Our valued Public sector client is in need of a Senior IT Security Design Specialist to perform impact analysis with the perspective of an enterprise solution (including Public Cloud solutions), evaluate and make recommendations.

Provide services to assess and analyze risks and develop Statements of Sensitivity (SOS) and Threat and Risk Assessments (TRA) as required for Cyber Security and Identity Management (CSIM) to perform Security Assessment and Authorization (SA&A) for current and future computing initiatives.

We are looking for someone with the following, but not limited to, experience:

• 10 years as a IT Security Design Specialist
• Experience designing, architecting, or engineering IT security components for an enterprise-wide solution OR for a designed solution for solving IT security problems, for a Public Sector client.
• Experience identifying and modelling threats that pose a risk to a client's systems and data and applying safeguards according to these threats during system design
• Experience creating complete Security Control Profiles by performing all of the following tasks to ensure that the solution architecture and its supporting processes and policies are assessed completely:
  • Identifying the scope of the project.
  • Establishing the set of security architecture components.
  • Crafting a control profile on a per-component basis where one control may apply differently to each component, requiring separate evidence.
  • Providing documented guidance as to acceptable evidence per control per component.
• Experience verifying that security safeguards for IT systems and infrastructure meet Government of Canada policies and standards and have been implemented correctly to meet assurance requirements
• Experience providing guidance to their client concerning the mitigation of security risks within the Public Cloud environment
• Two valid certifications from the following list:
  • CISSP (Certified Information Systems Security Professional) from International Info System Security Certification Consortium Inc. (ISC)2
  • CCSP (Certified Cloud Security Professional) from (ISC)²)
  • CISSP / ISSEP (advanced specialty Information Systems Security Engineering Professional) from (ISC)2
  • CISSP / ISSAP (advanced specialty information Systems Security Architecture Professional) from (ISC)2
  • CISSP / ISSMP (advanced specialty Information Systems Security Management Professional) from (ISC)2
  • CPP (Certified Protection Professional) from ASIS;
  • CISA (Certified Information Systems Auditor) from ISACA
  • CRISC (Certified in Risk and Information Systems Control) from ISACA;
  • CISM (Certified Information Security Manager) from ISACA
  • CBCP (Certified Business Continuity Professional) from DRI
  • Certificate of Cloud Security Knowledge (Cloud Security Alliance)

Apply