Security Specialist - Senior

Assignment : RQ06260 Specialized ITConsultant Senior

Start Date : EndDate :

EndDate :

Office Location : 5775 Yonge St.

Organization : Children Youth & Social ServicesCluster

Ministry : Ministry of Children Community andSocial Services

Business Days : 123.00

Title : Specialized IT Consultant

Candidate is requiredto come in office 3 days a week

Musthaves :

Experience in planning organizing and implementing security relatedefforts for large systems

Knowledge of CyberSecurityprinciples including threat modeling risk assessment and securitycontrols and Familiarity with common security Experience inApplication security and network security and theirsafeguards

Knowledge of risk management practices andstrategies to mitigate identified risks. This includes ability toassess risks related to sensitive data

Experience inSecurity Architecture and design. This includes designing securesystems and network considering factors like access controlsencryption and secure communication channels

Familiaritywith Privacy laws and understanding of privacyregulations

Proficient in Endpoint Network and Cloudrelated aspects in data leakage prevention

Experience inunderstanding data flows both inside and outside theorganization

Experience in facilitating meetings withvarious stakeholders

Skills

Experience and Skill SetRequirements

Proficiency incybersecurityrelated practices including knowledge of safeguards ispreferred. Prior experience in this area would be advantageous.

Experience in planning organizing and implementingsecurity related efforts for large systems

Knowledge ofCyberSecurity principles including threat modeling risk assessmentand security controls and Familiarity with common securityframeworks such as NIST Cybersecurity Framework ISO 27001 or CISControls.

Experience in Application security and networksecurity and their safeguards

Knowledge of riskmanagement practices and strategies to mitigate identified risks.This includes ability to assess risks related to sensitivedata

Experience in Security Architecture and design.This includes designing secure systems and network consideringfactors like access controls encryption and secure communicationchannels

Familiarity with Privacy laws and understandingof privacy regulations

Experience creating securitystrategy documentation plans and test scenarios for various typesand phases of security testing

Proficient in EndpointNetwork and Cloud related aspects in data leakageprevention

Experience in understanding data flows bothinside and outside the organization

Experience infacilitating meetings with various stakeholders

Experience in leading initiatives involving stakeholders acrossmultiple organizations

Experience creating reports anddocumentation and presenting to various stakeholders seekingapproval

Experience leading a team of security staff andvendors working closely with the project leads

Knowledgeand experience in the use of securityrelated tools andframeworks

Experience working in an agileenvironment

Knowledge of cloud nativeapplications

SKILLS

Weightage : 50

Experiencein planning organizing and implementing security related effortsfor large systems

Knowledge of CyberSecurity principlesincluding threat modeling risk assessment and security controls andFamiliarity with common security Experience in Application securityand network security and their safeguards

Knowledge ofrisk management practices and strategies to mitigate identifiedrisks. This includes ability to assess risks related to sensitivedata

Experience in Security Architecture and design.This includes designing secure systems and network consideringfactors like access controls encryption and secure communicationchannels

Knowledge and experience in the use ofsecurityrelated tools and frameworks

Experience inleading initiatives involving stakeholders across multipleorganizations

Familiarity with Privacy laws andunderstanding of privacy regulations

Proficient inEndpoint Network and Cloud related aspects in data leakageprevention

Experience in understanding data flows bothinside and outside the organization

Weightage : 30

Experience creating security strategy documentation plans and testscenarios for various types and phases of securitytesting

Experience in facilitating meetings with variousstakeholders

Experience creating reports anddocumentation and presenting to various stakeholders seekingapproval

Experience leading a team of security staff andvendors working closely with the project leads

Knowledgeand experience in the use of securityrelated tools andframeworks

Weightage : 20

Experienceworking in an agile environment

Knowledge of cloudnative applications

Understand the security landscape ofvulnerable sectors

Experience in vendor management whilebalancing organization needs with vendor interests