Security Manager

S M Software Solutions Inc. - Fredericton, NB (30+ days ago)

Apply Now

Background

POPA Ticket Processing

Each year, the Province of New Brunswick processes around 33 000 tickets received from various enforcement partners. The processing of these tickets is bound by the Provincial Offences and Procedures Act (POPA) which outlines the various approaches to processing tickets.

Currently there are three basic paths for processing a ticket. They include:

  • Voluntary Admission of Guilt through fixed penalty payment: the accused may pay a default fine amount before a pre-determined fine payment deadline. As a result, the court deems that this action is equivalent to the accused entering a guilty plea to the charge.
  • Dispute the Ticket: Current practises involve the courts pre-determine a block of time to accept pleas for POPA based offences. Enforcement officers will record the pre-assigned court location and time when a ticket is issued. (Referred to Dispute by Default)
  • Default Judgment: The accused chooses to do nothing with the ticket. The fine payment due date expires, and judge deems the accused as guilty.

Exceptionally there are few other paths such as a void of the ticket due to administrator error. In addition, the prosecution can withdraw the charge due to lack of evidence.

Most tickets conclude with a guilty judgment or a deemed guilty outcome in which case the accused is considered as convicted. Conviction information is shared to programs responsible for regulating the associated act identified in the charge.

Challenges with Current Practises

Managing tickets in the current solution is challenging due to the following reasons:

  • Tickets are stored with the agencies that issued them. This distributed based model makes it difficult to retrieve and manage tickets across the enterprise.
  • Program controls are typically policy based. The execution of policy is not consistent as each group involved in the ticket lifecycle may implement policy differently.
  • Dispute by Default model involves the accused visiting court twice for a dispute which is both inefficient for the defendant and the court.

Electronic Ticketing Initiative

To address challenges with the current practise of processing POPA Tickets, an initiative began under the direction of Justice and Public Safety. The initiative looked to define a roadmap of projects that would realize capabilities that would enable outcomes by POPA ticket stakeholders.

The first phase of this initiative was focused specifically to establish core capabilities that are foundational to overall e-ticket solution. This phase specifically introduced the following capabilities:

  • Centralized repository for all POPA Tickets. Allows the province to realize a source of truth for ticket information and apply basic master data management practises to protect the integrity of the data.
  • Centralize ticket lifecycle manager that implements program controls using software. This ensures that all ticket lifecycle is handled in a consistent manner.
  • Dispute on Demand: a change to POPA process and legislation that requires that an accused who wishes to dispute a ticket must request for a court date. The process involves the accused enter a not-guilty plea. The court will accept this Notice to Dispute and will schedule a trial for the case to be heard by a judge.
  • Default Judgments: A change in legislation is proposed that will allow a court assigned representative to review tickets that are expired. If the ticket is considered valid, the accused will be deemed-guilty of the charge.

In addition to the foundational capabilities, Phase 1 looked to focus on Motor Vehicle Act offences as they represent the majority of POPA tickets issued. To reduce enforcement implementation complexity, the project also chose to focus issuance from the RCMP who serve as contract police force for NB Highways and many municipalities. The RCMP are responsible for a majority of POPA ticket issuance in the province.

Subsequent phases of the project will expand issuance to other enforcement agencies as well as expand to other POPA related offences.

Services Sought

Service New Brunswick (SNB) requires the services of a Security Manager to perform a threat risk assessment of the E-Ticketing solution including:

  • A vulnerability scan and assessment of the E-Ticketing solution against known vulnerabilities given the various platforms expected of the E-Ticketing technical solution.

Duties:
Management:

Formulates statements of security business problems. Establishes procedures for the procurement or development and implementation of significant, new or modified computer systems to solve these security problems, and obtain approval thereof.

Evaluates proposed computer security systems to determine security feasibility, functional adequacy, and estimated costs for implementation and operation.

Defines and documents the security objectives for the project, determines budgetary requirements, the composition, roles and responsibilities, and terms of reference for the security project team.

Manages the security project during the procurement or development, implementation and operations start up by ensuring that resources from all service areas are made available and that the security system is developed and totality operates within previously agreed time, cost and performance parameters.

Ensures that the suitable combinations of security assessments are performed at the appropriate time during the project duration and are completed in a timely manner. These assessments would normally include:

Threat and Risk Assessments
Vulnerability Assessments
Penetration Tests
And other assessments pertinent to the application needs.
Demonstrates the ability to manage a team of security specialists.

Reporting:
Reports progress of the security project on an ongoing basis, and at scheduled points in the life cycle to the sponsors of the security project.

Provides verbal and/or written presentations and security briefings as required.

Prepares security plans, charts, tables and diagrams to assist in analysing or displaying problems.

Consultation:

Meets in conference with business owners, system owners, and other cognizant officials and states security problems in a form capable of being understood and solved.

Works with a variety of scientific, business or engineering security tools requiring a sound knowledge of mathematics and management sciences

Reporting Structure

The successful candidate will report to the Project Manager, Electronic Ticket Project – Phase 1. The successful candidate is also expected to coordinate activities with the SNB Technology project Manager.

Duration/Effort

The successful candidate will be required on a full-time or part time basis for a period of (max of 30 working days), commencing July 15th, 2019 and ending on by August 30, 2019.

SNB reserves the right to truncate the engagement, as needed.

SNB may extend the engagement, monetarily, by 25% if it deems necessary.

Job Type: Contract