Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 38 hours ago

RQ00716 Senior Security Specialist

SourceCode858 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowRQ00716 Senior Security SpecialistSourceCode

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SourceCode's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 38 hours ago

The posting

RQ00716 Senior Security Specialist

6 Month Contract  REMOTE (Ontario Only)

The Sr. Security Specialist will support and deliver on multiple initiatives related to Security Governance, Risk and Compliance and Cyber Defense Operations. This includes leading multiple initiatives related to security strategy, security audit and compliance requirements and findings, security governance including policies, standards and processes development and security risk management procedures.

Must haves:

  • Experience in risk management models for assessing and mitigating various aspects of risk exposure.
  • Experience with risk assessment methodologies such as HTRA and NIST CSF, and frameworks such as ISO 27001/2.
  • Experience with security governance including developing policies, standards, processes and procedures.
  • Hands on experience with IPC (Information Privacy Commissioner) triennial audits.
  • Demonstrated experience in working with various compliance and audit frameworks including, PHIPA, SOC 2 Type II, OAGO
  • An adept team player who is action oriented, with a record of accomplishment of motivating other team members to achieve higher goals.

Desired Skills:

  • 10+ years' experience in various security domains including third-party risk management, IT audits and/or Security Governance, Risk and Compliance (GRC)
  • Bachelor's or Master's degree in Computer Science, Information Technology, Cyber Security, Systems or other related field, or equivalent work experience.
  • Professional certifications in information/cyber security (e.g. CISSP, CCSP, CISA, CISM, CRISC) is required.
  • Knowledge of prevalent industry standards (ISO 27001/27002, NIST, CIS, COBIT)

Required Skills:

  • An understanding of risk assessment methodologies such as HTRA and CSF, and frameworks such as NIST and ISO 27001/2.
  • Knowledge and experience developing and working with security architecture, and IT management frameworks such as SABSA, and CoBIT.
  • Strong knowledge and demonstrated experience working with compliance and audit frameworks including PHIPA, SOC 2 TII, OAGO audits.
  • Hands on experience with IPC triennial audits
  • Technical writing expertise and demonstrated knowledge and experience in developing Information security policies and standards in alignment with PHIPA, IPC requirements and industry standards.
  • Strong understanding and ability to interpret and communicate risk management concepts.
  • Good experience & knowledge of TRA methodologies and other risk assessment methodologies and tools, and familiarity with related security tests and test methodologies
  • Deep understanding of typical security threats, vulnerabilities and safeguards relevant to IT systems.
  • Experience in writing and presenting subject matter information that is both comprehensive and easy to understand.
  • Excellent communication and reporting abilities to effectively present findings and risk mitigation strategies to both technical teams and executive stakeholders.
  • Experience and working knowledge of risk management lifecycle, processes, and concepts.
  • Strong analytical skills to assess potential impacts and likelihoods of various threat scenarios.  AI Disclaimer: Source Code may use artificial intelligence (AI) tools to assist in certain aspects of its recruiting and business operations. Note: The higher end of the range is intended for absolutely exceptional candidates who meet all must-have requirements and most or all nice-to-have qualifications. The client will evaluate candidates based on both rate expectations and overall skill set when shortlisting. INCORPORATED RATE RANGE (7.25 billable hours per day) $96.55/hr - $115.86/hr Inc. T4 RATE RANGE (7.25 billable hours per day) $77.24/hr - $92.69/hr T4

Evaluation Criteria:

  • Minimum 5 years extensive experience in conducting comprehensive security Threat and Risk Assessment (TRA) using frameworks such as NIST CSF, HTRA, and ISO 27001. Risk Assessment, mitigation recommendations and management with a strong focus on identifying vulnerabilities, analyzing potential impacts, and delivering actionable risk mitigation to stakeholders. 25 points
  • Minimum 5 years of extensive experience with Information security governance, developing policies and standards with a strong ability to identify gaps between the current security posture and industry standards, best practices, and regulatory requirements. 25 points
  • Minimum 8 years of hands-on experience with IPC and OAGO audits. 30 points
  • 5+ years of experience authoring executive-level reports, developing cyber security program and risk registers, and delivering presentations to stakeholders and senior leadership. 20 points

Total Evaluation Criteria: 100 Points

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SourceCode's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SourceCode's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SourceCode's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.