Security Risk Management Specialist

1 month ago

Toronto, Ontario, Canada Canonical - Jobs Full time

In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do.

To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making. In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will not only work within the team but also cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical.

The security risk management team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.

What you will do in this role:
  • Define Canonical's security risk management standards and playbooks
  • Analyse and improve Canonical's security risk practices
  • Evaluate, select and implement new security requirements, tools and practices
  • Grow the presence and thought leadership of Canonical security risk management practice
  • Develop Canonical security risk learning and development materials
  • Work with Security leadership to present information and influence change
  • Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
  • Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
  • Participate in risk management, decision-making, and collaborative discussions
  • Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
  • Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
  • Develop templates and materials to help with self-service risk management actions
  • Monitor and identify opportunities to improve the effectiveness of risk management processes
  • Launch campaigns to perform security assessments and help mitigate security risks across the company
  • Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities.
What we are looking for
  • An exceptional academic track record
  • Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
  • Drive and a track record of going above-and-beyond expectations
  • Deep personal motivation to be at the forefront of technology security
  • Leadership and management ability
  • Excellent business English writing and presentation skills
  • Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
  • Expertise in threat modelling and risk management frameworks
  • Broad knowledge of how to operationalize the management of security risk
  • Experience in Secure Development Lifecycle and Security by Design methodology
What we offer you

We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.

  • Distributed work environment with twice-yearly team sprints in person
  • Personal learning and development budget of USD 2,000 per year
  • Annual compensation review
  • Recognition rewards
  • Annual holiday leave
  • Maternity and paternity leave
  • Employee Assistance Programme
  • Opportunity to travel to new locations to meet colleagues
  • Priority Pass, and travel upgrades for long haul company events
About Canonical

Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.

Canonical is an equal opportunity employer

We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.

#LI-remote

  • Lead Application Support Specialist

    2 weeks ago

    Old Toronto, Ontario, Canada Validus Risk Management Full time

    We are seeking a highly skilled and motivated Lead Application Support Specialist with extensive experience in trading systems to oversee the application support team for our Horizon platform. The successful candidate will ensure high levels of customer satisfaction through effective support and problem-solving, maintaining application performance, and...

  • Lead Application Support Specialist

    2 weeks ago

    Old Toronto, Ontario, Canada Validus Risk Management Full time

    DescriptionWe are seeking a highly skilled and motivated Lead Application Support Specialist with extensive experience in trading systems to oversee the application support team for our Horizon platform. The successful candidate will ensure high levels of customer satisfaction through effective support and problem-solving, maintaining application...

  • Contracts and Risk Specialist

    2 weeks ago

    Toronto, Ontario, Canada Securitas Security Services USA, Inc. Full time

    Contracts and Risk Specialist & Paralegal- CAN Securitas Canada celebrates diversity, and we welcome and encourage applications from the four designated groups: namely women, aboriginal people, visible minorities, and persons with disabilities. Securitas is committed to hiring and retaining a diverse and inclusive workforce and fostering an environment where...

  • Security Risk Analyst

    2 weeks ago

    Toronto, Ontario, Canada Quantum Technology Recruiting Inc. Full time

    Position: Senior Cyber Security Risk Specialist Job Type: Full-time permanent, Hybrid Our client, a leader in the retail space, is currently seeking a Senior Cyber Security Risk Specialist. This role is heavily focused on Security risk assessments, conducting in depth security analyses on new and existing solutions providing TRA reports as well as provide...

  • Account Manager

    2 weeks ago

    Toronto, Ontario, Canada Security Management Full time

    Account Manager:Job Overview:SMS Security is a mid-sized security systems company providing guard services and technical system support to commercial and condominium buildings in Toronto. We are seeking an Account Manager to join our growing Guard Services team. As an Account Manager, you will act as a communication liaison between our clients, security...

  • Lead Application Support Engineer

    2 weeks ago

    Toronto, Ontario, Canada Validus Risk Management Full time

    We are seeking a highly skilled and motivated Lead Application Support Engineer with extensive experience in trading systems to oversee the application support team for our Horizon platform. The successful candidate will ensure high levels of customer satisfaction through effective support and problem-solving, maintaining application performance, and leading...

  • Senior Specialist, Cyber Security and Technology Risk

    2 weeks ago

    Toronto, Ontario, Canada Loblaw Companies Limited Full time

    Senior Specialist, Cyber Security and Technology Risk page is loaded Senior Specialist, Cyber Security and Technology Risk Apply locations 500 Lakeshore Ave, Toronto, ON time type Full time posted on Posted Yesterday job requisition id R Referred applicants should not apply directly to this role. All referred applicants must first be submitted...

  • Risk and Compliance Specialist

    2 weeks ago

    Toronto, Ontario, Canada KPMG Full time

    Overview:At KPMG, you'll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.The OpportunityThe Ignition Tax group is looking for a Risk & Compliance Specialist - Technology to join our team. Ignition Tax is a team technology trailblazers tasked with...

