6.2 Information Technology Security Methodology, Policy and Procedures Analyst

Experience Levels

• Junior: < 5 years of experience
• Intermediate: 5– < 10 years of experience
• Senior: 10+ years of experience

Responsibilities could include but are not limited to

• Review, analyze, and/or apply Federal, Provincial or Territorial Government IT Security methodologies, programs, policies, procedures, standards, guidelines, and IT Security Risk Management methodologies
• Develop IT Security standards, procedures and guidelines pursuant to the requirements of The National Security Policy, Policy on Government Security, supporting operational standards (for example, Management of Information Technology Security (MITS)), departmental/agency security policy, and other relevant standards, procedures and guidelines
• Develop IT Security policy in the areas of IT security and assurance, standard Certification & Accreditation frameworks for IT systems, information infrastructure protection, product evaluation, privacy, Business Continuity Planning, contingency planning and Disaster Response Planning, Research & Development
• Develop IT Security risk assessment methodologies for application to Government of Canada institutions
• Develop and deliver training material relevant to the resource category