Technical Security Specialist

Technical Security Specialist - (13965)

Description

**Improve the processes of today**
**Define the best practices of **tomorrow**

At Côté Gold, we focus on what we contribute, not just what we extract. We believe that in order for prosperity to be sustained, it must be shared, it must support the well-being of our employees and our communities, and it must be achieved with mínimal impact to the environment.

Côté Gold is being developed in partnership with the Mattagami First Nation, Flying Post First Nation and Métis Nation of Ontario, Region 3.

The open-pit gold mine is a joint venture between IAMGOLD and Sumitomo Metal Mining Co. Ltd. and is operated by IAMGOLD. We are located near Gogama, Ontario, with access to stable infrastructure and strong connections with our local communities.

**Accessing Opportunities at Côté Gold**

**TECHNICAL SECURITY SPECIALIST**

The Technical Security Specialist leads the development, implementation and continuous improvement of industrial control cyber security and technical security at Côté Gold. The Technical Security Specialist works collaboratively with all departments to minimize technical security risk and ensure operational reliability.

**Key Responsibilities**

**Area 1**:
Develop, implement and continuously improve technical security.
- Work with the Security Superintendent and IAMGOLD technical security to plan, develop, implement and improve technical security at Cote Gold.
- Translate and explain industrial control cyber security principles and technical security requirements to non-technical stakeholders to facilitate understanding implementation and maturity of management, operational, and technical security controls, based on organizational objectives outlined in industrial control security policies, directives, orders, and standards.
- Identify and review body of evidence/artifacts required to support implementation of operational, and technical security controls i.e., Policies, plans, process, procedures, guidelines, standards, and system architecture, design, and configuration documents, service and change control tickets, logs, reports, formal and informal communication artifacts.
- Communicate assessment/audit risk findings and mitigations to technical and non-technical stakeholders.
- Monitor, and communicate to management task performance risks, issues, problems, and participate in the development and implementation of mitigations or provide assistance as needed.
- Provide support developing and maintaining security assessment practice documentation i.e., policies, plans, processes, procedures, guidelines, standards, methodologies, report templates, questionnaire templates.
- Assist in the design and development of security architectures for industrial control systems (ICS).
- Assist in the development of standards in partnership with Engineering, Operational Technology (OT) Infrastructure Services, and Application Development.
- Implement initiatives designed to share knowledge across Security Platforms and/or Technology teams.
- Identify, recommend, coordinate, and deliver timely knowledge to support teams regarding technologies, processes, or tools.
- Assist in conducting software system security analysis to ensure compliance with IAMGOLD security standards.
- Assist in the documentation of analysis and test techniques for use in test design, planning, executing, and reporting of OT cyberspace operational test activities.
- Assist in leveraging OT Cybersecurity solutions to identify intrusion/attack paths and recommend detection and prevention, situational awareness of intrusions, incident response actions

**Area 2**:
Operational excellence
- Seek opportunities to improve technical security systems, processes and procedures.
- Be proactive and solution driven and implement improvements.
- Be passionate about safety as a principle and deeply held belief, not just as a regulation, standard or certification requiring compliance.
- Commit to continuous learning and improvement.
- Continually seek to improve your skills as a Technical Security Specialist.
- Watch for inefficiencies or problems.
- Ensure problems and inefficiencies are shared with others.
- Work collaboratively to troubleshoot and resolve problems.
- Consider risk along the five dimensions (throughput, time, quality, sustainability and cost).

**Qualifications**:
MINIMUN QUALIFICATIONS, FORMAL EDUCATION, CERTIFICATIONS OR EQUIVALENTS
- A post-secondary degree or diploma in engineering, computer science, information systems, cybersecurity or other related discipline.

Work experience - Nature & Length
- A minimum of 2 years of experience in technical security and industrial control systems.
- Experience in the mining, specifically gold mining industry is considered an asset.

Additional qualifications - Competency requirements
- Knowledge of industrial control systems and experience with security controls frameworks.
- Knowledge with architecture for industrial control