Whether you are looking for a new challenge, growth prospects or simply want opportunities to develop some new skills that will take your career into the future, this may be the role for you. Our goal is develop a team that will be the envy of airports around the world, and create a culture that makes us the most desirable place to work. Giving our Crew new opportunities to drive forward our vision of creating effortless and memorable experience adds to our bench strength and will set our teams up for long-term success. Bring your passion and drive for elevating the airport experiences to a new opportunity, one that will enhance your skillset, broaden your horizons and allow you to bring fresh perspectives to a new business area.

As a primary driver of our city’s economy and growth, we have an opportunity to help make Calgary a global economic powerhouse. We believe our focus on the future will fuel our city’s next generation of prosperity. And we are ready, willing and able to step up to the challenge. At one of Canada’s busiest airports, we are working hard to create the best possible experiences for the guests and visitors that arrive, depart and connect through our airport, and we need the help of people like you to help get us there.

WHAT YOU WILL DO

Reporting to the General manager, Cybersecurity, the IT Cybersecurity Specialist role is responsible for delivery of cybersecurity services including but not limited to threat intelligence, detection, and response services to all departments at the Calgary Airport Authority (“the Authority”).

This successful candidate will have experience with areas of cyber governance, cyber risk, cyber technology, and cyber training. Specifically, the IT Cybersecurity Specialist is expected to have an extensive knowledge on different cybersecurity frameworks such as ISO270001, or NIST CSF.

Hands-on experience in the areas of endpoint protection, email protection, vulnerability management, and network detection will be considered an asset for this role. Knowledge on these topics shall be used as inputs to develop new, or update existing, cybersecurity policies, standards, and procedures.

RESPONSIBILITIES INCLUDE:

Support cybersecurity operations to manage cyber incidents or issues that arise daily.
Liaise with external cyber operation managed services to review and resolve cyber alerts.
Provide hands-on tuning on existing cyber technology stacks based on threat intelligence, learnings
and/or changes to the threat landscape.
Collaborate with internal stakeholders and provide cyber solutions to remediate cybersecurity gaps/risks identified through reported cyber incidents/issues/alerts.
Guide internal stakeholders through the exception process from submission to approval.
Participate in annual cyber tabletop exercise.
Conducts network monitoring and intrusion detection analysis using various computer network defense
tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems
Conducts log-based and endpoint-based threat detection to detect and protect against threats coming
from multiple sources
Support deployment of cloud-centric detection to detect threats related to cloud environments and services used by the organization
Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to
identify patterns of anomalous activity, unauthorized use
Reviews alerts and data from sensors, and documents formal, technical incident reports
Supports the creation of business continuity/disaster recovery plans, including conducting disaster
recovery tests, publishing test results and making changes necessary to address deficiencies
Provides users with incident response support, including mitigating actions to contain activity and
facilitating forensics analysis when necessary
The specialist may be called up to help with tasks/duties for other cybersecurity functions, such as
developing cyber awareness trainings/materials, or cyber governance related tasks.
Contribute to the continuous improvement of cybersecurity at the Authority.
Contribute to the development of internal cyber awareness plan and campaigns.
The analyst may travel to other airports, attends courses, conferences, and seminars, and undertakes
activities to update and improve their airport operational and technical knowledge and experience. They
often participate in various organizations specific to their area of expertise, in order to maintain and foster business relations and to update technical knowledge.
Periodically evaluate existing cyber technology stacks and recommend new tools or improvement to
protect the Authority against emerging cyber-attacks.

WHAT YOU BRING

Specialization in security tools or area but must also have breadth of knowledge in overall cybersecurity space. In addition, this role shall have good business acumen to communicate and collaborate with various business at the Authority.
Technical knowledge of IT systems layers including Application, networking, cloud, and Microsoft tools. This knowledge is attained through formal University or acceptable technical college education, recurring industry training and at least 3 to 5 years of practical on-the-job experience.
Knowledge of a variety of change management methodologies and approaches typically gained through extensive work experiences. The individual shall have proficient analytical and troubleshooting skills typically obtained through previous work experiences.
The Cybersecurity Specialist must have a good knowledge of system development lifecycle; software and processes and procedures; Ethernet/IP networking; MS server, workstation, mobile computing, and other technologies used in today’s corporate environments.
The complex nature of working in a 24/7/365 public facility, which currently operates close to capacity, complicates the work effort required and emphasizes a focus on including restrictive timing and multi-step plan breakdown to be able to identify these challenges within the plan. The individual requires to be a quick learner and able to adapt to a changing environment.

WHAT ELSE?

Communication skills. Extensive and effective communication skills (Listening, speaking, and writing) are essential. The Specialist must also be able to adapt their communications style to others to ensure common understanding and clarity in scope and requirements definitions.
Time management, prioritization, and organizational skills. These skills are required to successfully manage multiple projects, multiple tasks, multiple priorities, and concurrent deadlines.

Risk management skills. Require the skill to recognize and reduce potential risks, as well as dealing with uncertainties such as technical implications and impact to existing systems.

Judgment and decision-making skills. Ability makes decisions daily. Major decisions can affect the quality and accuracy of the plans including the impact on the organization, costs to implement a system.
Leadership skills. Ability to build and maintain relationships within the team including vendors, contractors, and stakeholders. An understanding of human dynamics and of the different team player styles is an essential component of the team building and leadership skills between competing
stakeholder requirements or between business requirements and technical limitations.
Conflict resolution skills. Conflicts often arise during change processes, and it is the responsibility of the Cybersecurity Specialist to identify and take initial steps to resolve the conflicts or facilitate the resolution. If conflict persist, escalate to GM, Cybersecurity.
Application skills. The knowledge of technical standards, regulations, policies, and procedures (external or internal) is required. The skill of understanding the overall objectives, organizational impact, and change barriers and managing these with management processes implemented at the right instance is the key to delivering a successful project.
Must be able to obtain and maintain a RAIC
This role is eligible for our hybrid work model with a combination of in-office and remote work.

OUR VALUES:

We are ACCOUNTABLE. We take ownership and step up to get the job done.

We are CUSTOMER-FOCUSED. We consider the customer in all that we do.

We are COLLABORATIVE. We are stronger when we reach out and work as a team.

We are RESILIENT. We are able to withstand or recover quickly from difficult conditions.

We are CREATIVE. We strive to find new and better ways of doing things.

Not interested in this opportunity, do you know someone who is the perfect fit for this role? Someone who is driven by purpose, motivated by a challenge and passionate about delivering remarkable guest experiences? Have them visit yyc.com to apply.

The Calgary Airport Authority

New Jobs

Cybersecurity Co-op Student

IT Cybersecurity Specialist

Cybersecurity Co-op Student