Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

RQ00629 - Sr. Security Specialist - Threat Risk Assessment

SourceCode859 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowRQ00629 - Sr. Security Specialist - Threat Risk AssessmentSourceCode

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SourceCode's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: first seen 3 days ago

The posting

RQ00629 - Sr. Security Specialist - Threat Risk Assessment

6-month contract (117 business days) - possible extension

ONSITE 5 days - 777 Memorial Ave, Orillia

Must Haves:

  • 5+ years experience Conducts Threat Risk Assessments (TRA) and other relevant for OPP software, systems and solutions.
  • 5+ years of experience assessing internal and external threats and vulnerabilities of information systems and resources and the likelihood of these threats and resulting impacts. Where possible, reduce risks through system or organizational design.
  • 5+ years of experience ensuring the incorporation of IT security and contingency measures in the development of systems
  • Public Sector experience

Responsibilities:

  • Conducts Threat Risk Assessments (TRA) and other relevant for OPP software, systems and solutions.
  • Collaborates with project/development teams, project managers, security architects, testing and compliance teams to document risks, mitigation plans and compile them into formal risk assessment reports directed towards a diverse set of audience, which includes developers, project managers, operations analysts, senior management & OPP leadership.
  • Assesses internal and external threats and vulnerabilities of information systems and resources and the likelihood of these threats and resulting impacts. Where possible, reduce risks through system or organizational design.
  • Implement security measures to prevent or mitigate, detect and respond to security threats and vulnerabilities to information systems and resources at the program and enterprise levels. Periodically review security measures to ascertain that the security measures are still sufficient and continue to operate as expected. Such reviews must also be performed whenever security incidents occur or business processes change.
  • Defines, evaluates, and assesses security architecture requirements for systems environments and IT projects.
  • Ensures the incorporation of IT security and contingency measures in the development of systems
  • Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards.
  • Carry out information and information technology (I&IT) security projects and tasks in the Ontario Public Service as assigned by Corporate Security or cluster I&IT management

General Skills:

  • Strong understanding and expertise in security architecture, governance, risk management and compliance.
  • Experience in the application of cyber security methodology and tools to define scope, critical business processes and functions, identify critical assets and dependencies in reports to clients (TRA or other security assessments).
  • Experience and ability to plan and facilitate Threat Risk Assessment and/or other workshops with business clients.
  • Experience and ability to apply the RCMP Harmonized Threat Risk Assessment (HTRA) or equivalent risk assessment methodology.
  • Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies.
  • Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats or inherent weaknesses.
  • Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act) in order to identify and assess areas of concern and risk
  • Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, firewalls, authentication, virus protection, etc.); and a proven working knowledge of security audit procedures and protocols.
  • Experience in establishing secure environments at a network, operating system or application level
  • Experience with implementing security on complex and distributed systems.
  • Experience in conducting in depth analysis and provide recommendations with all required sign-off in the prescribed timelines as given (TRA reports or other security assessment reports)
  • Experience and knowledge to provide security requirements for procurement documents and participate in security evaluations as part of the procurement process
  • Ability to assess Information Security Risk, Business Continuity Planning and Business Impact Analysis technical issues for any of the technical environments and delivery channels across the Ontario Provincial Government.
  • Awareness of emerging IT trends and directions, especially as related to security, privacy and risk management.
  • Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills
  • A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience

Desirable Skills:

  • Experience in performing threat and risk assessment.
  • Knowledge and understanding of Information Management principles, concepts, policies and practices.
  • Experience in business recovery and disaster recovery planning.
  • Experience in public key infrastructure development and operation.
  • Experience in security design as part of systems development projects, using major development tools, techniques and methodologies.
  • Experience in vulnerability analysis and penetration testing.
  • Experience in network monitoring.
  • Experience in developing and delivering security education.

Deliverables

  • Lead formal and informal security risk assessments and mitigation strategies.
  • Recommended measures to detect, prevent, and respond to security threats.
  • Define ad evaluate security architecture for systems and IT projects.
  • Provide leadership in cyber security and enterprise IT security architecture across business, technology, and application domains.

AI Disclaimer: Source Code may use artificial intelligence (AI) tools to assist in certain aspects of its recruiting and business operations.

Note: The higher end of the range is intended for absolutely exceptional candidates who meet all must-have requirements and most or all nice-to-have qualifications. The client will evaluate candidates based on both rate expectations and overall skill set when shortlisting.

INCORPORATED RATE RANGE (7.25 billable hours per day)

  • $96.46/hr - $115.75/hr Inc.

T4 RATE RANGE (7.25 billable hours per day)

  • $77.17/hr - $92.60/hr T4
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SourceCode's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SourceCode's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SourceCode's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.