ISS - Information Security Specialist at City of Winnipeg

Recruitment Details

ISS - Information Security Specialist

Department: Winnipeg Police Service

Designated Work Location: 245 Smith Street, On site

Position Type: Permanent, Full-time

Hours of Work: Monday to Friday, 0800 - 1600

Salary: $4,322.47 to $5,499.40 bi-weekly

Employee Group: Winnipeg Police Association (WPA)

Posting No: 127275

Closing Date: Friday, September 4th, 2026

Providing a wide range of services to over half of all Manitobans, The City of Winnipeg is one of the largest employers in Manitoba. We provide a comprehensive range of benefits and career opportunities to our employees. These include competitive salaries, employer-paid benefits, dental and vision care, pension plans, and maternity/parental leave programs. Additionally, we offer education, training, and staff development opportunities to ensure that our employees are equipped with the necessary skills to advance in their careers.

Our Benefits web page provides detailed information about the benefits we offer, and we encourage you to visit it for further information at City of Winnipeg Benefits . We take pride in fostering a , diverse , safe, and healthy workplace where our employees can thrive and achieve their full potential.

The City is committed to attracting and retaining a diverse, skilled workforce that is representative and reflective of the community we serve. Applications are encouraged from equity groups that have been and continue to be underrepresented at the City; Indigenous Peoples, Women, Racialized Peoples, Persons with Disabilities, 2SLGBTQQIA+ Peoples and Newcomers are encouraged to self-declare.

Requests for Reasonable Accommodation will be accepted during the hiring process.

Preference to internal applicants may be applied.

Job Profile

Under the general supervision of the IT Manager - Infrastructure, the Information Security Specialist is responsible for administering the Information Security Program for Winnipeg Police Service (WPS). The position provides strategic and technical leadership in the areas of information security governance, security operations, security architecture, risk management, identity and access security, and security assurance.

The Information Security Specialist designs, implements, and maintains security controls, policies, standards, and procedures to protect WPS information assets and technology services. The position leads security incident investigations, threat and risk assessments, security architecture reviews, vendor security assessments, and security compliance activities, and serves as the technical authority for identity and access security services.

The Information Security Specialist works closely with business stakeholders, project teams, vendors, and external service providers to ensure security requirements are integrated into technology solutions and operational processes. The position provides technical direction to the Information Security Analyst and maintains the documentation, standards, and operational procedures required to support an effective Information Security Program.

As An Information Security Specialist You Will

• Lead and administer the Information Security Program for the Winnipeg Police Service.
• Lead security operations and incident response.
• Lead security architecture, assurance, and risk management.
• Lead identity and access security services.
• Document the technical and operational environment.

