Cyber Security Consultant

**Secret Clearance Required** About the Opportunity We are seeking an experienced IT Security Methodology, Policy & Procedures Analyst to support a large Government of Canada cyber security initiative. The successful candidate will play a key role in developing security policies, standards, methodologies, and risk management practices while supporting enterprise cyber security and business continuity initiatives. This role is ideal for a senior security professional with extensive experience in IT security governance, policy development, and risk management within complex enterprise environments. Responsibilities Review and analyze IT security methodologies, policies, standards, procedures, and governance frameworks. Develop and maintain IT security standards, policies, procedures, and guidelines aligned with Government of Canada security requirements. Create security policies covering: IT Security Assurance Security Assessment & Authorization Information Infrastructure Protection Privacy Business Continuity Planning Disaster Recovery & Contingency Planning Research & Development Develop IT security risk assessment methodologies. Conduct security risk assessments to identify threats and vulnerabilities across enterprise IT environments. Produce security documentation including: Security Requirements Definitions Threat Risk Assessments (TRAs) Privacy Impact Assessments (PIAs) Develop reusable security templates, standards, and best practices. Develop and deliver IT security training materials. Provide guidance and knowledge transfer to project teams and stakeholders. Support ongoing cyber security governance and continuous improvement initiatives. Required Qualifications The successful candidate must demonstrate: 10+ years of experience Security & Risk Management Cloud Security Endpoint Security Communications & Network Security Identity & Access Management Security Operations Secure Software Development & Application Security Security Assessment & Authorization Privacy Business Continuity Disaster Recovery Information Infrastructure Protection Recent experience reviewing, analyzing, or applying IT security methodologies, standards, policies, and risk management frameworks. Experience working within large enterprise or Government of Canada environments is considered a strong asset. Preferred Qualifications Preference will be given to candidates with experience: Developing enterprise IT security risk assessment methodologies. Conducting enterprise threat and risk assessments. Developing and delivering IT security training. Working with Government of Canada cyber security standards and frameworks. Supporting security governance and compliance initiatives. Desired Skills Strong analytical and problem-solving abilities Excellent written communication and technical documentation skills Experience working with multidisciplinary technical teams Strong understanding of cyber security governance and risk management Ability to communicate complex security concepts to both technical and business audiences

The successful candidate will develop security policies, standards, methodologies, and risk management practices while supporting enterprise cyber security initiatives. They will also conduct security risk assessments and produce necessary security documentation.

Candidates must have over 10 years of experience in various areas of IT security, including risk management and policy development. Experience in large enterprise or Government of Canada environments is preferred.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• IT Security Governance
• Policy Development
• Risk Management
• Cloud Security
• Endpoint Security
• Communications Security
• Network Security
• Identity Management
• Access Management
• Security Operations
• Secure Software Development
• Application Security
• Security Assessment
• Privacy
• Business Continuity
• Disaster Recovery

Expérience minimale

10+ ans