Cyber Security Consultant

Please send your resume at if you are interested in this 3-year contract with Government of Saskatchewan (Information Technology Division (ITD)) with a possibility of extension ,If you are not interested, please feel free to pass it in your network for anyone looking for work.

Position title:
RFR-0710 – Cyber Security Consultant

Working Status:
On-Site

Location:
GOS office located in Regina, Saskatchewan

Start Date:
23rd March 2026

Mandatory Qualification/Requirement

1. Demonstrated experience with cybersecurity strategic planning and risk management.
2. Demonstrated experience with solutions architecture, cybersecurity architecture, and/or IT design.
3. Candidate must be able to work 100% onsite at a Government of Saskatchewan office in Regina, Saskatchewan, Canada, upon contract start date.

Rated Qualification/Requirement

1. Local Knowledge
2. Demonstrated experience in cybersecurity strategic planning and advice, including risk management, governance, feasibility studies, cost-benefit analyses, and/or technology assessments.

3. Demonstrated experience as an architect with the following characteristics (describe each of the engagements as they relate to the following):

4. Served as the lead architect or in charge of a major subsystem.

5. All engagements were performed using a formal IT methodology and within a standard framework for information security controls.

6. The solution, or the portion of the solution, was successfully implemented.

7. Demonstrated experience in designing and implementing cybersecurity architecture across complex, distributed environments.

8. Demonstrated experience collaborating with a variety of stakeholders across technical and executive levels, ensuring buy-in for security initiatives.
9. Demonstrated experience briefing senior executives and developing vision papers or strategic roadmaps for cybersecurity posture and maturity.
10. Demonstrated experience working with and an in-depth knowledge of an industry standard information security frameworks such as ISO 27002:2022, NIST, or an equivalent.
11. Demonstrated experience of DevSecOps operations and automation that support enterprise products and services development and deployment.
12. Demonstrated experience with the strategic planning for and technical architecture and implementation of a zero-trust cybersecurity architecture.
13. Have received formal training in a recognized IT design methodology and have experience implementing that methodology on an IT design engagement.
14. Demonstrated experience and expertise through multiple projects in architecting solutions.
15. Demonstrated experience applying current knowledge of key trends in one or more implemented solutions (such as integrations, data management, technical governance).
16. Achievement of Architecture related certification such as TOGAF, SABSA, or similar industry recognized certification(s) is considered an asset.
17. A bachelor's degree or equivalent professional experience in a technical field is considered an asset.
18. Completion of at least one formal course in project management is considered an asset.

Deliverables

The ideal candidate is an accomplished cybersecurity leader with extensive expertise in security architecture and a proven ability to think strategically. The candidate will bring a demonstrated ability to design and implement scalable, resilient security frameworks across distributed environments, while guiding multi-year planning efforts into actionable strategies which align with government priorities, long-term business objectives, and risk management priorities. The candidate shall be adept at bridging technical and executive domains and able to translate risks into actionable insights and foster collaboration across the public sector to help shape a centralized cybersecurity vision.

The successful candidate will be responsible for, but not limited to, the following duties:

• Providing interpretation and enforcement of the information security policy and standards.
• Providing information security education and awareness.
• Responding to information security Incidents.
• Performing Threat Risk Assessments (TRAs) for IT-related business initiatives throughout Government.
• Providing security assessment and overall security requirements oversight for IT-related Solution and Services Procurements.
• Providing information security advice and guidance for business areas; and
• Evaluating new threats and vulnerabilities.