Cyber Security/IT Specialist

18 hours ago


Canada Tbwa ChiatDay Inc Full time
Job Title: Cyber Security/IT Specialist

We are seeking a highly skilled Cyber Security/IT Specialist to join our dynamic and collaborative team. As a key member of our IT security team, you will play a critical role in driving the development and implementation of governance frameworks and supporting an IT security risk management program.

Key Responsibilities:
  • Operate and mature our Vendor Risk Management and Sales Enablement processes by performing vendor risk assessments and responding to customer security questionnaires.
  • Develop and implement governance frameworks to streamline IT processes and reduce risks.
  • Conduct risk assessments and internal audits.
  • Collaborate with IT and Security teams to enhance policies and controls.
  • Regularly update risk documentation and compliance/metrics reporting.
  • Manage cross-departmental projects to align IT processes with business strategies.
  • Train and guide the team on compliance best practices.
Opportunities for Growth:
  • Advancement to a senior GRC role within 2-3 years.
  • Potential to lead larger and more complex compliance and risk projects.
  • Opportunities to contribute to strategic planning at the organizational level.
Interaction and Collaboration:

This role involves daily interactions with IT, Security, Sales, Legal, and Procurement teams, and as-needed interactions with external auditors.

The nature of collaboration ranges from daily operational tasks to strategic planning sessions.

A typical week?

  • Kick off the week with a team meeting to align on priorities and projects.
  • Conduct vendor risk assessments and respond to security questionnaires from potential & existing clients.
  • Work on enhancing IT governance frameworks.
  • Meet with the IT & Security teams to discuss updates to policies and control mechanisms.
  • Conduct internal risk assessments and audits.
  • Prepare reports and present findings to management.
  • Dedicate time for professional development and training.
  • End the week by updating compliance and metrics reporting, and setting up the next week's tasks.
Structure:

Our team consists of Security Operations, Application Security and GRC, led by the CISO.

The team is expected to double in size in the current calendar year.

Collaborative Environment:

Our team is collaborative, agile, and committed to continuous improvement.

We support each other to achieve collective goals while also emphasizing personal professional development.

We are looking for someone who can bring operational support, innovative ideas, a strong work ethic, and a proactive approach to enhance our GRC processes.

Qualifications:
  • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field or equivalent combination of education & experience.
  • Minimum of 5 years of experience in IT, information security, risk management or IT audit.
  • Previous experience in a technical capacity or IT risk.
  • Experience in conducting technical risk assessments, compliance audits, and vendor risk management.
Certifications and Industry Knowledge:

Preferred certifications include Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).

Strong knowledge of common information security management frameworks such as ISO/IEC 27001, NIST 800-53, and SOC2.

Proficiency in using GRC platforms and tools.

Familiarity with IT and security policy formulation and compliance monitoring.

Additional Skills:
  • Excellent analytical and problem-solving skills.
  • Strong project management abilities and attention to detail.
  • Ability to handle confidential information with discretion.
  • Strong interpersonal and communication skills to effectively interact with various departments and stakeholders.
  • Highly motivated, proactive, and capable of working on own initiative with minimal supervision.
  • Adaptability and willingness to learn new technologies and frameworks in a rapidly evolving environment.

We strive to create a healthy and inclusive work environment.

This is everyone's business.

We are looking forward to getting to know you



  • Canada Cyber Crime Full time

    Job SummaryWe are seeking a highly skilled Senior Specialist, Cyber Security to join our team at Northwestel. As a key member of our Cyber Security team, you will be responsible for managing security controls, delivering security consultation, and providing security best practices for our organization.Key ResponsibilitiesReview and advise on information...


  • Canada Cyber Crime Full time

    Job SummaryWe are seeking a highly skilled Senior Specialist, Cyber Security to join our team at Northwestel. As a key member of our Cyber Security team, you will be responsible for managing security controls, delivering security consultation, and providing security best practices for our organization.Key ResponsibilitiesReview and advise on information...


