Security Specialist - Senior
Offre en anglaisThe role involves conducting threat risk assessments and developing threat models using industry-standard frameworks. The specialist is also responsible for managing security governance and producing technical reports for leadership and stakeholders.
- Hybride
- Toronto, ON
- Publié 5 août 2026
- Postuler avant le 4 sept. 2026
- 1 poste
Résumé du poste
Security Specialist - Senior Location: 525 University Avenue, Toronto - Hybrid (upto 3 days onsite) Duration: 7 months Qualifucation: Risk Management & Assessment –5-7 years of proven experience in conducting threat risk assessments using frameworks like ISO 31000, NIST RMF, or FAIR Threat Modeling –3-5 years of practical knowledge of threat modeling techniques (e.g., STRIDE, PASTA, MITRE ATT&CK), including development of data flow diagrams and attack vectors Information Security Governance –5+ years of strong understanding of security policies, standards, and controls aligned with ISO 27001, NIST CSF, and CIS Controls Communication & Reporting – 5+ years skilled in writing technical and executive-level reports, risk registers, and presenting to stakeholders and leadership
Ce que vous ferez
The role involves conducting threat risk assessments and developing threat models using industry-standard frameworks. The specialist is also responsible for managing security governance and producing technical reports for leadership and stakeholders.
Exigences
Candidates need 5-7 years of experience in risk management and 3-5 years in threat modeling. Proficiency in security policies aligned with ISO 27001, NIST CSF, and CIS Controls is required.
Autres compétences pertinentes
Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.
- Risk Management & Assessment
- Threat Modeling
- Information Security Governance
- Technical Reporting
- ISO 31000
- NIST RMF
- FAIR
- STRIDE
- PASTA
- MITRE ATT&CK
- ISO 27001
- NIST CSF
- CIS Controls
- Data Flow Diagrams
- Attack Vectors
- Stakeholder Management
Domaines d’emploi
- Security & Safety
- Technology
- Software
- Consulting
- Data & Analytics
Renseignements supplémentaires
- Expérience minimale
- 5+ ans
- Postuler avant le
- 4 sept. 2026
- Langue de l’offre
- anglais
- Heures de travail
- 40 heures par semaine
- Présence au bureau
- 3 jours par semaine
- Niveau d’expérience
- Mid-Senior level
- Mode de candidature
- La candidature directe est offerte