by identifying and solving potential and actual security problems, including abnormalities, and reporting issues; Ensure data and information breaches are reported and managed; Develop and implement security standards, guidelines, policies and procedures, including defining access privileges, control structures, and resources; Proactively identify gaps in security strategies, policies, practices or standards; Implement security improvements by assessing current situation, evaluating trends, and anticipating requirements; Ensure Privacy Impact Assessments are performed and reviewed by General Counsel’s office for new applications, and changes to existing systems; Support Cyber Security projects that drive efficiency and effectiveness of cyber security; Develop, test, and maintain disaster recovery plans and procedures; Develop and maintain Incident response plan and various playbooks; Perform Compliance monitoring, and IT security risks and vulnerability assessments, and supports security audits including periodic audits to determine security violations and inefficiencies; Conduct various risk, control, maturity, and compliance assessments based on established security frameworks including but not limited to NIST CSF, CIS, ISO 27001, ISF, CSA N290.7, NERC-CIP, etc.; Perform Third party Cyber risk assessments by working with vendors and ensure adherence to Cyber Security Terms and Conditions using a Risk based approach; Lead the examination of security events that are not part of the standard operation of service and which cause or may cause an interruption to or a reduction in the quality of IT service; Meet with business stakeholders to identify top security risks. Evaluate and perform business level cyber risk assessments using established risk methodology and provide recommendations for improving security posture and resolving identified risk and issues; Develop and maintain risk registers, risk management framework and, risk acceptance forms to provide oversight for the cyber security program; Assist in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for cyber security to report on cyber program efficiency by using KPIs and KRIs; Provide advisory service to business units, project teams and external consultants on security policies, procedures, best practices, governance, risk, and compliance; and, Participate in meetings where security matters are discussed. Monitor and investigate reported incidents, including suspicious and phishing emails submitted by staff, and perform or coordinate appropriate remediation and follow-up actions through resolution.   2.   PROVIDE COMPUTER AND CYBER SECURITY TRAINING SUPPORT FOR USERS: Provide support related to hardware, software, application programs and complex network communications by performing duties such as diagnosing and resolving problems; Respond to technical problems with microcomputers, minicomputers and networked computers and find solutions to minimize downtime; Work with IT department and communications team to release security news updates and bulletins related to Cyber Security to facilitate and encourage the adoption of proper information security processes, procedures and practices for employees; Develop Security awareness training and assist in conducting phishing simulation campaigns and associated trainings; and, Provide training to users on internal network and answer employee questions.   3.   PERFORM OTHER RELATED DUTIES: Liaise with outside consultants and other organizations to give information about the LSS network and to ensure that their projects work with LSS systems; Evaluate existing and emerging technologies, identify requirements, analyze alternative products, prepare business cases, and make recommendations; Monitor and analyze computer network traffic and performance; Keep supervisor informed by preparing performance reports; communicating system status; Provide end-user support and assistance, and one-on-one training; Develop procedures for computer and network backup and recovery; and Perform other related duties as required.   QUALIFICATIONS:   Basic requirements Bachelor’s degree in computer science, Information Systems, or equivalent education or work experience 3+ years of prior relevant experience as outlined in the rated requirements Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent) at start date OR an equivalent combination of education and experience   Rated Requirements Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements. Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations Experience with vulnerability scanning solutions Familiarity with the DOD Information Assurance Vulnerability Management program. Familiarity with the NIST Cybersecurity framework Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform Understanding of mobile technology and OS (i.e. Android, iOS, Windows), and VMware technology, knowledge of server architecture knowledge of best practices in system security including firewalls, intrusion detection, and anti-virus solutions knowledge of interaction and relationships of computer hardware and software knowledge of the installation configuration and maintenance of current Microsoft computer operating system software knowledge of software/hardware required for the operation of secured computer networks e.g. modems, concentrators, hubs, file servers, cabling and connectivity standards knowledge of applications software, and their configuration on a network knowledge of the IT marketplace and emerging technologies ability to multi-task ability to cope with heavy volume of work ability to identify, analyze and solve problems ability to work well under pressure and meet deadlines ability to work independently and as part of a team ability to organize workload, identify urgent work items and set priorities ability to lead less experienced staff and provide direction to contractors Ability to prepare business cases and provide recommendations ability to create clear documentation ability to operate computer-related equipment must have excellent oral and written communication and interpersonal skills must have excellent organizational skills We offer (based on your employment status and affiliation):   Four weeks paid vacation to start that grows the longer you are with LABC An excellent employee benefits package, where premiums are 100% paid by LABC A generous defined benefit pension plan Support for training and development An Employee and Family Assistance program The opportunity to participate in various Employee programs (Employee Wellness, etc.) Support for a healthy work/life balance Generous leave provisions (sick time, special leaves)  13 paid statutory holidays An opportunity for a flexible hybrid work arrangement for some positions (LABC reserves the right to change this policy at any time) Transit friendly employer for eligible staff to have their commute subsidized Dog-friendly offices  Dedicated Cultural Leave provisions for Indigenous employees An Equity, Diversity and Inclusion Council, and Indigenous employees Council and Accessibility Committee of employees from equity-seeking groups that advises on ongoing improvements and investments in Equity, Diversity and Inclusion at our workplace   VISIT OUR WEBSITE AT www.legalaid.bc.ca   Legal Aid BC is recognized as one of BC’s Top 100 Employers: https://reviews.canadastop100.com/top-employer-legal-aid-bc   We would like to thank all external applicants for their interest but regret that only those shortlisted will be contacted.