Security Specialist Threat Risk Assessment Senior

Job Title: Security Specialist - Threat Risk Assessment - Senior
Location: Orillia Ontario
Work Model: Hybrid (Fully onsite expected)

Description / Responsibilities / Skills

Must Have

5 years experience conducting Threat Risk Assessments for systems and applications

5 years experience assessing internal and external threats and vulnerabilities and mitigating risks

5 years experience ensuring incorporation of IT security and contingency measures in system development

Description

Responsibilities

• Conduct Threat Risk Assessments (TRA) for software systems and enterprise solutions
• Collaborate with project teams security architects and stakeholders
• Document risks mitigation strategies and produce formal security assessment reports
• Identify internal and external threats and assess impact to information systems
• Recommend and implement risk mitigation strategies
• Define and evaluate security architecture requirements
• Ensure systems incorporate security and contingency measures
• Participate in enterprise security initiatives and compliance activities
• Support implementation of security controls and review effectiveness
• Provide advisory on security risks privacy concerns and compliance with standards
• Support incident investigation and ongoing risk monitoring

General Skills

• Strong knowledge of security architecture governance and risk management
• Experience applying cybersecurity methodologies and tools
• Experience facilitating TRA workshops and stakeholder sessions
• Knowledge of security technologies including encryption authentication and access control
• Experience identifying vulnerabilities and implementing mitigation solutions
• Understanding of privacy legislation and compliance frameworks
• Strong analytical communication and problem-solving skills
• Ability to work in team environments and manage priorities

Desirable Skills

• Experience with disaster recovery and business continuity planning
• Experience with penetration testing and vulnerability assessments
• Knowledge of public key infrastructure
• Experience delivering security training and awareness programs
• Experience in network monitoring and security design

Skills

Experience and Skill Set Requirements

Security and Risk Assessment

• Experience conducting Threat Risk Assessments using formal methodologies
• Experience assessing risks across applications infrastructure and data systems
• Experience defining mitigation strategies and security controls

Security Architecture and Compliance

• Experience designing and evaluating secure system architectures
• Knowledge of security standards and compliance requirements
• Experience applying privacy regulations and security directives

Security Operations and Implementation

• Experience implementing security controls and monitoring effectiveness
• Experience in incident response and vulnerability management
• Experience working in enterprise security environments

Communication and Collaboration

• Strong documentation and reporting skills
• Experience communicating technical security issues to various stakeholders