About the role
Russell Tobin & Associates is hiring on behalf of one of its esteemed clients.
Job ID: 26-23957 Job Title: Security Specialist - Senior Location: Toronto, ON (Hybrid) Duration: 151 Business Days with possible extension Client: Public Sector Pay Rate: CAD $105 per hour
Role Overview This engagement involves driving the end-to-end execution of a Threat Risk Assessment (TRA) to evaluate the security posture of the information system, application, infrastructure, and business process. The objective is to identify potential threats, assess vulnerabilities, and determine the likelihood and impact of various risk scenarios affecting confidentiality, integrity, and availability. Key activities included: Scoping the assessment in collaboration with business and technical stakeholders. Conducting structured risk analysis using recognized frameworks such as ISO 31000, NIST RMF, or FAIR. Performing threat modeling (e.g., STRIDE, MITRE ATT&CK) to map potential attack vectors and security gaps. Reviewing system architecture, data flows, and existing controls. Assessing compliance with relevant regulatory and organizational security requirements. Documenting findings in a detailed TRA report, including risk ratings and actionable mitigation recommendations. Presenting results to executive leadership and supporting integration of risk treatments into the broader security strategy. Must Have: Risk Management & Assessment: 5-7 years - Proven experience in conducting threat risk assessments using frameworks like ISO 31000, NIST RMF, or FAIR. Threat Modeling: 3-5 years - Practical knowledge of threat modeling techniques (e.g., STRIDE, PASTA, MITRE ATT&CK), including development of data flow diagrams and attack vectors. Information Security Governance: 5+ years-Strong understanding of security policies, standards, and controls aligned with ISO 27001, NIST CSF, and CIS Controls. Communication & Reporting: 5+ years-skilled in writing technical and executive-level reports, risk registers, and presenting to stakeholders and leadership. Role and responsibilities. Drive end-to-end Threat Risk Assessment (TRA) initiatives across systems, processes, and assets. Develop and apply threat models to assess organizational security posture. Collaborate with stakeholders to align assessments with business objectives and risk tolerance. Analyze vulnerabilities and assess threats to determine likelihood and potential impact. Produce detailed TRA reports, documenting findings, recommendations, and risk ratings. Maintain risk registers and track remediation efforts. Propose actionable mitigation strategies based on assessment outcomes. Ensure alignment with: Regulatory requirements Industry standards Organizational security policies Communicate findings effectively to both technical teams and executive leadership. Support audit and compliance activities as needed. Contribute to the continuous improvement of risk management frameworks and methodologies. Stay informed on emerging threats, vulnerabilities, and security best practices.
Russell Tobin is a leading minority-owned professional and technical recruitment and staffing advisory organization. We are comprised of specialized practices focusing on a variety of skill sets and industries. Having a depth and breadth of industry expertise, our subject matter experts are able to provide tailored and swift sourcing solutions to fulfill client hiring needs. In other words, we connect top talent with companies. We are the staffing arm of the Pride Global network, a minority-owned integrated human capital solutions firm, with additional offerings in vendor management, payroll programs, and business process optimization.
#RTA
About Russell Tobin
Bring Top Talent With Your Company With Russell Tobin Headquartered in New York City with offices throughout the United States, United Kingdom, Ireland, The Netherlands, Brazil, Canada, India, and Singapore, Russell Tobin—a division of Pride Global—offers total staffing and recruitment solutions across a wide range of industries. Our team of highly skilled recruiters, sourcers, and subject-matter experts understand exactly how to find world-class candidates that will fit your company’s precise needs. Whether you need skilled professionals ready to deliver results in complex sectors such as banking or technology, or you’re looking to build out your own staffing efforts with a recruiter-for-recruiters (R4R) model, Russell Tobin can make the connections.
Our Bespoke Approach to Connecting Talent With Companies When an organization comes on board as a client, Russell Tobin takes the time to understand the company from the inside out. We work directly with you and your leadership team to create an end-to-end solution capable of handling the full recruitment lifecycle, tailored to your company’s needs and culture. After gathering the critical data we need to seek exactly the right candidates for your hiring strategy, our recruiters take over, using their deep understanding of your industry to build out talent pools and discover game-changing new hires.
A Proud Member of a Decidedly Diverse Network of Companies As part of Pride Global, Russell Tobin serves as one of industry’s only minority-owned payroll and staffing organizations, giving you the opportunity to satisfy Tier 1 diversity spending requirements. We’ve also taken this commitment much further through our Decidedly Diverse initiative, which seeks to create greater diversity, equity, and inclusion across our workforce and workplace, as well as the wider world in which we live. Learn more at https://decidedlydiverse.com.
