RQ08753 - 安全专员 - 高级
RQ08753 - Security Specialist - Senior
Description
Responsibilities: 为系统环境和IT项目定义、评估和分析安全架构需求。确保在系统开发过程中融入IT安全和应急措施。就特定安全因素、风险、漏洞的识别、分析和解决；个人隐私问题的保护；以及适当的行业和国际安全标准提供建议。根据企业安全或集群IT管理的要求，在安大略省公共服务中执行信息和信息技术（I&IT）安全项目和任务。
General Skills: 对安全架构有深入理解和专业知识；了解保护信息资产的技术，以及安全技术的规划、设计和实施；具备发现安全架构中的差距或弱点以识别和缓解已知安全威胁或固有弱点的实践经验；了解与信息安全和保密相关的相关法律和公司指令（例如《信息自由与隐私保护法》），以识别和评估关注区域和风险；掌握当前的安全和应急技术及方法（例如数字签名、加密、访问控制、防火墙、身份验证、病毒防护等）；并具备安全审计程序和协议的实际操作经验；有开发企业架构交付物（例如模型）的经验；在指定经验水平上提供专业安全支持的经验；在网络、操作系统或应用层面建立安全环境的经验；在复杂和分布式系统上实施安全的经验；了解新兴IT趋势和方向，特别是与安全相关的方面；具备出色的分析、解决问题和决策能力；书面和口头沟通能力；人际交往和谈判技能；团队合作精神，有按时完成任务、管理优先级冲突和客户关系管理经验。
Desirable Skills: 基于安大略省政府企业架构流程和实践，具备开发企业架构交付物（例如模型）的经验；具备威胁风险评估方法的经验；了解信息管理的原则、概念、政策和实践。
查看英文原文
Description
Responsibilities: Defines, evaluates, and assesses security architecture requirements for systems environments and IT projects. Ensures the incorporation of IT security and contingency measures in the development of systems. Advises on the identification, analysis, and resolution of specific security factors, risks, vulnerabilities; protection of personal privacy issues; and appropriate industry and international security standards. Carry out information and information technology (I&IT) security projects and tasks in the Ontario Public Service as assigned by Corporate Security or cluster I&IT management General Skills: Strong understanding and expertise in security architecture Knowledge of techniques to secure information assets and the planning, design, and implementation of security technologies Proven techniques to discover gaps or weaknesses in security architecture to identify and mitigate known security threats or inherent weaknesses Knowledge and understanding of relevant legislation and corporate directives related to the security and confidentiality of information (e.g. Freedom of Information and Protection of Privacy Act) in order to identify and assess areas of concern and risk Solid knowledge of current security and contingency technology and techniques (e.g. digital signature, encryption, access controls, fire-walls, authentication, virus protection, etc.); and a proven working knowledge of security audit procedures and protocols Experience in developing enterprise architecture deliverables (e.g. models) Experience in providing specialized security support at the specified experience level Experience in establishing secure environments at a network, operating system or application level Experience with implementing security on complex and distributed systems. Awareness of emerging IT trends and directions, especially as related to security Excellent analytical, problem-solving, and decision-making skills; written and verbal communication skills; interpersonal and negotiation skills A team player with a track record for meeting deadlines, managing competing priorities and client relationship management experience Desirable Skills: Experience in developing enterprise architecture deliverables (e.g. models) based on Ontario Government Enterprise Architecture processes and practice Experience in Threat Risk Assessment methods Knowledge and understanding of Information Management principles, concepts, policies and practices Experience in business recovery and disaster recovery planning. Experience in performing threat and risk assessment. Experience in public key infrastructure development and operation. Experience in security design as part of systems development projects. Experience in intrusion detection systems. Experience in mitigation tools for malicious software. Experience in vulnerability analysis and penetration testing. Experience in network monitoring. Experience in security policy development. Experience in developing and delivering security education. Experience in forensic investigation. Knowledge and understanding of Information Management principles, concepts, policies and practices
Deliverables: The Senior Cyber Security Specialists role focuses on expanding cyber security education and consultation efforts for Ontarios higher education and healthcare sectors. The specialist will design and implement training programs, resources, and awareness initiatives to strengthen cyber resilience across these sectors. They will engage with institutions to assess needs, provide guidance on risk mitigation, and support the broader adoption of Ontarios Cyber Security Strategy. Key responsibilities include developing sector-specific cybersecurity best practices, coordinating workshops and consultations, and delivering reports to inform policy decisions.
SkillsExperience and Skill Set Requirements
The Education & Centre of Excellence (ECOE) unit is seeking one (1) Fee-For-Service contingent IT resource in the Senior Cyber Security Specialist, Level 3 category. The FFS resources will provide the capacity required to support delivery of the OPS Cyber Security Strategy by assisting Cyber Centre of Excellence for Broader Public Sector (BPS) (run by the ECOE unit) projects to expand current partnerships with the Ontario Public Service (OPS) and Broader Public Sector.
The Cyber Security Centre of Excellence (COE) is seeking one (1) Senior Cyber Security Specialists to support in strengthening Ontarios cyber security infrastructure as the province collectively moves more government programs and services online:
1) Digital Transformation: Transforming through a digital first approach to lower the cost of delivery and make services simpler, faster and better for people, businesses and OPS employees priority
2) Service Delivery Excellence: Driving operational excellence and continuous improvement in the delivery of services and transforming and streamlining delivery models across government with private sector partners.
3) Supporting Businesses: Simplifying Ontarios regulatory framework and reducing the administrative burden on businesses to make it easier to engage with all of government priority
4) Education Program & Sector Consultations: Expanding cyber security education and consultations for sectors including higher education and health.
The role requires the following competencies:
Technical Security Architecture Design (25%)
Provides security design expertise and advice to internal stakeholders on design principles and best practices and the development and implementation of security mechanisms to ensure the protection of information assets of client ministries and compliance with legal requirements, and industry best practices.
2. Security Liaison and Advice (25%)
Maintains on-going liaison with IT cyber security staff and senior client ministry program management to facilitate working relationships on all security planning, implementation and management matters by assessing security needs and assisting asset custodians in the identification, design, and implementation of security architecture.
3. Project Management (25%)
Leads and/or carries out large scale and sensitive security architecture design projects and/or significant components of other projects with security design elements, to mitigate identified risk to an acceptable level, ensuring compliance and integration with the Enterprise Information Architecture and Cluster architectures; provide supervision/technical direction to teams, coordinate development of design specifications, prepare reports, estimates, and feasibility studies.
4. Communication and Relationship Management Skills (25%)
Demonstrated communication, consultative and advisory skills to act as a lead technical resource and provide expertise to ongoing contacts.
Must haves:Provides security design expertise and advice to internal stakeholders on design principles and best practices and the development and implementation of security mechanisms to ensure the protection of information assets of client ministries and compliance with legal requirements, and industry best practices.
Originally posted on Himalayas