Specialist, Cybersecurity and Resilience

The Opportunity: (Vacancy: Replacement)

Reporting to the Supervisor, IT Operations, the Cybersecurity and Resilience Specialist is a pivotal operational role dedicated to enhancing the organization's cybersecurity posture using the appropriate security tools and products, best practices and following robust security processes and procedures.

This role contributes to the development and execution of the enterprise-wide IT strategy and ensures its alignment with the enterprise's business strategy and the delivery of capabilities required to achieve business success. A significant portion of the job includes providing guidance based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework and industry best practices related to IT Security and the development and delivery of the Town's cybersecurity training and phishing program, as well as the continuous updating and testing of the Town's resiliency and emergency management plans, including the Business Continuity Plan, Disaster Recovery Plan, and Incident Response Plan. This role also provides expert knowledge for securing the production environment against unauthorized access and integrity violations of the production network, of the business applications and their associated databases, and of the data under the IT custodianship, in strict compliance with the enterprise and business security policies. The role must be adept at developing and delivering training programs, managing vendor relationships, and ensuring compliance with cybersecurity best practices. Additionally, the role involves strategic thinking and the ability to communicate complex technical information to non-technical stakeholders.

As the Specialist, Cybersecurity and Resilience, you will perform the following duties, including but not limited to:

• Security Monitoring and Response: work closely with Network and Infrastructure team members and other IT staff to monitor and response to the detected security events; investigate the events and remediate it accordingly.
• Design, Implement and support technical cybersecurity solutions.
• Monitor, analyze and respond to security events across various IT systems to identify vulnerabilities and threats.
• Conduct cybersecurity reviews and assessments for new IT projects.
• Conduct cyber risk assessments and maintain the enterprise cyber risk register.
• Lead in conjunction with the network team, in the emergency management and security incident response activities and prepare reports and action plans if a security breach does occur.
• Identify weaknesses in security controls across various applications, systems, and networks, and develop mitigation measures.
• Implement, augment and improve security controls in business and system deployment processes
• Develop, maintain and update standard cybersecurity documentation such as policies, principles, procedures, standards, etc. based on existing security controls and processes and industry best practices.
• Coordinate and support vulnerability and patch management policy and procedure to keep the information systems up-to-date and to improve the process. Identify and analyze vulnerabilities; assess the risks, test and apply patches, verify the remediation, and report the outcome. Make improvement on the process by automation.
• Perform additional duties and undertake special projects as assigned

The Ideal Candidate

We are seeking a professional with a post-secondary diploma in Information Security, Computer Science or closely related field. Our ideal candidate has a minimum of five (5) years progressively responsible experience in cybersecurity operations, incident response, vulnerability management, and security administration in an enterprise environment. Certification in CISSP, CISM, CISA & PMP would be considered an asset.

Information Technology Infrastructure Library (ITIL) Foundation certification is required. CompTIA certifications such as Security+, Cybersecurity Analyst (CySA+), Certified Business Continuity Professional (CBCP), or Certified in Risk and Information Systems Control (CRISC), in progress or willing to obtain.

The ideal candidate will have a demonstrated knowledge of Advanced End-Point protection, Advanced protection perimeter, networking concepts, Active Directory, DNS and SIEM and industry best practices and standards: CIS, ISO 27001, PCI, COBIT, NIST, and ITIL. We are seeking an individual who has excellent verbal and written communication skills with the ability to give, obtain and/or exchange routine information.

The successful candidate for Specialist, Cybersecurity and Resilience will be required to work a flexible schedule, including in the office, remotely and after hours (as required).

This position offers a salary range of $106,444.72 to $133,055.90 plus a competitive benefit package.

Satisfactory passing of a criminal record check, and proof of qualifications will be required of any successful candidate(s) for this position.

Applications for this posting will be accepted until November 18th, 2026, 12:00PM.

How To Apply

To learn more about employment with the Town of Caledon and to apply for this exciting and challenging opportunity, visit: www.caledon.ca/careers

If needed and upon request, this document can be made available in an alternative format.