Similar Jobs
About the role
Russell Tobin & Associates is hiring on behalf of one of its esteemed clients.
Job ID: 26-23957 Job Title: Security Specialist - Senior Location: Toronto, ON (Hybrid) Duration: 151 Business Days with possible extension Client: Public Sector Pay Rate: CAD $105 per hour
Role Overview This engagement involves driving the end-to-end execution of a Threat Risk Assessment (TRA) to evaluate the security posture of the information system, application, infrastructure, and business process. The objective is to identify potential threats, assess vulnerabilities, and determine the likelihood and impact of various risk scenarios affecting confidentiality, integrity, and availability. Key activities included: Scoping the assessment in collaboration with business and technical stakeholders. Conducting structured risk analysis using recognized frameworks such as ISO 31000, NIST RMF, or FAIR. Performing threat modeling (e.g., STRIDE, MITRE ATT&CK) to map potential attack vectors and security gaps. Reviewing system architecture, data flows, and existing controls. Assessing compliance with relevant regulatory and organizational security requirements. Documenting findings in a detailed TRA report, including risk ratings and actionable mitigation recommendations. Presenting results to executive leadership and supporting integration of risk treatments into the broader security strategy. Must Have: Risk Management & Assessment: 5-7 years - Proven experience in conducting threat risk assessments using frameworks like ISO 31000, NIST RMF, or FAIR. Threat Modeling: 3-5 years - Practical knowledge of threat modeling techniques (e.g., STRIDE, PASTA, MITRE ATT&CK), including development of data flow diagrams and attack vectors. Information Security Governance: 5+ years-Strong understanding of security policies, standards, and controls aligned with ISO 27001, NIST CSF, and CIS Controls. Communication & Reporting: 5+ years-skilled in writing technical and executive-level reports, risk registers, and presenting to stakeholders and leadership. Role and responsibilities. Drive end-to-end Threat Risk Assessment (TRA) initiatives across systems, processes, and assets. Develop and apply threat models to assess organizational security posture. Collaborate with stakeholders to align assessments with business objectives and risk tolerance. Analyze vulnerabilities and assess threats to determine likelihood and potential impact. Produce detailed TRA reports, documenting findings, recommendations, and risk ratings. Maintain risk registers and track remediation efforts. Propose actionable mitigation strategies based on assessment outcomes. Ensure alignment with: Regulatory requirements Industry standards Organizational security policies Communicate findings effectively to both technical teams and executive leadership. Support audit and compliance activities as needed. Contribute to the continuous improvement of risk management frameworks and methodologies. Stay informed on emerging threats, vulnerabilities, and security best practices.
Russell Tobin is a leading minority-owned professional and technical recruitment and staffing advisory organization. We are comprised of specialized practices focusing on a variety of skill sets and industries. Having a depth and breadth of industry expertise, our subject matter experts are able to provide tailored and swift sourcing solutions to fulfill client hiring needs. In other words, we connect top talent with companies. We are the staffing arm of the Pride Global network, a minority-owned integrated human capital solutions firm, with additional offerings in vendor management, payroll programs, and business process optimization.
#RTA
About Russell Tobin
Bring Top Talent With Your Company With Russell Tobin Headquartered in New York City with offices throughout the United States, United Kingdom, Ireland, The Netherlands, Brazil, Canada, India, and Singapore, Russell Tobin—a division of Pride Global—offers total staffing and recruitment solutions across a wide range of industries. Our team of highly skilled recruiters, sourcers, and subject-matter experts understand exactly how to find world-class candidates that will fit your company’s precise needs. Whether you need skilled professionals ready to deliver results in complex sectors such as banking or technology, or you’re looking to build out your own staffing efforts with a recruiter-for-recruiters (R4R) model, Russell Tobin can make the connections.
Our Bespoke Approach to Connecting Talent With Companies When an organization comes on board as a client, Russell Tobin takes the time to understand the company from the inside out. We work directly with you and your leadership team to create an end-to-end solution capable of handling the full recruitment lifecycle, tailored to your company’s needs and culture. After gathering the critical data we need to seek exactly the right candidates for your hiring strategy, our recruiters take over, using their deep understanding of your industry to build out talent pools and discover game-changing new hires.
A Proud Member of a Decidedly Diverse Network of Companies As part of Pride Global, Russell Tobin serves as one of industry’s only minority-owned payroll and staffing organizations, giving you the opportunity to satisfy Tier 1 diversity spending requirements. We’ve also taken this commitment much further through our Decidedly Diverse initiative, which seeks to create greater diversity, equity, and inclusion across our workforce and workplace, as well as the wider world in which we live. Learn more at https://decidedlydiverse.com.