CT ICS Cyber Security Program consultant

Title CT ICS Cyber Security Program consultant
Location Calgary, AB
Start Date 04-01-2025
Language English
Salary Negotiable
Security Clearance None
Duration 9 Months
Date Posted 12-02-2024
Job ID 13516
Recruiter Email [email protected]
Maplesoft Group is currently seeking a CT ICS Cyber Security Program consultant for our client.

Tasks and Responsibilities include, but are not limited to the following:

Phase 1 – Definition of the Program

Phase 1 of the program will consist of developing a Cybersecurity strategic plan for the client's ICS environment. This will involve a review and assessment of existing systems, past audits and risk assessments, current policies, approved/draft standards, CT processes, current operations, governance, organizational structure,

Activities related to this phase includes, but not be limited to:

Development of ICS Cybersecurity Strategic Plan
Definition of ICS CSP objectives
Review of Information Security Policies and draft CT ICS Security standards
Risk analysis and assessments of the systems in scope
Identification of security, process, and governance gaps to The Client's IM&S ICS Security Standard
Review of previous security audits/risk assessments
Development of CT ICS risk rating matrix (includes business impact assessment)
Prioritization of identified risks
Recommendations for controls and safeguards to remediate identified risks.
Identification of processes and function tree map for meeting requirements of the CT ICS Standards and to show system dependencies
Defining program evaluation framework and metrics
Identifying Key Performance Indicators (KPI’s) and Key Risk Indicators (KRI’s)
Development of Implementation Roadmap and Framework

Summary of Deliverables - Phase 1:
Executive Summary of CSP
Assessment Report of current systems and environment
Findings
Gap analysis
Recommendations for CSP
ICS Cybersecurity Strategic Plan
CT ICS Cybersecurity standards feedback and recommendations.
CT ICS Risk Assessment Matrix
Prioritized list of cyber related risks
CSP Implementation Roadmap and Framework
Process maps/function trees and gap analysis of CT business processes
Evaluation program and metrics - KPIs and KRIs


Phase 2 – Design

Phase 2 will consist of designing and developing the ICS Cybersecurity Strategic Plan components within an implementation framework.

Activities will include but not be limited to:

Identifying program requirements from the policies and standards developed in Phase 1, to design the security architecture
Develop specifications for security solutions that are compatible with the security architecture for the installed systems
Identifying and estimating the initial implementation costs and ongoing lifecycle requirements for level-of-effort, skills, and budget over the first five years of the CSP

Summary of Deliverables – Phase 2:

Security architecture design
Technical specifications for cybersecurity solutions
Recommended controls
CSP Implementation Plan
Compatibility Matrix for proposed solutions
CSP Procurement Plan
CSP Proof of Concept
Processes for implementation and continued operations of CSP

Phase 3 – Procurement and Implementation

Phase 3 will involve the procurement and implementation of security solutions to give effect to the security controls (technical, physical, and administrative) as determined in Phase 2.

Activities will include but not be limited to:

Procurement and implementation of security solutions as per agreed upon specifications, requirements, processes, and procedures. The solutions would include software, hardware, and recommended controls
Verification, validation, and modification of the processes, and procedures to support the implementation of the necessary controls, program governance and day-to-day operations as identified in Phase 2

The sequence and methodology of implementation will be tailored to accommodate CT’s varied ICS systems. Updates to the implementation plan should be made as required with periodic communication to The Client.


Phase 4 – Transition to Operations

Phase 4 will cover the operational aspects of the CSP ensuring that the required staff are adequately trained to support ongoing operations of the CSP and to enable CT to monitor, evaluate and report on the effectiveness of the program.

Activities in this phase will include, but not limited to:

Development of training program and materials targeted to providing security awareness, skills development, and support for staff
Conducting training and coaching sessions for CT and City staff
Facilitation of any training delivered by vendor(s)
Development of O&M plan for long term program sustainment
Testing and validation of M&E component
Identifying the effectiveness of the plans for business recovery in the event of a cybersecurity incident
Providing methodologies and examples for tabletop and other practical exercises to train for responding to cybersecurity incidents.

Special Requirements:

The scope of the services for the successful Proponent shall also include, but not be limited to:
Conducting regular teleconferences with CT’s Cybersecurity Program team, as well as face-to-face meetings, as required, with the Program team and other resources to review deliverables and progress; and
Providing monthly progress reports, meeting minutes, and other necessary reports throughout all phases of the contract
Providing design submittals for review and approval
Providing presentations of deliverables.
Must have Cyber Security Rail experience.


Maplesoft Group prides itself on its distinct corporate culture and recognizes that success is a direct reflection of our most valuable asset - our people. Therefore, attitude and ambition are key personality traits we seek out, along with skill and aptitude, in potential employees.

Maplesoft Group is committed to having a diverse, representative workforce and continuing to build an inclusive environment. We encourage applications from all qualified individuals. Maplesoft Group is an equal opportunity employer committed to diversity and inclusion. We are pleased to consider all qualified applicants irrespective of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veterans’ status, Aboriginal peoples or any other legally protected factors.

All employment decisions are made based on business needs, job requirements, and individual qualifications.

We are committed to developing inclusive, barrier-free recruitment and selection processes, and a work environment that supports our diverse workforce. Please let us know if you require accommodations at any stage of the recruitment process. We can be reached at Maplesoft Info at [email protected].

We thank you for your interest in Maplesoft Group and wish to advise you, that only candidates under consideration will be contacted.