Specialized IT Consultant (Cyber Security)

Title: Specialized IT Consultant (Cyber Security)

Location: Toronto. ON (Hybrid)

Duration: 185 Days

Experience And Skill Set Requirements

Cyber Security and Privacy - 60%

5+ years’ experience mapping and adapting cyber security frameworks such as NIST CSF v1.1, COBIT, CIS Controls v8 and ISO 27001 for adoption by an organization comparable in size and complexity to a school board.

Knowledge of the new draft NIST Cyber Security Framework v2.0

5+ years’ experience integrating cyber security frameworks into an organization’s enterprise risk management practice and overall governance.

5+ years’ experience performing security analysis, developing and implementing cyber security and online privacy policies, standards and guidelines, preferably for the public sector or broader public sector.

Demonstrated experience applying privacy frameworks such as the NIST Privacy Framework and ISO/IEC 27701 is highly desirable.

Demonstrated experience performing cyber/online safety analysis, developing and implementing cyber safety policies, standards and guidelines is highly desirable.

Experience with the adoption of capability maturity models such as Capability Maturity Model Integration (CMMI) and Cybersecurity Maturity Model Certification (CMMC) is desirable .

Excellent knowledge of applicable legislation such as Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). Knowledge of the Education Act is desirable.

Excellent knowledge and exposure to Internet of Things (IoT) or Operational Technology (OT) security issues is desirable.

Communication Skills and Experience - 20%

Strong Communication Skills As Demonstrated Through

10+ years’ experience in effectively presenting to management teams and external stakeholders

10+ years’ experience in preparing written materials (e.g., security and privacy reports, status reports, recommendations, briefing notes)

Industry Certifications / Relevant Degrees - 15%

Security certification is mandatory (Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM))

Privacy certification (Certified Information Privacy Professional (CIPP)) is desirable

Other certifications CISA, CASP+

Public Sector Experience - 5%

5+ years’ hands-on experience working with large public sector environments, preferably with K-12 school boards