Cyber Security SME

Travel Requirements - The resource(s) must be available to travel the same day or overnight in Ontario, as required. For this role, travel to school board locations across the province will be required. The resource(s) will work with the school boards and local public health units to ensure all required COVID-19 safety measures are followed when on-site at schools. Travel expenses will be reimbursed according to the Ontario Travel, Meal and Hospitality Expenses Directive.



3 days onsite max - On the road,



Must-have:



Cyber Security and Privacy

· 10+ years’ experience with cyber security and privacy audits and assessments including:

o Threat risk assessments

o Cyber security assessments

· 10+ years’ experience producing cyber security and privacy risk logs and preparing risk remediation plans, preferably for the public sector or broader public sector

· 10+ years’ experience applying cyber security industry frameworks such as NIST CSF v1.1, COBIT, CIS Controls v8 and ISO 27001

Industry Certifications / Relevant Degrees

· Security certification is mandatory (Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM))



Nice-to-have:

Cyber Security and Privacy

· 10+ years’ experience with cyber security and privacy audits and assessments including:

o Privacy impact assessments



Industry Certifications / Relevant Degrees

· Privacy certification is preferred (Certified Information Privacy Professional (CIPP))

Advantages
Long Term Contract
Opporunity to work from the road.
Pay Every week
Long Term Contract
RQ05555
RQ05554
RQ05549

Responsibilities
Performing cyber security and privacy assessments to identify vulnerable areas of the K-12 school boards including:
Threat risk assessments
Cyber security and risk assessments
Privacy impact assessments
Developing school board-specific, prioritized action and remediation plans to support K-12 school boards in improving their cyber resilience and risk posture.
Providing hands-on subject matter expertise and implementation guidance to support enhancements of cyber protection for K-12 school board networks, including improvements recommendations in:
Cyber security
Privacy protection for minors
Providing subject matter expertise and advice in improving cyber protection processes, including supporting the development of cyber security standards for K-12 school boards.
Providing guidance for mitigation strategies following root cause analysis of security or privacy breaches in the K-12 school board networks.
Providing subject matter expertise, guidance and support to K-12 school boards cyber security personnel by producing risk logs, and proposing remediation actions.
Presenting to various stakeholders, as needed.
Delivering on other duties as assigned.
Providing status and project status reports on all other deliverables assigned.

Qualifications
10+ years’ experience with cyber security processes and regulations, and standards, preferably for the public sector or broader public sector
10+ years’ experience with cyber security and privacy audits and assessments including:
Threat risk assessments
Cyber security assessments
Privacy impact assessments
10+ years’ experience producing cyber security and privacy risk logs and preparing risk remediation plans, preferably for the public sector or broader public sector
10+ years’ experience applying cyber security industry frameworks such as NIST CSF v1.1, COBIT, CIS Controls v8 and ISO 27001
Knowledge of the new draft NIST Cyber Security Framework v2.0
10+ years of demonstrated experience applying privacy frameworks such as the NIST Privacy Framework, ISO/IEC 27701
Excellent knowledge and exposure to Internet of Things (IoT) security issues
Excellent knowledge of Ontario, federal and international privacy laws applicable to the Ontario K-12 sector (such as Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), Canadian Privacy Act, General Data Protection Regulation (GDPR) etc.)

Summary
network technology platforms in the K-12 sector; working closely with stakeholder partners to assist in achieving sector and ministry strategic goals and objectives through innovative network and network security solutions; and acquiring intelligence for the sector through developing and managing relationships with sector organizations and network/network security organizations such as telecommunications service providers and network technology and service providers.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.