Information Security Specialist

OverviewWe are hiring an Information Security Specialist to join our team in Toronto or Winnipeg. In this role, you will be a key player in protecting the organization’s critical information assets and ensuring compliance with industry standards and regulations. You will provide guidance to business leaders in managing cyber risks during business acquisitions and integrations and support the alignment to an enterprise security governance structure. You will foster relationships with business and IT stakeholders across the company and its diverse ecosystem of affiliates and partners. You will assist with building and operating information security-related services that will protect and preserve the confidentiality, availability and integrity of information systems and data. You will bring a combination of deep technical and business knowledge to improve information security and IT risk in all aspects of the business. Responsibilities Provide expertise to business leaders and technology teams by conducting security risk assessments, identifying potential threats and vulnerabilities, and recommending appropriate compensatory measures to allow risk to be managed to acceptable levels. Collaborate with information security members to develop and align information security policies and standards with evolving business needs and industry standards (e.g. ISO 27001, NIST CSF) and ensure the ongoing currency of same for all participating companies. Recommend security compliance and remediation initiatives for technology, processes, and services to ensure ongoing effectiveness of the information security program, to protect the business from security threats and to ensure compliance with regulatory, key business partner and client requirements. Maintain awareness of security/privacy industry trends to keep abreast of best practices, technologies, and regulatory requirements in information security; research best practices and define improvements to corporate security infrastructure in support of the security program. Develop and implement security strategy, plans, and budgets, ensuring alignment with business objectives and risk appetite for specific locations/companies. Complete business cases for security solutions with a focus on risk assessment practices. Develop and maintain an in-depth understanding of the business unit, technologies, customers, partners, data, and processes. Serve as main contact or adviser for local security as part of Information Security leadership and collaborate with IT business partners, as well as finance, HR, legal, and other staff as needed. Provide leadership and strategic and tactical guidance for the cybersecurity program supporting enterprise security initiatives. Engage with partner firms to advance security objectives and serve as a main contact for communications during security incidents. Participate in company/region/unit meetings, conferences, and industry forums related to the cybersecurity program. Act as main contact or adviser for company affiliates and partners to align with the cyber program and governance structures. Understand processes, identify and evaluate controls and risks, and suggest controls and risk management strategies to ensure compliance with Information Security Policies and Standards. Maintain up-to-date knowledge of security threats, vulnerabilities, and mitigations; circulate this knowledge within business units. Identify, document, and address threats and vulnerabilities that may impact the business. To be successful as an Information Security Specialist with People Corporation, you will need At least 10+ years’ cybersecurity experience (or information technology infrastructure coupled with cybersecurity), with at least 5+ years in an operationally focused security practitioner role. Familiar with the cybersecurity acquisition due diligence process to assess the target firm’s status regarding regulatory compliance, security policies, and third-party risk. At least 3 years’ experience working with business leadership, and enterprise projects. Familiar with hands-on experience in IT infrastructure and security technologies (e.g., Firewalls, IPS/IDS, WAF, VPN, SIEM, MXDR, EDR, CASB, SSO, MFA, DLP). Experience in Cloud Security Operations for environments such as Azure, M365, GCP or AWS. Education Completion of post-secondary education in Information Technology, Business Administration, Computer Science or combination of equivalent discipline. A current senior professional certification relevant to cybersecurity, or risk management, such as: CISSP, CISM, CRISC, CISA. Other beneficial industry certifications or training include GSEC, CCSP, CySA+ or ITIL. Knowledge of various security best practices, security principles, standards and frameworks (e.g. CIS, ISO27001, NIST, OWASP). What’s In It For You Learn by working alongside our experts Extended health care and dental benefits A retirement savings plan with company contributions A suite of Health & Wellness offerings Mental Health programs and support for you and your family Assistance for the completion of industry designations Competitive compensation At People Corporation we are committed to helping businesses succeed. We are a national provider of benefits, retirement, wealth, wellness, and human resource solutions. Our experts and solutions serve over 20,000 clients representing nearly 3 million Canadians. We offer customized solutions designed to fit the unique needs of businesses and their employees, members and stakeholders. Providing an inclusive, accessible environment, where all employees and clients feel valued, respected and supported is something we\u2019re committed to. We are dedicated to building a workforce that reflects the diversity of the communities in which we live, and to creating an environment where every employee has the opportunity to reach their potential. If you require an accommodation or an alternative format of any posting please reach out to careers@peoplecorporation.com. Seniority levelMid-Senior level Employment typeFull-time Job functionInformation Technology IndustriesInsurance Referrals increase your chances of interviewing at People Corporation by 2x Get notified about new Information Security Specialist jobs in Toronto, Ontario, Canada. Brampton, Ontario, Canada CA$90,000.00-CA$110,000.00 4 weeks ago Toronto, Ontario, Canada CA$40.00-CA$50.00 3 weeks ago Information Security Specialist (ID#5097) Information Security Advisor / Security Analyst Greater Toronto Area, Canada 20 hours ago Joint Chief Information Security Officer (CISO) - Michael Garron Hospital and Sinai Health Mississauga, Ontario, Canada 20 hours ago Information Security Specialist (Email Governance) Information Security Specialist - Governance & Controls Greater Toronto and Hamilton Area, Ontario, Canada 2 days ago Business Information Security Analyst, Deloitte Global Technology Information Security Specialist (Cyber Security Incident Response Team) We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr