Systems and Security Analyst

Staff – Non Union

Job Category
M&P – AAPS

Job Profile
AAPS Salaried – Information Systems and Technology, Level C

Job Title
Systems and Security Analyst

Department
Systems & Security Population Data BC Faculty of Medicine

Compensation Range
$5,906.25 – $8,508.42 CAD Monthly

The Compensation Range is the span between the minimum and maximum base salary for a position. The midpoint of the range is approximately halfway between the minimum and the maximum and represents an employee that possesses full job knowledge, qualifications and experience for the position. In the normal course, employees will be hired, transferred or promoted between the minimum and midpoint of the salary range for a job.

Posting End Date
November 14, 2022

Note: Applications will be accepted until 11:59 PM on the day prior to the Posting End Date above.

Job End Date

Dec 31, 2023

Due to the privacy-sensitive nature of the data holdings at Population Data BC, all staff with systems access are required to comply with the security screening requirements of our data providers.

Due to the grant-funded nature of this position, the initial term will be for one year and the appointment will be renewed on an annual basis.

Job Summary
Population Data BC is a multi-university, data and education resource facilitating interdisciplinary research on the determinants of human health, well-being and development. 

We support secure research access to individual-level, de-identified longitudinal data on 4.8 million residents living in British Columbia, linking data across various sectors such as health, education, early childhood development, workplace and the environment.  Population Data BC (PopData) also offers a professional specialization certificate in Population Health Data Analysis, training researchers across Canada and around the world.

Key objectives of Population Data BC are to:

• Make more data sets available for research

• Facilitate cross-linkages among the data sets in a privacy sensitive manner 

• Provide strategic leadership to ensure streamlined researcher access to these data

• Provide educational and other opportunities to ensure full and best use of those data

The Systems and Security Analyst will implement and maintain the technologies required to support PopData’s key objectives, including computer, network and security systems.  The incumbent will be primarily responsible for the IT support and development of the Secure Research Environment at Population Data BC.  They will make recommendations on technical initiatives, and will engage with stakeholders and partner organizations on these projects. PopData’s technical infrastructure forms a key pillar in our business operations, and its security and maintenance are of utmost importance to the organization.
Organizational Status
Population Data BC is based at the School of Population and Public Health (SPPH), which is in the Faculty of Medicine at the University of British Columbia. We are a key member of the International Population Data Linkage Network, through which we have promoted international research collaborations and fostered working groups on privacy and access to data.  

This position is part of the Systems and Security unit of PopData and reports to the Lead, Systems and Security. The Systems and Security Analyst works with faculty, staff, researchers and students affiliated with PopData.
Work Performed

• Recommends and implements improvements to the SRE monitoring systems, ensuring that technologies and researcher services provided by Population Data BC are in compliance with data steward agreements

• Maintains the security of PopData’s physical space and technical infrastructure, researching and recommending improvements

• In consultation with the Lead, Systems and Security, updates, expands, and implements the Cybersecurity defense plan

• Assists the Lead, Systems and Security with proactively monitoring and improving organisational security

• Analyses existing or proposed system features and integration, security, scalability and performance requirements with team members, stakeholders, and project partners

• Liaises with stakeholders and partners, attending meetings as a technical expert representative for PopData, relying on a strong knowledge of the organization’s unique security systems and needs

• Makes recommendations on new and changing systems features, prioritizing data security and ensuring that recommendations are compatible with PopData’s policies and agreements

• Makes recommendations on the acquisition, deployment, tracking and retirement of IT infrastructure

• Maintains infrastructure for server and storage, virtualization and backup

• Selects, configures, installs, and maintains configuration management and automation solutions

• Maintains core infrastructure, including Linux servers

• Provides advice to and consults with others as appropriate on system design issues and provides technical opinions on the viability or suitability of techniques and methodology to meet project objectives and goals

• Develops expertise in the functionality and implementation practices of vendor products

• Adheres to IT service management best practices 

• Provides input on buy-versus-build recommendations and advises on system options, risks, cost versus benefits, and impacts on processes and goals

• Performs capacity planning for systems infrastructure and carries out performance and trend analysis

• Works closely with IT peers to ensure all systems are in line with PopData’s long-term strategy

• Analyses systems issues and consults on systems-supported infrastructure as part of regular operations

• Integrates development of best practices, standards, procedures and quality objectives across systems infrastructure or platforms

• Prepares and maintains technical and training documentation

• Responds to security incidents, analysing any systems weaknesses and ensuring that appropriate solutions are implemented

• Prepares for, and serves as a primary contact for planned security audits

• Implements security recommendations from external privacy and security reviews, as they apply to systems and security design considerations

• Performs other related duties as required

Consequence of Error/Judgement

This role will work under strict confidentiality because of the nature of the data holdings.  PopData’s secure systems and network protect highly sensitive data, and any unauthorized release of those data or breach in data security would place the future of Population Data BC as well as its partner organizations at risk. Any breaches of privacy or security could result in legal and ethical repercussions for PopData and UBC.

As one of the staff members responsible for designing and maintaining systems that hold highly sensitive, individual-level data, errors and oversights made by the Systems and Security Analyst have significant potential to seriously impact PopData’s reputation and credibility as an organization.  

The candidate will be required to interact with researchers, programmers and support staff at UBC in general and with personnel in the provincial government and elsewhere. This will be related to use of confidential data files from government programs, professional associations, and surveys and will require diplomacy and good interpersonal skills. Poor judgment, inappropriate procedures, incorrect information and lack of diplomacy could adversely affect relationships with Population Data BC’s primary users, stakeholders, funders and data partners and damage the reputation of Population Data BC and also the University of British Columbia.

This is a position in an organization responsible for providing services to our funders and the greater research community. Judgment within established guidelines is required with regards to the management of project priorities, schedules, and resource requirements. 
Supervision Received
This position reports to the Lead, Systems and Security, and may also receive direction from the Managing Director and/or Scientific Director of Population Data BC.  The Systems and Security Analyst works independently on a day-to-day basis.  Work is reviewed in terms of achievement of specific objectives.
Supervision Given
No formal reports, however, may provide guidance to other staff performing technical duties, including student staff (co-op, Work Learn, etc.).
Minimum Qualifications
Undergraduate degree in a relevant discipline. Minimum of three years of related experience, or the equivalent combination of education and experience.
Preferred Qualifications

Experience working with a data-focused organization or health-related institution is an asset.  Experience in working within a statutorily-regulated or a privacy-sensitive environment is highly desirable. 

Skills

• Interpersonal skills and ability to liaise with individuals at varying levels of expertise, including programming staff, senior government staff, researchers, and community leaders.

• Knowledge and experience in Information Security

• Experience using security tools at both the network and application level

• Experience with computer systems, networks, and system monitoring

• Experience with data storage, backup and recovery, and load balancing

• Some experience in data analysis is an asset

• Ability to keep current with advancements in technology and tools

• Ability to adopt a task-oriented approach to solving operational hardware and software problems

• Ability to adopt and project approach for the development and implementation of support strategies

• Experience using Python, Perl, and Shell scripting

• Ability to explain technical terms and problems in laymen’s language

• Demonstrated time management and organizational skills, with the ability to manage multi-tasking and competing priorities

• Exceptional initiative and willingness to learn new concepts and detailed procedures

• Ability to work effectively both independently and within a team environment

• Must be positive in attitude and a team player

Due to the privacy-sensitive nature of the data holdings at Population Data BC, all staff with systems access are required to comply with the security screening requirements of our data providers.