  • Canada Cyber Crime Full time

    Job SummaryWe are seeking a highly skilled Senior Specialist, Cyber Security to join our team at Northwestel. As a key member of our IT Security team, you will be responsible for managing security controls, delivering security consultation, and providing security best practices for our organization.Key ResponsibilitiesReview and advise on information...


  • Canada Cyber Crime Full time

    Job SummaryWe are seeking a highly skilled Senior Specialist, Cyber Security to join our team at Northwestel. As a key member of our IT Security team, you will be responsible for managing security controls, delivering security consultation, and providing security best practices for our organization.Key ResponsibilitiesReview and advise on information...


  • Canada Cyber Crime Full time $93,000 - $120,000

    About Cyber CrimeCyber Crime is at the forefront of innovative technology solutions, dedicated to enhancing security measures across various sectors. Our mission is to empower organizations to safeguard their digital assets and ensure a secure environment for their operations.The OpportunityAs a Cloud Security Specialist, you will play a crucial role in...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify effective ways to mitigate them.Develop...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify effective ways to mitigate them.Develop...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Pleco Migration Private Limited Full time

    Cyber Security ConsultantPleco Migration Private Limited is seeking a highly skilled Cyber Security Consultant to join our team.Key Responsibilities:Stay up-to-date with the latest security and technology developments to ensure our systems remain secure.Research and evaluate emerging cyber security threats and identify ways to mitigate them.Develop and...


  • Canada Cyber Crime Full time

    Network Security Engineer for Electric Vehicle Charging InfrastructureAt Cyber Crime, we're committed to accelerating the transition to zero-emission transportation. We're seeking a self-motivated, collaborative Network Security Engineer to support our mission.Key Responsibilities:Collaborate with our Product, Delivery, and Operations teams to ensure our...


  • Canada Cyber Crime Full time

    Network Security Engineer for Electric Vehicle Charging InfrastructureAt Cyber Crime, we're committed to accelerating the transition to zero-emission transportation. We're seeking a self-motivated and collaborative Network Security Engineer to join our team.Key Responsibilities:Collaborate with our Product, Delivery, and Operations teams to ensure our...


  • Canada Cyber Crime Full time

    Network Security Engineer for Electric Vehicle Charging InfrastructureAt Cyber Crime, we're committed to accelerating the transition to zero-emission transportation. We're seeking a self-motivated, collaborative Network Security Engineer to support our mission.Key Responsibilities:Collaborate with our Product, Delivery, and Operations teams to ensure our...


  • Canada Cyber Crime Full time

    Network Security Engineer for Electric Vehicle Charging InfrastructureAt Cyber Crime, we're committed to accelerating the transition to zero-emission transportation. We're seeking a self-motivated and collaborative Network Security Engineer to join our team.Key Responsibilities:Collaborate with our Product, Delivery, and Operations teams to ensure our...


  • Canada Bronson Technical Search Full time

    Cyber Security Specialist in Higher EducationJob SummaryWe are seeking a seasoned Cyber Security Specialist in Higher Education to develop, plan, recommend, implement, improve, and monitor security measures to protect computer networks, connected devices, and information to prevent unauthorized access, use, disclosure, disruption, modification, or...


  • Canada Bronson Technical Search Full time

    Cyber Security Specialist in Higher EducationJob SummaryWe are seeking a seasoned Cyber Security Specialist in Higher Education to develop, plan, recommend, implement, improve, and monitor security measures to protect computer networks, connected devices, and information to prevent unauthorized access, use, disclosure, disruption, modification, or...


  • Canada Bronson Technical Search Full time

    Cyber Security Specialist in Higher EducationJob SummaryBronson Technical Search is seeking a seasoned Cyber Security Specialist in Higher Education to develop, plan, recommend, implement, improve, and monitor security measures to protect computer networks, connected devices, and information to prevent unauthorized access, use, disclosure, disruption,...