Cloud Security Specialist

Rogers Communications, Inc. is seeking a highly motivated Cloud Security Specialist to join our Cyber Protection Centre. This role is responsible for maintaining and advancing our existing cloud security program through the continual review and development of Rogers Cyber Security strategy and processes.

• Assess security configurations of cloud services within several cloud environments, including Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), Software-as-a-Service (SaaS), and marketplace offerings.
• Strengthen security posture of cloud infrastructure by conducting security assessments to identify misconfigurations and vulnerabilities within cloud environments.
• Review internal information security standards and recommend security compliance guidance for cloud service security capabilities.
• Foster strong relationships with cross-functional teams and work with architecture, application development, security teams, and other stakeholders to ensure that the provided guidance is comprehensive and practical.
• Stay up to date with the latest trends and developments in cloud security and provide recommendations for enhancing security configurations based on emerging threats and vulnerabilities.
• Mentor Security Specialists to foster a culture of continuous learning and improvement.

• 4+ years of proven experience as Cloud Security Specialist or in a similar role.
• Cloud Service Providers: Proficiency in platforms like AWS, Azure, and Google Cloud Platform (GCP) is essential.
• Cloud Security Architecture: Understanding of secure design and implementation practices for cloud architectures, including knowledge of security frameworks and best practices.
• Network Security: Strong understanding of networking concepts, including firewalls, VPNs, and intrusion detection/prevention systems.
• Identity and Access Management (IAM): Expertise in managing user roles, permissions, and policies in the context of secure access to cloud resources.
• Encryption and Data Protection: Knowledge of encryption techniques and data protection methods to secure data both at rest and in transit.
• Compliance and Governance: Strong understanding of regulatory controls related to security (e.g. SOX & PCI-DSS).
• Scripting and Automation: Proficiency in scripting languages like Python, PowerShell, or Bash to automate security tasks and responses.
• Incident Response: Skills in detecting, responding to, and mitigating security incidents in a cloud environment.
• Security Protocols and Procedures: Understanding of various security protocols and procedures to protect cloud infrastructure.
• Direct experience with developing reporting dashboards, security metrics, KRIs and KPIs for leadership.
• Understanding and practical application of security frameworks, standards, and best practices (e.g., CSA, CIS Benchmarks, NIST 800-53, ISO 27001)
• Understanding of SDLC (Agile methodology), DevSecOps, Zero Trust principles.
• Proven record of accomplishment of staying on top of the latest trends and developments in cloud security and a passion for knowledge sharing and mentorship.
• Excellent problem-solving skills and determined to solve difficult problems.
• Tools - Power Bi, Microsoft Office, Developer tools, IDE, Containerization technologies, basic knowledge on AI (Artificial Intelligence) use cases in clouds.
• A bachelor's or master's degree in computer science, Information Systems Security, or in a related field.

• Excellent research and strategic thinking skills, with a strong attention to detail and reporting capability.
• Effective communication and interpersonal skills, with the ability to effectively communicate complex security concepts and recommendations to a variety of stakeholders.
• Proven ability to manage multiple tasks and thrive in a fast-paced & dynamic environment.
• Works well under pressure and time constraints and can prioritize competing priorities appropriately. Communicates effectively with meaningful and articulate verbal discussions.
• Synthesizes information into succinct, concise, and logical summaries and reports.
• Ability to work with teams to achieve goals and meet deadlines in a fast-paced environment.
• Can work independently with minimal supervision and guidance.

• Preferred - Security specialty in AWS, Azure or GCP
• SANS Cloud Certifications.

We believe in investing in our people and helping them reach their potential as valuable members of our team. As part of our team, you'll have access to a wide range of incredible resources, growth opportunities, discounts, and perks, including:

• Competitive salary & annual bonus
• Competitive & flexible health and dental benefits, pension plan, RRSP, TFSA, and Stock matching programs.
• Discounts: Enjoy up to 50% off Rogers Services and Blue Jays Tickets, 25% off TSC items, and a 20% discount on all wireless accessories sold in Rogers stores.
• Paid time off for volunteering
• Company matching contributions to charities you support
• Rogers First: priority in applying to internal roles of interest
• Wellness Programs:
  • Homewood employee & family assistance program
  • Cognitive Behavioural Therapy (CBT) & Virtual therapy sessions
  • Low or no-cost fitness membership with access to virtual classes
• Our commitment to the environment and diversity:
  • Work for an organization committed to environmental protection
  • Strong commitment to diversity and inclusion with employee resource groups supporting equity-deserving groups including groups representing People of Colour, 2SLGBTQIA+, Indigenous Peoples, Persons with Disabilities and Women. We all bring something different, and we know what makes us different makes us great.

This is a hybrid work position and will require you to be in office three days per week. You can choose which days in office work best for you

If you are selected to move forward in the recruitment process, here is what you can expect:

• 15-minute phone screen with your recruiter, 1-hour virtual interview with Hiring Manager, 30-minute final round virtual interview with Director of the team. Best of luck

To protect our people, brand and assets, a pre-employment background check will be conducted. As part of our selection process, all candidates must clear a criminal background check. Additionally, a credit check and drivers abstract may be required depending on the role.

Schedule: Full time
Shift: Day
Length of Contract: Not Applicable (Regular Position)
Work Location: 8200 Dixie Road (101), Brampton, ON
Travel Requirements: None
Posting Category/Function: Technology & Information Technology
Requisition ID: 312947

At Rogers, we believe the key to a strong business, is a diverse workforce where equity and inclusion are core to making everyone feel like they belong. We do this by embracing our diversity, celebrating our different perspectives, and working towards creating environments that empower our people to bring their whole selves to work. Everyone who applies for a job will be considered. We recognize the business value in creating a workplace where each team member has the tools to reach their full potential by removing any barriers for equal participation. We work with our candidates who are experiencing a disability throughout the recruitment process to ensure that they have what they need to be at their best. You matter to us For any questions, please visit the Recruitment Process FAQ.