- Assigned Recruiter(s) Madhumitha Mulakaluri
- Job Opening ID 11772
- City Toronto
- Country Canada
- Number of Positions 1
- Work Experience 10+ Years

Job Description
This role will focus on two primary areas: Cyber Security Incident Response (CSIR): Enhancing programmaturity, strengthening governance, and supporting the coordination ofday-to-day cyber security incidents across the Agency and the health sector. Astrong emphasis will be placed on communication, stakeholder engagement(including external audiences), and high-quality reporting, along with thedevelopment of procedures, policies, and standards. Zero Trust Implementation: Supporting the hands-onimplementation and operationalization of Zero Trust principles and technologiesacross the enterprise. This includes assessing current security architecture,identifying gaps in identity, access, and network security controls, andworking closely with Cyber Security Defence(CSD), Information Security Office(ISO), and operational teams to implement practical, integrated solutions. This role is not deeply technical (e.g., digital forensics),but requires a robust background and hands-on in CSIRT/Security Operations andZero Trust implementation to ensure delivery of real, measurable outcomes andan operational Zero Trust model. This engagement sits within Agency’s broader AI-Driven RiskProgram and mitigation plan, established in response to the rapid rise ofadversarial AI capabilities that are increasing the volume, speed, andcomplexity of cyber attacks across the health sector. The plan is beingexecuted through serval workstreams spanning “Prevent & Reduce Exposure,”“Detect, Contain & Respond,” and “Outpace the Adversary.” While this roleis focused primarily on Cyber Security Incident Response and Zero Trustimplementation,



the resource is expected to align their work to, and supportthe relevant workstreams — recognizing that Zero Trust and incident responseare central enablers of the organization’s ability to defend at machine speed.

Responsibilities:
CSIRT (Cyber Security Incident Response Team): Lead program maturity initiatives, including:
- Developingand maintaining incident response procedures, playbooks, policies, andstandards
- Establishingand improving incident response governance, processes, and workflows
- DefiningKPIs, metrics, and reporting for program effectiveness
- Supportingtabletop exercises and simulation activities Collaborate with stakeholders across the Agency and thehealth sector to:
- Supportcoordinated incident response and communication
- Provideadvisory support during sector-wide cyber incidents
- Promotecyber resilience and standardized security practices
- Supportincident response readiness for AI-accelerated / machine-speed threats,including faster containment and “breach vs. break” decision playbooks Support and enhance the Cyber Security Incident Responseprogram, including:
- Coordinatingcyber incident response activities across internal teams and externalstakeholders
- Acting as akey point of contact for incident communications, including engagement withexternal partners and sector organizations
- Developingincident reports, executive briefings, and communication materials




- Supportingincident response activities (non-forensic), leveraging CSIRT/SOC experience Zero-Trust Drive practical integration across domains, including:
- TranslatingZero Trust principles into enforceable controls, processes, and standards
- Supportingalignment across identity, endpoint, and network security components
- Bridgingstrategy, architecture, and day-to-day operations
- Align ZeroTrust and identity work to the program’s workstreams — particularly legacymodernization & Zero-Trust controls, Securing external doors(MFA/Conditional Access), and accelerated vulnerability remediation —contributing to these efforts at a supporting level Support and deliver Zero Trust implementation, including:
- Assessingcurrent-state architecture and identifying gaps in identity, access, andnetwork security controls
- Supportingor leading hands-on implementation of Zero Trust-aligned technologies,particularly in identity
- Workingclosely with technical teams to configure, integrate, and operationalizesecurity solutions
- EnsuringZero Trust capabilities are embedded into operational practices, not justdeployed Desired

Skills:
- Experiencein healthcare or public sector environments, particularly Ontario health sector
- Familiaritywith regulatory and security frameworks (e.g., PHIPA, NIST CSF, ISO 27001)
- Experiencesupporting cross-organizational incident response coordination
- Experienceimplementing Conditional Access, PAM/PIM (Privileged AccessManagement/Privileged Identity Management), or identity governance solutions
- Exposure toZero Trust maturity models or assessments
- Knowledgeof cloud security environments
- Experiencewith network micro-segmentation or Zero Trust Network Access (ZTNA)
- Experiencewith SOAR (Security Orche

📌 11772 (Toronto)
🏢 Maarut
📍 Toronto