SENIOR THREAT RISK ASSESSMENT SPECIALIST:

On behalf of our Public Sector client, Procom is searching for a Senior Threat Risk Assessment Specialist for a 6 month contract role. This position is a hybrid position with 1 day onsite at our client’s Orillia, Ontario office.

SENIOR THREAT RISK ASSESSMENT SPECIALIST - JOB DESCRIPTION:

The project involves conducting comprehensive Threat Risk Assessments (TRA) for software, systems, and solutions. The role requires collaboration with various teams to document risks, develop mitigation plans, and produce formal risk assessment reports. The specialist will assess internal and external threats and implement security measures to protect information systems and resources.

SENIOR THREAT RISK ASSESSMENT SPECIALIST - MANDATORY SKILLS:

• Strong understanding of security architecture, governance, and risk management.
• Experience with cyber security methodology and tools for TRA or security assessments.
• Ability to plan and facilitate Threat Risk Assessment workshops.
• Knowledge of Harmonized Threat Risk Assessment (HTRA) methodology.
• Experience in establishing secure environments at network, operating system, or application levels.
• Knowledge of relevant legislation and corporate directives related to information security.
• Excellent analytical, problem-solving, and communication skills.

SENIOR THREAT RISK ASSESSMENT SPECIALIST – NICE-TO-HAVE SKILLS:

• Experience in business recovery and disaster recovery planning.
• Knowledge of Information Management principles and practices.
• Experience in vulnerability analysis and penetration testing.
• Experience with public key infrastructure development and operation.
• Experience in developing and delivering security education.

• Conduct Threat Risk Assessments (TRA) and other relevant evaluations for OPP software, systems, and solutions.
• Collaborate with project teams, security architects, and compliance teams to document risks and mitigation plans.
• Assess threats and vulnerabilities of information systems and recommend design changes to reduce risks.
• Implement and periodically review security measures to ensure effectiveness.
• Define and assess security architecture requirements for IT projects.
• Advise on the resolution of security risks and compliance with industry standards.
• Carry out I&IT security projects and tasks as assigned.