About the role
Secret Clearance Required
About the Opportunity We are seeking an experienced IT Security Methodology, Policy & Procedures Analyst to support a large Government of Canada cyber security initiative. The successful candidate will play a key role in developing security policies, standards, methodologies, and risk management practices while supporting enterprise cyber security and business continuity initiatives. This role is ideal for a senior security professional with extensive experience in IT security governance, policy development, and risk management within complex enterprise environments.
Responsibilities Review and analyze IT security methodologies, policies, standards, procedures, and governance frameworks. Develop and maintain IT security standards, policies, procedures, and guidelines aligned with Government of Canada security requirements. Create security policies covering: IT Security Assurance Security Assessment & Authorization Information Infrastructure Protection Privacy Business Continuity Planning Disaster Recovery & Contingency Planning Research & Development Develop IT security risk assessment methodologies. Conduct security risk assessments to identify threats and vulnerabilities across enterprise IT environments. Produce security documentation including: Security Requirements Definitions Threat Risk Assessments (TRAs) Privacy Impact Assessments (PIAs) Develop reusable security templates, standards, and best practices. Develop and deliver IT security training materials. Provide guidance and knowledge transfer to project teams and stakeholders. Support ongoing cyber security governance and continuous improvement initiatives.
Required Qualifications The successful candidate must demonstrate: 10+ years of experience Security & Risk Management Cloud Security Endpoint Security Communications & Network Security Identity & Access Management Security Operations Secure Software Development & Application Security Security Assessment & Authorization Privacy Business Continuity Disaster Recovery Information Infrastructure Protection Recent experience reviewing, analyzing, or applying IT security methodologies, standards, policies, and risk management frameworks. Experience working within large enterprise or Government of Canada environments is considered a strong asset.
Preferred Qualifications Preference will be given to candidates with experience: Developing enterprise IT security risk assessment methodologies. Conducting enterprise threat and risk assessments. Developing and delivering IT security training. Working with Government of Canada cyber security standards and frameworks. Supporting security governance and compliance initiatives.
Desired Skills Strong analytical and problem-solving abilities Excellent written communication and technical documentation skills Experience working with multidisciplinary technical teams Strong understanding of cyber security governance and risk management Ability to communicate complex security concepts to both technical and business audiences
Similar Jobs
About the role
Secret Clearance Required
About the Opportunity We are seeking an experienced IT Security Methodology, Policy & Procedures Analyst to support a large Government of Canada cyber security initiative. The successful candidate will play a key role in developing security policies, standards, methodologies, and risk management practices while supporting enterprise cyber security and business continuity initiatives. This role is ideal for a senior security professional with extensive experience in IT security governance, policy development, and risk management within complex enterprise environments.
Responsibilities Review and analyze IT security methodologies, policies, standards, procedures, and governance frameworks. Develop and maintain IT security standards, policies, procedures, and guidelines aligned with Government of Canada security requirements. Create security policies covering: IT Security Assurance Security Assessment & Authorization Information Infrastructure Protection Privacy Business Continuity Planning Disaster Recovery & Contingency Planning Research & Development Develop IT security risk assessment methodologies. Conduct security risk assessments to identify threats and vulnerabilities across enterprise IT environments. Produce security documentation including: Security Requirements Definitions Threat Risk Assessments (TRAs) Privacy Impact Assessments (PIAs) Develop reusable security templates, standards, and best practices. Develop and deliver IT security training materials. Provide guidance and knowledge transfer to project teams and stakeholders. Support ongoing cyber security governance and continuous improvement initiatives.
Required Qualifications The successful candidate must demonstrate: 10+ years of experience Security & Risk Management Cloud Security Endpoint Security Communications & Network Security Identity & Access Management Security Operations Secure Software Development & Application Security Security Assessment & Authorization Privacy Business Continuity Disaster Recovery Information Infrastructure Protection Recent experience reviewing, analyzing, or applying IT security methodologies, standards, policies, and risk management frameworks. Experience working within large enterprise or Government of Canada environments is considered a strong asset.
Preferred Qualifications Preference will be given to candidates with experience: Developing enterprise IT security risk assessment methodologies. Conducting enterprise threat and risk assessments. Developing and delivering IT security training. Working with Government of Canada cyber security standards and frameworks. Supporting security governance and compliance initiatives.
Desired Skills Strong analytical and problem-solving abilities Excellent written communication and technical documentation skills Experience working with multidisciplinary technical teams Strong understanding of cyber security governance and risk management Ability to communicate complex security concepts to both technical and business audiences