Security Specialist – Senior (Part Time) - 1895

Focus Systems is seeking an experienced Security Specialist - Senior (1895) to support a public-sector healthcare organization supporting digital health initiatives. The engagement is focused on security governance, risk & compliance, and cyber defense operations, including audit support, threat and risk assessments, policy and standards development, risk registers, executive reporting, and security program documentation. If you have strong experience leading information security governance activities within complex public-sector environments, supporting IPC and OAGO audits, conducting TRAs, and translating security risk into clear executive-ready reporting, this is an exciting opportunity to contribute to digital health security initiatives. Key Details Location: Primarily remote within Canada; hybrid attendance may be requested Contract: 1 year - half-time - expected 125 business days in the year. 78 days between Aug 17 and Mar 31, 2027, and then 48 days between Apr 1, 2027, and Aug 13. (This position is part-time.) Industry: Public Sector / Healthcare / Digital Health / Cybersecurity Remote Setup Requirement: Private office, hard-wired internet, and candidate-provided monitor, keyboard, and mouse Role Overview The Security Specialist - Senior (1895) will lead and support multiple information security initiatives across security governance, risk management, compliance, cyber defense operations, audit support, policy and standards development, executive reporting, and TRAs. The successful candidate will help strengthen security governance practices, document and communicate risk, and support audit and compliance activities in a public-sector healthcare / digital health environment. Key Responsibilities Lead and support security governance, risk management, compliance, and cyber defense operations initiatives Conduct and support threat and risk assessments using NIST CSF, HTRA, ISO 27001, and related security frameworks Support IPC and OAGO audit activities, including evidence gathering, issue tracking, findings analysis, and remediation planning Develop, review, and maintain information security policies, standards, governance documentation, and program materials Prepare executive reports, risk registers, cybersecurity program updates, briefings, and presentations Analyze security risks, control gaps, compliance findings, and operational security concerns, then recommend practical mitigation approaches Collaborate with security, IT, audit, business, and executive stakeholders to align security work with organizational priorities Support cyber defense reporting, governance forums, risk tracking, and ongoing security program maturity activities Mandatory Qualifications Degree or diploma in Information Security, Computer Science, IT, or a related field Relevant security certification(s) such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor; copies required if available 8+ years of hands-on IPC and OAGO audit experience 5+ years conducting TRAs using NIST CSF, HTRA, and ISO 27001 5+ years in information security governance, policy, and standards development 5+ years preparing executive reports, cybersecurity programs, risk registers, and presentations Public-sector experience Ability to meet the remote/hybrid work arrangement and equipment requirements described above Application Deadline Please complete your initial application by July 20, 2026, at 11;00 PM CST. Only candidates selected to proceed to the next stage will be contacted and invited to complete their application package.

The Security Specialist - Senior will lead and support multiple information security initiatives across governance, risk management, compliance, and cyber defense operations. The successful candidate will strengthen security governance practices and support audit and compliance activities in a public-sector healthcare environment.

Candidates must have a degree or diploma in Information Security or a related field, along with relevant security certifications. They should also have extensive experience in IPC and OAGO audits, conducting threat and risk assessments, and developing information security policies.

Identified from the job description. Confirm important requirements above.

• Information Security
• Risk Management
• Compliance
• Cyber Defense
• Audit Support
• Policy Development
• Standards Development
• Executive Reporting
• Threat Assessments
• NIST CSF
• ISO 27001
• Public Sector Experience
• Cybersecurity
• Risk Registers
• Evidence Gathering
• Remediation Planning

Minimum education

Bachelor’s degree

Minimum experience

10+ years