Senior Threat Risk Assessment & Penetration Testing Specialist

About the role

The Government of Nova Scotia is seeking a senior cybersecurity professional to support the Land Modernization Initiative. Working remotely with occasional onsite collaboration, you will lead threat risk assessments and penetration testing activities across the province’s Land Registry ecosystem.

Key responsibilities

• Identify, document, and evaluate security threats, vulnerabilities, and risks using NIST SP 800-53 Rev 5 High Baseline.
• Conduct workshops, stakeholder interviews, and review system architectures, data flows, and security controls.
• Perform white‑box, grey‑box, and black‑box penetration testing on web applications, APIs, cloud environments, networks, mobile apps, and endpoints.
• Validate findings, prioritize remediation using CVSS, and verify fixes through retesting.
• Produce executive and technical reports, risk treatment recommendations, and present results to senior leadership.

Required profile

• Senior‑level experience in cybersecurity risk assessment and penetration testing.
• Proficiency with NIST, ISO/IEC 27001, ISO/IEC 42001, SOC 2 Type II, and PCI DSS frameworks.
• Strong analytical skills to assess likelihood, business impact, and mitigation strategies.
• Ability to communicate complex security findings to both technical and non‑technical audiences.

Required skills

• NIST SP 800‑53 Rev 5
• ISO/IEC 27001
• ISO/IEC 42001
• SOC 2 Type II
• PCI DSS
• White‑box testing
• Grey‑box testing
• Black‑box testing
• CVSS scoring
• Penetration testing (web, API, cloud, network, mobile, endpoint)
• Vulnerability assessment