C.2 Information Technology Security Methodology, Policy and Procedures Analyst

Experience levels

• Level 1: < 5 years of experience
• Level 2: 5– < 10 years of experience
• Level 3: 10+years of experience

Responsibilities could include but are not limited to

• Review, analyze, and/or apply Federal, Provincial or Territorial Government IT Security methodologies, programs, policies, procedures, standards, guidelines, and IT Security Risk Management methodologies.
• Develop IT Security standards, procedures and guidelines pursuant to the requirements of The National Security Policy, Policy on Government Security, supporting operational standards (for example, MITS), departmental/agency security policy, and other relevant standards, procedures and guidelines
• Develop IT Security policy in the areas of IT security and assurance, standard Certification & Accreditation frameworks for IT systems, information infrastructure protection, product evaluation, privacy, Business Continuity Planning, contingency planning and Disaster Response Planning, Research & Development
• Develop IT Security risk assessment methodologies for application to Government of Canada institutions
• Develop and deliver training material relevant to the resource category