Senior Cyber Security Specialist

Department: Technical Capability

Employment Type: Full Time

Location: Ottawa, Ontario, Canada, Hybrid

Key Responsibilities

• Provides and leads cyber security advice and support to internal and external clients. 
• Provides and leads general and specific cyber security services to internal and external clients in one or more of these areas:
  • Cybersecurity program review and development services, including reviewing or developing policies, standards, procedures and plans, such as vulnerability, incident, change, configuration, continuous monitoring, security awareness, business continuity, disaster recovery and supply chain management plans.
  • Systems Security Engineering services, including designing of secure architectures based on industry recognized security control frameworks and best-practices, developing cyber security requirements, implementing and assessing security controls and mitigating security risks
  • Cyber security audit and assessment services, including risk assessments, compliance audits against industry standards, maturity assessments and gap analysis and providing expert advice and recommendations to reduce risk and improve cyber security posture.
• Manages, trains, directs, and supports the work of team members allocated to cyber security taskings. 
• Maintains professional and technical knowledge by attending educational workshops, reviewing professional publications, establishing personal networks and/or participating in professional societies. 
• Contributes technical specialist expertise, or practical knowledge, to internal discussions, innovation projects and billable tasks.
• Provides mentoring, training and guidance to junior and intermediate cyber security specialists. 
• Conducts technical assurance activities on deliverables to ensure that work products are technically sound and that deliverables meet client requirements.
• Acts as a Technical Lead and/or Technical Assurer on specified projects while working within the BMT Quality Management System (QMS) processes and procedures. 
• Participates in the development and growth of the cyber security capability at the regional level.

Skills, Knowledge & Expertise

• A University degree in Cybersecurity, Information Security, Information Technology, Computer Science, Computer Engineering, Engineering or related field​
• A minimum 10 years of practical experience in a Cyber Security related role 
• Practical in-depth knowledge of Cyber Security, with exposure to enterprise IT and OT governance, information security, and assurance practices
• Knowledge of various cyber security and risk management frameworks, standards and guidelines, such as the NIST Cyber Security and Risk Management Frameworks, ISO 27001, ITSG 33 or the EU General Data Protection Regulation (GDPR) 
• Excellent problem-solving skills
• Excellent organizational skills
• Excellent written and oral communication skills
• Excellent interpersonal and teamwork skills

• Industry certifications or equivalent recognized security credentials, such as CISSP, CISA, Security+, Network +, Operational Technology (OT) and Artificial Intelligence (AI)
• Involvement in cyber security communities such as ISC2 or ISSA
• Bilingual in English and French

Why Work For Us?

• Medical, dental and vision plan (including a Health Care Spending Account)
• Employee and Family Assistance program
• Parental/Maternity leave top-up program
• RRSP or TFSA matching program
• Flexible work hours and hybrid work arrangement
• Training and development opportunities 
• Employee recognition program
• Employee referral program