Description:
Senior Cyber Security Consultant
Job Overview
Reporting to the Section Head, Information Systems, this position is responsible to provide security advisory, solution and consulting services to key stakeholders across the enterprise for the purposes of procuring and implementing technology solutions and/or services.
Key Accountabilities
- Educate stakeholders on complex cybersecurity risks, requirements, and best practices to improve awareness, support informed decision-making, and achieve alignment on security priorities.
- Build and maintain effective relationships through ability to effectively communicate, interact with business units, project teams, technology teams, and senior stakeholders to enable collaboration and timely resolution of cybersecurity issues.
- Assess evolving external cyber threats, technology trends, regulatory expectations, and business changes to identify potential impacts to the organization’s security posture.
- Develop practical, innovative, and cost-effective solutions to technical, process, and security challenges while balancing operational needs with cybersecurity risk.
- Evaluate security exception requests, assess associated risks, document compensating controls, and recommend appropriate risk treatment strategies or approvals.
- Act as the cybersecurity single point of contact for projects initiated by the Office of the Chief Information Security Officer, providing security requirements, guidance, risk-based decisions, and ongoing project support.
- Review and approve technical changes in forums like CAB, TRB, provide cybersecurity subject-matter expertise in support of CIO functions, and ensure projects implement robust security controls, architecture, policies, and standards.
- Develop and maintain security practices and procedures—including Threat Risk Assessments for applications, systems, and cloud services—to support continuous assessment of changes to OPG’s business and technical environment.
Qualifications
- 4 years of University in an appropriate field such as computer science plus 1 year of further concentrated study in cybersecurity programs.
- Requires over 5 years of practical cybersecurity experience in security analysis, problem-solving, and stakeholder consulting, with the ability to identify and assess security threats and risks, recommend effective mitigating solutions, and remain current on emerging threats and industry best practices to support secure implementation of technologies and services.
- Requires an advanced knowledge of computer sciences and cybersecurity, including in-depth understanding of security best practices, risks and technologies, and the solutions to address those risks.
- Demonstrated practical cybersecurity experience in security analysis, problem-solving, and consulting to provide effective, risk-informed advice to business and technical stakeholders.
- Broad, end-to-end cybersecurity expertise across areas such as application security, vulnerability management, network security and firewall rules, data security, identity and access management, and related security domains.
- Strong understanding of cybersecurity threats, vulnerabilities, risks, and mitigating controls, with the ability to assess potential impacts and recommend appropriate solutions.
- Ability to research and evaluate cybersecurity standards, security systems, vendor products, and validation methods to support technology decisions and secure implementation approaches.
- Knowledge of enterprise and security architecture, with the ability to develop clear technical documentation and presentations and represent cybersecurity requirements at forums such as the Architecture Review Board.
- Knowledge of recognized cybersecurity frameworks and industry practices—including NIST, ISO 27000 series, GDPR, ISC2, SANS, and ISACA guidance—and the ability to remain current on emerging threats and best practices.