Senior Specialist - Risk Assessment

Teramach Technologies, Inc.; Ontario; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Cyber Architecture Specialist to lead critical initiatives in securing digital environments. This role involves collaborating with diverse technology teams to develop strategic cyber architecture roadmaps while ensuring compliance with security standards. The ideal candidate will possess extensive experience in risk assessment, application security, and cloud security, particularly within the public sector. This position offers an exciting opportunity to influence cyber strategies and architecture, making a significant impact on the organization's security posture. If you are passionate about cybersecurity and eager to contribute to innovative projects, this role is for you.

Qualifications

• 8+ years of experience writing detailed risk assessment reports.
• Expert knowledge of application, infrastructure, and system security controls.
• Hands-on experience conducting security risk assessments for 10+ years.

Responsibilities

• Perform threat modeling and security control design analysis.
• Assist in establishing cyber strategy and architecture standards.
• Evaluate projects for compliance with cyber and architecture standards.

Skills

Risk Assessment Reporting

Application Security Controls

Security Risk Assessments

Cloud Security (AWS, Salesforce)

Vulnerability Frameworks (CVSS, OWASP)

Education

CISSP

CISA

CISM

CRISC

CCSP

PMP

Tools

AWS

Salesforce

ISO 27001/27002

NIST

Job description

Overview

ComputaCenter TeraMach proudly supports a variety of clients in delivering critical cyber architecture initiatives.

Responsibilities

The Specialist is required to provide expertise in cyber architecture and assist with the planning and execution of assigned projects.

Standard responsibilities include:

1. Perform threat modeling exercises and security control design analysis, architecture and design reviews, coordinating with stakeholders to integrate secure-by-design principles.
2. Assist in establishing cyber strategy and architecture standards for new developments.
3. Engage with technology teams across the organization to align on key projects and initiatives; develop strategy and cyber architecture execution roadmaps.
4. Create solutions balancing business requirements with information and cyber security needs.
5. Evaluate projects, systems, applications, networks, and tools for compliance with cyber and architecture standards.
6. Provide subject matter expertise/support for RFP design and evaluations, as directed.
7. Conduct other cyber-related risk assessments and security reviews as directed by management.

Qualifications

• Must have experience writing detailed risk assessment reports and presenting to senior leaders (8+ years). Must be prepared to provide written sample reports.
• Expert knowledge of application, infrastructure, and system security controls (8+ years).
• Hands-on experience conducting security risk assessments (10+ years).
• Experience reviewing application vulnerability assessments and penetration tests (5+ years).
• Current experience in cloud security and evaluating/reviewing RFPs for cloud services such as AWS and Salesforce in a public sector environment.
• Experience working in the government/public sector (4+ years).
• Experience implementing security policies, procedures, and processes (4-8 years).
• Current experience with external contracts/vendor RFPs (both cloud and on-premise): security requirements, evaluation, due diligence, and review (5+ years).
• Strong understanding of vulnerability frameworks like CVSS and OWASP Top 10.
• Strong understanding of internet security, networking protocols, and internal control frameworks.
• Professional designations such as CISSP, CISA, CISM, CRISC, CCSP, or PMP.
• Current government security clearance is desirable.
• Advanced knowledge of security standards such as ISO 27001/27002, CIS, NIST, ISO 27018, COBIT, and cloud security frameworks.