Your Education And Qualifications Include

• University Degree in Computer Science (or related field), or College Diploma in Business Information Technology (or related field) with demonstrated equivalent amount of experience.
• Minimum of 48 months¿ progressive experience in information technology with a focus on Information Security and Networking within the last 5 years, preferably in a senior role.
• Advanced working knowledge of and experience implementing Information Security methods and procedures.
• Knowledge of enterprise networking and security technologies, including TCP/IP, routing, switching, VLANs, VPNs, wireless networks, network segmentation principles, and firewall technologies such as Fortinet FortiGate.
• Thorough knowledge of identity and authentication technologies, including Public Key Infrastructure (PKI), certificate-based authentication, PIV standards, Single Sign-On (SSO), SAML, and OIDC.
• Demonstrated knowledge of IT network security scanning technologies.
• Knowledge of Microsoft Certificate Authority.
• Knowledge of Microsoft server and desktop operating systems.
• Knowledge of Microsoft Active Directory Management.
• Knowledge of security frameworks and benchmarks, including CIS Controls, NIST SP 800-53, and the National Police Service (NPS) network security policy.
• Expert knowledge of Microsoft Entra ID security controls, with expert-level ability to design, implement, and administer Conditional Access policies, multifactor authentication, and role assignments.
• Advanced knowledge of configuring and tuning Endpoint Detection and Response (EDR) platforms, including detection policies, automated response actions, and exclusions.
• Knowledge of platform security concepts, hardware-based security risks, and trusted computing technologies, including the ability to evaluate associated risks and recommend appropriate security controls.
• Knowledge of emerging cryptographic threats, quantum-resistant security concepts, and their potential impact on enterprise security architectures, authentication systems, and long-term data protection strategies.
• Knowledge of Data Loss Prevention (DLP) concepts, data classification, and the tracking of sensitive data movement.
• Ability to plan, design, and lead security initiatives using a business and technical risk-based approach.
• Ability to manage a RADIUS/NAC-based solution for user and machine authentication policies, such as Aruba ClearPass or Cisco ISE.
• Demonstrated effective verbal and written communication skills and the ability to interact professionally with a diverse group, executives, directors, and subject matter experts.
• Ability to successfully multitask with frequent interruptions and complete assignments in a timely manner, coordinate multiple initiatives simultaneously.
• Ability to work independently with minimal supervision, developing and implementing new procedures.
• Ability to conduct information security threat and risk assessments, maintain an organization-wide information security risk register, and support risk identification, analysis, treatment, and acceptance processes.
• Ability to assess security, privacy, and compliance risks associated with vendors, cloud services, AI technologies, applications, and other technology solutions.
• Ability to evaluate results, assess severity and probability of risk, determine priorities, propose mitigations/solutions, and assist with/implement appropriate remediation activities.
• Ability to troubleshoot and problem solve.
• The ability to establish and maintain a positive, respectful, safe and healthy work environment that supports the physical, psychological and social working relationships with members at all levels in a team environment.
• IMPORTANT: Applicants who have been educated outside of Canada must have education which is comparable to the minimum qualification in Canada. Applicants submitting foreign credentials require an official academic assessment report issued by a recognized Canadian assessment service** at application. If you are not submitting proof of Grade 12 completed within Canada, we require you to submit proof of a full-time, two-year post-secondary program completed in Canada.

If you are not submitting proof of Grade 12 completed within Canada, we require you to submit proof of a full-time, two-year post-secondary program completed in Canada.

Minimum Requirements

• Canadian Citizen or Permanent Resident
• Minimum 18 years of age
• No involvement in any criminal activity within the last two years (including illegal drugs)
• No criminal record for which a Pardon has not been granted

Conditions Of Employment

• Ability to pass a level 3 Winnipeg Police Service security check and maintain clearance
• Possess and maintain a valid Class 5.0 Driver's License
• Ability to successfully complete additional training as defined by the Service
• Willingness and ability to work overtime, holidays and weekends as required by the Service
• Ability to obtain and maintain Certified Information Systems Security Professional (CISSP) certification. (within 18 months of commencement in the position)

Winnipeg Police Service Competencies

• Dealing with Ambiguity
• Conflict Management
• Integrity and Trust
• Priority Setting
• Results Oriented

How To Apply

APPLY ONLINE, including all documentation listed below:

• Current Resume (Required)
• University Degree in Computer Science (or related field), or College Diploma in Business Information Technology (or related field) with demonstrated equivalent amount of experience - provide a copy of one of the following:
• Degree
• Diploma
• Final Transcripts (must indicate graduated)
• or Foreign Credential Academic Assessment (Required)
• Proof of Canadian Citizenship or Permanent Residency - provide copy of one of the following documents: Canadian Birth Certificate, Canadian Passport, Canadian Citizenship Certificate or Card, Secure Certificate of Indian Status (Secure Status Card) ORRecord of Landing (Landing Papers), Confirmation of Permanent Residence (COPR), Permanent Resident (PR) Card ( Required)
• Applications submitted without REQUIRED documentation will not be considered.
• Your application documents must clearly indicate how you meet the qualifications of the position.*

Notes

Online applications can be submitted at http://www.winnipeg.ca/hr/ . For instructions on how to apply and how to attach required documents please refer to our FAQ's or contact 311.

Position Reports To

• First consideration will be given to qualified employees of the Winnipeg Police Service
• If applicable: Applicants will be required to undergo testing to determine their knowledge, abilities and skills as they relate to the qualifications of the position.

Only candidates selected to proceed in the process will be contacted.