(GOVERNMENT OF CANADA) IT Security Specialist

Company Description

SCT resources have a broad range of skills in different technologies.  The large skill-set has been made possible by a conscious focus on strengthening our skills base. Every person selected for our team brings something new, something that adds to our offerings. We learn continuously, both on the job and through formal training programs.

Job Description

Must have at minimum a Reliability Status Security Clearance from CIISD. 

Requirements :

• 7+ years of experience reviewing, analyzing and evaluating new and existing security policies, standards, guidelines and procedures and providing advice as to their appropriateness and effectiveness;
• Must possess one of the following certifications:
  • Storage Networking Industry Association (SNIA) Certified Professional (SCP)
  • SNIA Certified Systems Engineer (SCSE)
  • SNIA Certified Architect (SCA)
  • SNIA Certified Storage Networking Expert (SCSNE)
• Experience conducting security threat and risk assessments for two or more IT projects valued at $250K or more;
• Experience conducting security threat and risk assessments for one or more IT projects valued at $500K or more; and
• Experience conducting one or more security compliance audits.

Responsibilities :

Duties may include but are not limited to:

• Prepare work plans, schedules and progress reports;
• Develop IT security policies, standards, guidelines and procedures;
• Review existing security policies, standards, guidelines and procedures and provide advice and recommendations for system implementation;
• Conduct security threat and risk assessments of IT facilities, application systems and communications;
• Conduct reviews of backup, recovery and business continuity plans;
• Investigate security incidents and reporting cause and related weaknesses and recommending remedies;
• Design the security framework and propose recommendations for implementing the security components of IT infrastructure required to protect assets and to support application systems; and
• Provide advice on the security aspects of application systems under development.