Information and physical security: Information management security
Information management security - Competencies
Key activities
- Manage information, records, and documents, including sensitive personal information throughout the information management lifecycle while abiding by information management and privacy legislation, regulations, policies, and practices, including the framework for the 2023-2026 Data Strategy for the Federal Public Service.
- Plan and coordinate security-related projects such as the design and/or implementation of appropriate information management security practices and controls throughout the stages of information life cycle to ensure information is adequately protected, in accordance with security policies and guidelines.
- Support the development, implementation, interpretation, and/or application of government and departmental security policies, standards and guidelines, and the Departmental Security Plan.
- Work with Lead Security Agencies and other government departments to exchange best practices and lessons learned.
Knowledge
Applies at all levels
- Knowledge of the organizational vision, mandate, programs, policies, operating environment, and structure, including diversity and inclusion considerations
- Knowledge of security fundamentals, and security legislation, regulations, policies, and practices
- Knowledge of legislation and regulations related to the handling of sensitive and personal information to ensure appropriate categorization and protection
- Knowledge of best practices for life-cycle management of information and information repositories
- Knowledge of process to categorize information
Entry-level
- See above
Mid-level
- Knowledge of effective and efficient management of enterprise physical and digital records and library collections from planning and development to the provision of strategic advice
- Knowledge of risk management
- Knowledge of project management
- Knowledge of Access to Information Act and Privacy Act
- Knowledge of Security of Information Act
Management, Executive and Chief Security Officer
- Knowledge of the Government of Canada security governance, including the roles and responsibilities of lead security agencies
Skills
Applies at all levels
- Ability to collect, analyze and get acquainted with information from various sources, establish logical links and leverage as required to advance projects and/or files, and to support an informed decision-making process
Entry-level
- See above
Mid-level
- Ability to manage and/or support a project from its conception to close-out phases
- Ability to conduct and report on investigations and inspections
- Ability to conduct and report on threat and risk assessments
- Ability to categorize information, and conduct injury tests
Management, Executive, and Chief Security Officer
- Ability to manage a team and align efforts towards common goals, in line with government and organizational priorities and programs
- Ability to work with other organizations and stakeholders to ensure the collaboration, sharing and leveraging of information and dissemination of best practices and lessons learned
Attributes
Applies at all levels
- Strategic and analytical thinking and creative problem solving
- Engagement, collaboration, and client-focus
- Self-management: reliability, planning and organizing, flexibility and initiative
- Demonstration of integrity and respect
- Sound judgment
- Communication
- Thoroughness
Entry-level
- See above
Mid-level
- See above