Must Haves

1. Cyber Security Incident Response (CSIRT) Experience

- Demonstrated experience in coordinating and managing cyber incidents (not just participating)
- Experience working in CSIRT/SOC environments
- Involvement in incident lifecycle (triage, coordination, recovery, post-incident reviews)
- Experience supporting cross-functional and external stakeholder engagement during incidents

1. Cyber Security Incident Response - Communication, Reporting & Program Maturity

- Proven ability to communicate effectively during incident situations, including with external stakeholders
- Strong experience in developing incident reports, executive briefings, and communications
- Experience building or improving procedures, playbooks, policies, and standards
- Demonstrated contribution to program maturity, governance, and process improvement, including awareness of AI-driven threats and experience aligning incident response / Zero Trust work to broader program workstreams





1. Zero Trust Implementation (Hands-On Delivery)

- Proven hands-on experience implementing Zero Trust technologies, especially in identity and access management (IAM)
- Ability to identify gaps in identity, access, and security architecture
- Experience translating Zero Trust concepts into operational controls and outcomes
- Demonstrated involvement in implementation—not just strategy or design

1. Identity & Network Security Expertise (Zero Trust Enablers)

- Robust experience with identity security controls (MFA, Conditional Access, RBAC, PAM/PIM, Entra ID)
- Working knowledge of network security aligned to Zero Trust (segmentation, secure access models, ZTNA)
- Experience integrating identity and network controls into operational environments

📌 Senior Security Architect (Toronto)
🏢 TEEMA
📍 Toronto