About this role
RQ00650 - Sr. Security Specialist 1+ year contract (260 business days) - possible extension ONSITE 5 days - 200 Front St West
NOTE - Provide after-hours support as required for security events or high-priority operational needs. Must Haves: • 7+ years of hands-on cyber security experience supporting security operations, incident response, threat intelligence, secure architecture, and other security assurance activities. • Experience designing, implementing, and securing cloud environments (e.g., Azure), including cloud-native security controls and architecture best practices. • Strong experience supporting and coordinating incident response activities, including cross-functional coordination and incident lifecycle management. • Demonstrated experience in project delivery, including planning, coordination, stakeholder engagement, and execution of security initiatives. • Strong business analysis skills, including requirements gathering, documentation, and translating business needs into security solutions and risk-based recommendations. Nice-to-have: • Bachelor's degree in Information Technology, Computer Science, Cyber security, or related discipline. • Relevant certifications such as CISSP, CCSP, SSCP, Security+, or GIAC certifications. Project Overview: In response to the escalating cyber threats in today's digital landscape, Supply Ontario is maturing its strategic initiatives to expand its cyber security program. This initiative aims to strengthen the organization's security posture, safeguard sensitive data, and ensure continuity of operations in the face of evolving cyber risk. The objective is to establish and mature a comprehensive cyber security program that supports Supply Ontario's core business functions. This includes continuous improvement of proactive and reactive security controls across Confidentiality, Integrity, and Availability (CIA). Key program areas include Cloud Security, Vulnerability Management, Cyber Risk Management, Security Operations, Incident Response, Threat Intelligence, Security Architecture, Policy Development, Compliance, and Training & Awareness. The program will leverage industry best practices and modern security technologies to enhance resilience and ensure alignment with enterprise and public sector security expectations. Experience required: • 7+ years of hands-on cyber security experience supporting security operations, incident response, threat intelligence, secure architecture, and other security assurance activities. • Experience designing, implementing, and securing cloud environments (e.g., Azure), including cloud-native security controls and architecture best practices. • Strong experience supporting and coordinating incident response activities, including cross-functional coordination and incident lifecycle management. • Demonstrated experience in project delivery, including planning, coordination, stakeholder engagement, and execution of security initiatives. • Strong business analysis skills, including requirements gathering, documentation, and translating business needs into security solutions and risk-based recommendations. • Strong knowledge of cyber risk management frameworks and conducting threat risk assessments with associated mitigation strategies. • In-depth knowledge of industry standards and frameworks such as NIST 800-53, ISO/IEC 27001, and CIS Controls. • Experience working with SOC audit reports (including SOC 2 Type II) and supporting audit/compliance activities. • Strong understanding of cyber security concepts including vulnerabilities, threats, encryption, defense-in-depth, authentication, risk management, and security operations.</li