  • Specialist Corporate Risk Control

    2 weeks ago

    Toronto, Ontario, Canada Bell Canada Full time

    At Bell, we do more than build world-class networks, develop innovative services and create original multiplatform media content – we advance how Canadians connect with each other and the world. If you're ready to bring game-changing ideas to life and join a community that values, professional growth and employee wellness, we want you on the Bell team....

  • Security Compliance Specialist

    2 weeks ago

    Toronto, Ontario, Canada Pager Full time $97,000 - $142,000

    PagerDuty is seeking a Security Compliance ConMon Specialist to join our diverse, customer-focused team As a Security Compliance ConMon Specialist, you will report to the Senior Manager of Customer Trust & GRC, partnering across the business to play a crucial role in ensuring ongoing compliance with the Federal Risk and Authorization Management (FedRAMP) and...

  • Physical Security Specialist

    17 hours ago

    Toronto, Ontario, Canada Control Risks Full time

    We are seeking an experienced Physical Security Specialist to join our team at Control Risks. As the Physical Security Specialist, you will play a crucial role in ensuring the safety and security of our clients' events.This position is a 6-month role.Responsibilities:Support Client event security team in the execution of safe secure and successful events,...

  • Senior Risk Management Specialist

    2 weeks ago

    Toronto, Ontario, Canada HOOPP Full time

    high-performance, people-focused culture our commitment that equity, diversity, and inclusion are fundamental to our work environment and business success, which helps employees feel valued and empowered to be their authentic selves learning and development initiatives, including workshops, Speaker Series events and access to LinkedIn Learning, that...

  • Cyber Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada Cleo Consulting Full time

    Requisition: RQ00048RQ Senior Cyber Security SpecialistStart Date: End Date: Business Days: 256.00# of Openings: 2Job Title: Senior Cyber Security SpecialistOffice Location: 200 Front St West, TorontoAssignment Type: HybridNotes from the Hiring Manager:This role will require contractors to come onsite for occasional meetings.This is a new security...

  • Manager, Information Security Risk

    2 weeks ago

    Toronto, Ontario, Canada Sun Life Full time

    About the Role:The role is part of the second line in the three lines of defense model and focuses on enhancing the Information Security Risk Management program. Responsibilities include independently reviewing, challenging, and reporting on Sun Life's management of operational risks.Responsibilities:Lead and maintain the Information Security Risk Management...

  • Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada Arthur Grand Technologies Inc Full time

    Security Specialist - Penetration Testing – Senior Arthur Grand Technologies Inc federal contracting opportunities, federal contracting, federal contracting companies, federal contracting for small business, federal contracting agencies, us federal contracting corp, federal contracting services, federal contracting... View company page Arthur Grand...

  • Senior Specialist, Risk Control

    2 weeks ago

    Toronto, Ontario, Canada TEEMA Full time $122,305 - $163,369

    Job Title: Senior Specialist Cyber PMO Our client, the City of Toronto is looking for a Senior Specialist – Cyber PMO to join theOffice of the Chief Information Security Officer. The Senior Specialist reports to Manager Strategic Transformation. The role is Permanent Full Time with shifts from Monday to Friday, 35 hours work week. The Senior Specialist...

  • Senior Specialist, Risk Control

    2 weeks ago

    Toronto, Ontario, Canada TEEMA Full time $122,305 - $163,369

    Job Title: Senior Specialist Cyber PMO Our client, the City of Toronto is looking for a Senior Specialist – Cyber PMO to join the Office of the Chief Information Security Officer. The Senior Specialist reports to Manager Strategic Transformation. The role is Permanent Full Time with shifts from Monday to Friday, 35 hours work week. The Senior Specialist...

  • Manager, Security

    2 weeks ago

    Old Toronto, Ontario, Canada Securitas Security Services USA, Inc. Full time

    Securitas is currently seeking a Security Manager to join their client in the Toronto area. We are seeking an individual with experience in a corporate setting. Securitas is proud to employ over 350,000 employees globally in various industries with our clients and we are looking to add to our family. This role is diverse, and we are looking for someone with...

  • IAM CyberArk Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada IAMConcepts Security Solutions Inc Full time

    IAMConcepts Security Solutions Inc. is a leading company in Cybersecurity, specifically Enterprise Identity & Access Management (IAM). We are the preferred North American Identity and Access Management Service provider with over 100+ customers, leveraging the top tier strategic partners and vendors. Role We are now hiring IAM CyberArk Security...

  • Senior specialist, cyber security and technology risk

    2 weeks ago

    Toronto, Ontario, Canada Loblaw Companies Ltd - Head Office Full time

    Les candidats référés ne doivent pas postuler directement pour ce poste. Toutes les références de candidats doivent d'abord être soumises dans Workday par un collègue de Loblaw actuel. L'utilisation du masculin à pour but d'alléger le texte Venez faire votre différence dans les communautés à travers le Canada, où l'authenticité, la...