LEGAL AID BC

POSTING

TO: LABC STAFF (cc: BCGEU)

FROM: HUMAN RESOURCES DEPARTMENT

POSITION: SYSTEM ADMINISTRATOR III – IT SECURITY OFFICER

ONE FULL TIME REGULAR POSITION – VANCOUVER

COMPETITION NO: B062-26

DATE POSTED: November 10, 2026

CLOSING DATE: November 24, 2026

STARTING DATE: ASAP

SALARY: Job Class 23 (Market Adjusted) ($81,542 - $93,249) *under review*

HOURS OF WORK: 35 hours per week, Monday to Friday

This position has the option to participate in a modified work week schedule (37.5 hours/week) Monday to Friday, with the extra hours worked as one earned day off taken once every three-week scheduled cycle.

Legal Aid BC is dedicated to promoting equity, diversity, and inclusion in all aspects of our work. We welcome individuals from diverse backgrounds and experiences to contribute to the future of legal aid. We care deeply about the culture we are building and are looking for staff members who not only excel in their respective areas but are also passionate about supporting the people we serve and each other.

PRIMARY FUNCTION:

To provide design, implementation, integration, and oversight of the organizations cloud-based security solutions and systems, with an emphasis on securely facilitating business operations.

The following job duties are illustrative examples and shall not be construed as an exhaustive description of all the work requirements that may be inherent in the job.

DUTIES:

PLAN, INSTALL AND MONITOR CYBER SECURITY SYSTEMS:

1. Implement and maintain enterprise business systems and maintain stable performance levels on all systems;
2. Implement and monitor security on computers, servers, networks, and cloud technologies;
3. Implement and maintain system security,



including proactively assessing and applying patches and upgrades which will strengthen organization security measures;
4. Safeguard information system assets by identifying and solving potential and actual security problems, including abnormalities, and reporting issues;
5. Ensure data and information breaches are reported and managed;
6. Develop and implement security standards, guidelines, policies and procedures, including defining access privileges, control structures, and resources;
7. Proactively identify gaps in security strategies, policies, practices or standards;
8. Implement security improvements by assessing current situation, evaluating trends, and anticipating requirements;
9. Ensure Privacy Impact Assessments are performed and reviewed by General Counsel’s office for new applications, and changes to existing systems;
10. Support Cyber Security projects that drive efficiency and effectiveness of cyber security;
11. Develop, test, and maintain disaster recovery plans and procedures;
12. Develop and maintain Incident response plan and various playbooks;
13. Perform Compliance monitoring, and IT security risks and vulnerability assessments, and supports security audits including periodic audits to determine security violations and inefficiencies;
14. Conduct various risk, control,



maturity, and compliance assessments based on established security frameworks including but not limited to NIST CSF, CIS, ISO 27001, ISF, CSA N290.7, NERC-CIP, etc.;
15. Perform Third party Cyber risk assessments by working with vendors and ensure adherence to Cyber Security Terms and Conditions using a Risk based approach;
16. Lead the examination of security events that are not part of the standard operation of service and which cause or may cause an interruption to or a reduction in the quality of IT service;
17. Meet with business stakeholders to identify top security risks. Evaluate and perform business level cyber risk assessments using established risk methodology and provide recommendations for improving security posture and resolving identified risk and issues;
18. Develop and maintain risk registers, risk management framework and, risk acceptance forms to provide oversight for the cyber security program;
19. Assist in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for cyber security to report on cyber program efficiency by using KPIs and KRIs;
20. Provide advisory service to business units, project teams and external consultants on security policies, procedures, best practices, governance, risk, and compliance; and,
21. Participate in meetings where security matters are discussed.
22. Monitor and investigate reported incidents, including suspicious and phishing emails submitted by staff, and perform or coordinate appropriate remediation and follow-up actions through resolution.

2. PROVIDE COMPUTER AND CYBER SECURITY TRAINING

📌 System Administrator III (Vancouver)
🏢 Legal Aid BC
📍 Vancouver