Application Security Lead

**Who we are**

Univeris has been successfully building and modernizing wealth management software for over 30 years. We are the go-to solution for many financial services firms (e.g., mutual fund dealers, securities dealers, wealth management firms and insurance companies) that want to stay competitive in an intriguingly digital world. To date, more than 25,000 financial advisors and 1.5 million investors in 12 countries have converted to our money-managed platform—with over $450B in Assets Under Administration. Why? Because we have the technology to streamline portfolio management, drive efficiencies and improve productivity.

At Univeris, we value talent and ideas. This means our employees have the freedom to do things they know would be great and meaningful for our clients and for the company. We’re looking for people who are creative, get excited by new opportunities to learn and grow and feel at home by an organization that supports them. Ready to start your career?

*
The Opportunity*

*
The Role*
- Lead and manage the vulnerability management process and execute tasks as required
- Liaison with both technical and business stakeholders advising on our security standards and policies
- Improve and maintain security services, focused on review efficiency, standards definition, and change management correctness
- Plan and manage the implementation of processes required to satisfy security policy requirements
- Stay informed about security best practices and security threats
- Assess projects for security risks by examining and interpreting requirement documents and architecture diagrams
- Document risk and mitigation controls, including policy/procedure updates
- Develop strong relationships with cross-functional team members and establish training plans
- Collaborate with with engineering leads and information security management security facing aspects of software product development
- Co-operate with infrastructure management on security aspects of the Univeris infrastructure

*
Basic Qualifications*
- Bachelor’s Degree in Computer Science/related field or equivalent work experience
- 10+ years of experience in software development
- Proven development experience in Java is preferred
- Working experience using an Application Security Framework such as NIST or OWASP Application Security Verification Standard is desired
- Knowledge of OWASP Top 10 Application Security Risks and SANS Top 25 Software Errors
- Familiarity with industry standards and regulations including PCI, SOC 2, and ISO compliance is desired
- Eligible to work in Canada

**Proven Qualifications**
- Extensive and deep technical knowledge of front-end UIs through to back-end systems
- Familiar with security best practices and knowledge of common and emerging security threats
- Good team player with the ability to lead security initiatives
- Great communication skills to explain complex security topics in simple language and easy to understand concepts.

**Extras You Might Offer As Tiebreakers**
- Application Security Certifications : GIAC Web Application Defender (GWEB), GIAC Secure Software Programmer (GSSP), Certified Secure Software Lifecycle Professional (CSSLP), Secure Software Practitioner (SSP), Certified Application Security Engineer (CASE)

**The Work Environment**
- Our location is downtown Toronto in a small office environment
- Work may be in-office, remote or hybrid, collaborating with other team members in-personal and digitally during regular business hours
- Some work outside of normal business hours may be required on occasion due to time-constrained activities or collaborating with remote teams

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.