Business Consultant - Cyber Security

Maverin requires a resource to provide project support for IIS’s Security work. The resource will report to the Manager, IT Security and Network Services and work closely with IIS managers, operational team leads, technical staff and other members of the project team.

The resource will perform the following primary activities, but is not limited to:

· Complete a GAP analysis of our safeguards and GoC guardrails.

· Formalize the security assessment and authorization (SA&A) processes and approach and ensure that it is appropriately embedded within the IT system development and maintenance lifecycle.

· Implement formal tracking and monitoring of security assessment and authorization activities to be able to report and ensure that recommended safeguards are implemented in a timely manner.

· Define and develop auditing, monitoring, and reporting of security events.

· In collaboration with Information Management, Implement classification, labelling, and handling of Protected files and documents.

· Implement additional security tools, components and features (M365 E5 license) and implement them in Azure and M365.

· Document the process for the monthly Vulnerability Assessment and Vulnerability Management for the NSERC Cloud tenant.

· Define and document the Data Retention and Disposition schedules and procedures.

· Implement secure Cloud to on-premises connectivity for Records of Business Value (RBV).

· Ensure that data residency requirements in Canada for Protected data are met for all the components in the Microsoft Cloud.

· Investigate if password hash synchronization introduces unacceptable risk to the NSERC Cloud tenant.

· Ensure that endpoint device management is fully deployed and includes all GC phones and computers with access to the Cloud.

· Develop a departmental Cyber Security Event Management Plan (CSEMP)

· Develop and deliver Security Awareness and Training for users in the Cloud.

· Complete the final versions of the project documentation including the Concept of Operations (ConOps), the Security Requirements Traceability Matrix (SRTM), and the requested evidence to support the security safeguard selection and have senior management sign to approve the Authority to Operate M365.

Title: Business Transformation Architect
Contract: 1 year + Option to extend

Enhanced Clearance

Job Type: Full-time

Schedule:

• 8 hour shift
• Monday to Friday

Licence/Certification:

• Enhanced Clearance (required)

Work Location: One location

Please Note :
optimuspartners.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, optimuspartners.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, Site.com is the ideal place to find your next job.