Specialized IT Consultant - Toronto, Canada - YDC PRO Consulting

YDC PRO Consulting

Verified Company

Toronto, Canada

2 weeks ago

Posted by:

Sophia Lee

beBee Recruiter

Description

Travel Requirements - The resource(s) must be available to travel the same day or overnight in Ontario, as required. For this role, travel to school board locations across the province will be required. The resource(s) will work with the school boards and local public health units to ensure all required COVID-19 safety measures are followed when on-site at schools. Travel expenses will be reimbursed according to the Ontario Travel, Meal and Hospitality Expenses Directive.

5+ years experience

Must Haves:

5+ years' experience mapping and adapting cyber security frameworks such as NIST CSF v1.1, COBIT, CIS Controls v8 and ISO 27001 for adoption by an organization comparable in size and complexity to a school board.
5+ years' experience integrating cyber security frameworks into an organization's enterprise risk management practice and overall governance.
Experience with the adoption of capability maturity models such as Capability Maturity Model Integration (CMMI) and Cybersecurity Maturity Model Certification (CMMC) is desirable.
Security certification is mandatory (Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM))

Nice to Have:

Knowledge of the new draft NIST Cyber Security Framework v2.0
10+ years in preparing written materials

TOTAL OF 100%

Cyber Security and Privacy - 60%

5+ years' experience mapping and adapting cyber security frameworks such as NIST CSF v1.1, COBIT, CIS Controls v8 and ISO 27001 for adoption by an organization comparable in size and complexity to a school board.
Knowledge of the new draft NIST Cyber Security Framework v2.0
5+ years' experience integrating cyber security frameworks into an organization's enterprise risk management practice and overall governance.
5+ years' experience performing security analysis, developing and implementing cyber security and online privacy policies, standards and guidelines, preferably for the public sector or broader public sector.
Demonstrated experience performing cyber/online safety analysis, developing and implementing cyber safety policies, standards and guidelines is highly desirable.
Experience with the adoption of capability maturity models such as Capability Maturity Model Integration (CMMI) and Cybersecurity Maturity Model Certification (CMMC) is desirable.
Excellent knowledge of applicable legislation such as Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). Knowledge of the Education Act is desirable.
Excellent knowledge and exposure to Internet of Things (IoT) or Operational Technology (OT) security issues is desirable.

Communication Skills and Experience - 20%

Strong communication skills as demonstrated through:
10+ years' experience in effectively presenting to management teams and external stakeholders
10+ years' experience in preparing written materials (e.g., security and privacy reports, status reports, recommendations, briefing notes)

Industry Certifications / Relevant Degrees - 15%

Security certification is mandatory (Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM))
Privacy certification (Certified Information Privacy Professional (CIPP)) is desirable
Other certifications CISA, CASP+

Public Sector Experience - 5%