IT Cyber Security Consultant -L2 at Microserve

IT Cyber Security Consultant -L2 (6 month contract)

Location: Vancouver, BC / Hybrid

Staffing Placement Opportunity

General Description

The IT Cyber Security Consultant Level 2 is responsible for supporting activities that reduce and mitigate cybersecurity risks, protect critical information infrastructure, and ensure compliance with cybersecurity regulations, policies, and industry standards.

The successful candidate will assess security risks, support incident response activities, provide cybersecurity guidance, and contribute to the development and improvement of security policies, standards, and controls.

Experience And Role Accountabilities

• Minimum five (5) years of experience working in Information Technology, including at least three (3) years of experience in cybersecurity or an equivalent field
• Identify potential cybersecurity risks and incidents by performing vulnerability assessments, collaborating with internal teams and stakeholders, and monitoring security events and logs to support proactive risk management
• Analyze security assessment results, validate security configurations, and recommend remediation strategies to mitigate cybersecurity risks across operating systems, applications, networks, and telecommunications environments
• Provide support during and after security incidents, including breaches, outages, errors, or unexpected activities, by preparing incident documentation, collaborating with response teams, and supporting incident response plans
• Assist business teams with defining and implementing cybersecurity requirements, security design, testing, and implementation support to strengthen security throughout the organization
• Support cybersecurity activities within IT projects by conducting compliance impact assessments and collaborating with project teams to ensure alignment with security best practices, regulations, and policies
• Develop, maintain, and improve cybersecurity standards and guidelines by reviewing security controls, analyzing security data, and identifying opportunities to enhance security capabilities
• Support the development, review, and implementation of cybersecurity policies, standards, and procedures
• Identify control gaps against established frameworks and standards and provide recommendations for prioritized improvements
• Collaborate with stakeholders as a trusted cybersecurity advisor to address policy, compliance, and implementation challenges

Education And Skills

• Bachelor’s degree or technical diploma in Computer Science, Information Security, Cybersecurity, or an equivalent discipline
• Certification in one or more of the following areas is an asset:
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Penetration Tester (GPEN)

Technical Knowledge And Experience

IT Processes

• Internet policy enforcement
• Network architecture
• Active Directory
• Log management
• Vulnerability scanning
• Penetration testing
• Auditing
• Configuration management
• Asset management
• Continuous monitoring
• Web content filtering
• Encryption and strong authentication

Security Technologies

• Intrusion Prevention and Detection Systems (Network, Host, Wireless)
• Wireless Intrusion Detection and Prevention Systems (WIDS/WIPS)
• Security Information and Event Management (SIEM)
• Virtual Private Network (VPN) technologies
• Next Generation Firewalls (NGFW)
• Web Application Firewalls (WAF)
• Database Activity Monitoring (DAM)
• Public Key Infrastructure (PKI)
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM) solutions

Industry Standards and Frameworks

Experience with the following standards and frameworks is required or considered an asset:

• ISO 27001/27002
• National Institute of Standards and Technology (NIST) frameworks, including NIST Cybersecurity Framework (CSF), NIST 800-53, and Risk Management Framework (RMF)
• British Columbia’s Freedom of Information and Protection of Privacy Act (BC FIPPA)
• North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP)
• Control Objectives for Information and Related Technologies (COBIT)
• AI Risk Management Framework (AI RMF)

Work Assignment Requirements

• Minimum five (5) years of experience in Information Technology, including at least three (3) years in cybersecurity or an equivalent area
• Minimum two (2) years of experience supporting cybersecurity policy development and review
• Experience identifying cybersecurity control gaps and recommending improvements aligned with policies, standards, and regulatory requirements
• Experience developing, reviewing, and implementing cybersecurity policies and standards in collaboration with business and technical stakeholders
• Knowledge and experience with cybersecurity risk management, cloud security, AI risk, and enterprise security controls
• Ability to support cybersecurity and compliance programs, initiatives, and related activities
• Strong understanding of cybersecurity risks and technologies across both enterprise IT and Operational Technology (OT) environments

Nice to Have

• Seven (7) years of experience working in Information Technology, including at least five (5) years in cybersecurity or an equivalent field
• CISSP, CISM, CISA, CCSP, or equivalent certification
• Experience working with Operational Technology (OT) environments or NERC CIP compliance
• Experience supporting cybersecurity governance, risk, and compliance initiatives

Additional Requirements

• Ability to obtain security clearance for a Security Sensitive Position classification
• Excellent written and verbal communication skills in a professional environment
• Strong collaboration, analytical, and problem-solving skills

Note: this is an opportunity with a Microserve client.