Security Analyst

Contract Start Date: on or about August 18, 2022

Contract Completion: March 31, 2023 with possible extension

Scope of Work

The Security Analyst will assist in the following activities in order to augment service development and delivery teams:

Work collaboratively with health system stakeholders including the Ministry of Health, Ontario Health, EMR vendors, health system delivery partners and clinicians to provide IT security expertise throughout the product or service development lifecycle, advancing the security maturity of Electronic Medical Record (EMR) solutions
Analyze proposed solution architectures for both current and new provincial EMR/EHR interoperability initiatives to provide best practice recommendations and enhancements
Analyze proposed solution artefacts in the design, development, delivery, and ongoing enhancement of current and new products and services, including application development and data warehousing, and provide best practice recommendations and enhancements
Analyze new and emerging threats and legislative changes to assess resulting impact to Product and Services, EMR Solutions, and external partners
Review third party security submissions, such as TRA and PIAs, for completeness and accuracy. Working with stakeholders to recommend and confirm remediations as necessary
Act as a subject matter expert in the support of internal support, development, and validation teams.
Leverage industry standard and recognized provincial security control frameworks to advance minimum privacy and security practices and specifications
Lead and facilitate cross-stakeholder EMR technology workshops
Develop and provide presentations and documentation to various internal and external audiences as required and report regularly on progress and status.
Provide leadership in cyber security incident response if necessary

Experience

The evidence of the candidate's skills in these areas will be evaluated to assess the candidate's ability to deliver on the Scope of Work. The following areas will be evaluated:

Completion of an educational institution computer technology program with preference being given to a University degree in Computer Science or Computer Engineering
Minimum five (5) years of experience in Information Technology (IT)
Minimum three (3) years experience with IT Security principles, practices, technologies, and procedures
Experience with health sector privacy and security principles with preference to experience with PHIPA
Industry recognized IT Security certification (e.g., CISSP, CISA, etc), in good standing. Please provide proof of certification
Understanding of security control and risk assessment methodologies and frameworks such as: HTRA, NIST, ISO-27001/2, and MITRE
Knowledge of various systems and security technologies including Operating systems, Networks, Secure Communications, Identity Management, and Cloud Solutions
Experience collecting, analyzing, and reviewing security audits, events, and threat intelligence
Experience with community based Primary Care EMR solutions and office technologies an asset
Demonstrated experience building and maintaining productive working relationships with internal/external stakeholders in complex, multi-stakeholder health care environments
Excellent written presentation skills, including experience presenting to internal and external executives

01 Millennium Consulting

New Jobs

Information Technology Security Analyst