Senior Security Specialist - Threat Risk Assessment

• Assesses internal and external threats and vulnerabilities of information systems and resources and the likelihood of these threats and resulting impacts. Where possible, reduce risks through system or organizational design
• Implement security measures to prevent or mitigate, detect and respond to security threats and vulnerabilities to information systems and resources at the program and enterprise levels. Periodically review security measures to ascertain that the security measures are still sufficient and continue to operate as expected. Such reviews must also be performed whenever security incidents occur or business processes change
• Defines, evaluates, and assesses security architecture requirements for systems environments and IT projects
• Ensures the incorporation of IT security and contingency measures in the development of systems
• Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities
• protection of personal privacy issues
• and appropriate industry and international security standards
• Carry out information and information technology (I&IT) security projects and tasks in the Ontario Service as assigned by Corporate Security or cluster I&IT management

• Knowledge and experience with the security & IT policies/standards of the Ontario government (e.g. Standards, Policies, Directives)
• Experience with operational optimization in a unionized Public Sector environment
• Knowledge of Public Sector structure and policies, including: Relevant public policy objectives, principles, and constraints
• Organizational culture/unionized Public Sector environment
• Application of relevant legislation and policies (e.g., Conflict of Interest, Freedom of Information and Protection of Privacy Act (FIPPA), etc.)
• Ability to handle and secure sensitive information, detailing the due-diligence around storage/modification of received documents, records retention policies, identity management, and other controls in-place used to protect OPS information

Prior OPS or Public sector experience

Potential for extension