RQ- Security Specialist - Senior

Description

Responsibilities:
Defines, evaluates, and assesses security architecture requirements for systems environments and IT projects. Ensures the incorporation of IT security and contingency measures in the development of systems. Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards. Carry out information and information technology (I&IT) security projects and tasks in the Ontario Public Service as assigned by Corporate Security or cluster I&IT management General

Skills:

Strong understanding and expertise in security architecture Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats or inherent weaknesses Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act) in order to identify and assess areas of concern and risk Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, fire-walls, authentication, virus protection, etc.);

and a proven working knowledge of security audit procedures and protocols Experience in developing enterprise architecture deliverables (e.g. models) Experience in providing specialized security support at the specified experience level Experience in establishing secure environments at a network, operating system or application level

Experience with implementing security on complex and distributed systems. Awareness of emerging IT trends and directions, especially as related to security Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience Desirable

Skills:

Experience in developing enterprise architecture deliverables (e.g. models) based on Ontario Government Enterprise Architecture processes and practice Experience in Threat Risk Assessment methods Knowledge and understanding of Information Management principles, concepts, policies and practices Experience in business recovery and disaster recovery planning. Experience in performing threat and risk assessment. Experience in public key infrastructure development and operation. Experience in security design as part of systems development projects.

Experience in intrusion detection systems. Experience in mitigation tools for malicious software. Experience in vulnerability analysis and penetration testing. Experience in network monitoring. Experience in security policy development. Experience in developing and delivering security education. Experience in forensic investigation. Knowledge and understanding of Information Management principles, concepts, policies and practices

Deliverables:
The Senior Cyber Security Specialist will lead the development and execution of cyber tabletop exercises to enhance the incident response readiness of Ontarios ministries. This role involves designing, facilitating, and analyzing simulations to test cyber resilience, supporting the OPS Cyber Security Strategys commitment to service delivery excellence. The specialist will collaborate with key stakeholders at the ministry, to tailor exercises to sector-specific risks, ensuring alignment with best practices.

They will provide strategic recommendations based on exercise findings, contribute to cyber training initiatives, and develop reports, dashboards and briefings for executive leadership.

Skills Experience and Skill Set Requirements

The Cyber Security Centre of Excellence (COE) is seeking one (1) Senior Cyber Security Specialists to support in strengthening Ontarios cyber security infrastructure as the province…