HM Note: This hybrid contract role is two 2 days in office. Candidates resume must include first and last name.
Description
Job Description
Responsibilities:
- Defines evaluates and assesses security architecture requirements for systems environments and IT projects.
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;Conduct Threat Risk Assessment for SaaS PaaS IaaS and on prem applications
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;Conduct risk assessments to identify security risks related to AI technologies and assess their impact on the organization.
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;Communicate security risks and mitigation strategies effectively to stakeholders ensuring transparency and collaboration
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;Develops technical architecture framework and strategies to meet the business and application requirements.
- Advises on the identification analysis and resolution of specific security factors risks vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards.
- Analyze and evaluate alternative security technology solutions to meet business problems.
General Skills:
- Strong understanding and expertise in security architecture
- Knowledge of techniques to secure information assets and implementation of security technologies.
- Experience in Threat Risk Assessment methods Knowledge and understanding of Information Management principles concepts policies and practices
- Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats or inherent weaknesses.
- Solid knowledge of current security and contingency technology and techniques
- Experience in digital signature encryption access controls firewalls authentication virus protection etc. and a proven working knowledge of security audit procedures and protocols.
- Experience in developing enterprise architecture deliverables (e.g. models)
- Knowledge of risk management frameworks industry best practices security policy creation
Desirable Skills:
- Experience in developing enterprise architecture deliverables (e.g. models) based on Ontario Government Enterprise Architecture processes and practice
- Knowledgeable in OT security publications and models such as NIST 80082 and Purdue Model
- Knowledge of ICS SCADA or OT Systems Certification or Training
and nbsp;
Must haves:
- Six 6 to eight 8 years experience working in a security architect or similar role.
- Knowledge of regulatory and assurance compliance requirements including ISF SOGP NIST SSAE16/18 (SOC 12 3 PCI DSS 3.2 and Data Privacy.
- Experience with risk assessment methodology (ISF IRAM NIST)
Key skills to evaluate
- Experience in designing security architecture for information technology and operational technology
- Experience in reviewing system security measures and able to recommend/design/architect missing security controls.
- Experience in implementing zero trust architecture
- Experience in NIST SOC SSAE 18 PCI framework
- Experience in designing security controls for and nbsp;SaaS PaaS and IaaS and nbsp;
- Experience in security tools frameworks and technologies relevant to AI systems
and nbsp;
Must Haves:
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;68 years and nbsp;Experience in designing security architecture for information technology and operational technology
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;68 years and nbsp;Experience in reviewing system security measures and able to recommend/design/architect missing security controls.
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;68 years and nbsp;Experience in implementing zero trust architecture
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;68 years and nbsp;Experience in NIST SOC SSAE 18 PCI framework
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;68 years and nbsp;Experience in designing security controls for and nbsp;SaaS PaaS and IaaS
and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp; and nbsp;Experience in security tools frameworks and technologies relevant to AI systems