Specialist , Cybersecurity Assurance

**Description** **Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation.** The Specialist, Cyber Security will be working in a fast paced and innovative environment supporting the overall security posture of Air Canada's technology environment. Air Canada's cyber security systems are foundational to protecting the data and systems that allow its customers to fly safely. The This position will be reporting to the Manager, Cyber Security, Assurance **Functional Accountabilities** Collaborates with Strategic Procurement for the sourcing exercise and on-boarding of the third-parties for the execution of cyber assurance activities. - Collaborate with different internal stakeholders (such as Advisory, DevOps, Architecture, Project team) to prepare and execute cyber assurance activities. - Review, interpret and recommend remediations based on cybersecurity testing reports (such as SAST, DAST and penetration test). - Validates the results of cyber assurance activities with the internal and external stakeholders. - Leads the execution of third-party cyber risk assessments (pre and post contacting, and ongoing monitoring) to ensure compliance with internal information security policies and procedures, as well as external requirements. - Ensures that cybersecurity clauses are embedded in the agreements with third parties. - Manage cybersecurity risks, vulnerabilities, and defects from identification to remediation. - Performs risk assessments, documents them and support the implementation of mitigating controls consistent with company strategy. - Generate reports to demonstrate cyber assurance metrics and KPI. - Identify Cyber risks, communicate and develop "best practice" solutions, and recommend mitigating controls consistent with company strategy. - Introduce new processes, initiatives to improve cyber assurance practice. - Represent the organization and take an active participation on different IT business or security airline specific forums. - Supporting the leadership team on strategic initiatives specific to the respective portfolio. **Qualifications** - A relevant University degree/technical certification, and/or relevant experience commensurate to the role - 6-8 years of IT technology, operations, and people leadership experience in a large company, with a minimum of 4 years of experience in a cyber security and/or risk & compliance role. Thorough understanding of Application Security Testing, Penetration Test, Tabletop Exercises. - Current information security certification (CISSP, CISM or equivalent) is an asset. - Strong knowledge and understanding of cyber security concepts, protocols, industry best practices, strategies, frameworks and regulations such as SOX, PCI DSS, ISO, CoBIT, NIST, PIPEDA, GDPR. - Exceptional analytical, organizational and communication skills. - Self-motivated and independent worker. - Possess investigative nature and be self-motivated. - Results oriented with proactive and methodical approach to problem solving. - Able to multi-task and work under pressure against tight deadlines and changing priorities. - Must be a team player with ability to work closely with diverse groups and working styles. - Ability to establish and maintain effective business relationships. - Flexibility and willingness to work extended hours, when required. **Conditions of Employment**: **Linguistic Requirements** **Diversity and Inclusion** Air Canada is strongly committed to Diversity and Inclusion and aims to create a healthy, accessible and rewarding work environment which highlights employees' unique contributions to our company's success.