Security Compliance

**Who is Allstate**: Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. The company is proud to have been named a Best Employer in Canada for nine consecutive years and prioritizes supporting employees and fostering an inclusive, welcoming corporate culture. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. Serving Canadians since 1953, Allstate strives to provide reassurance with its "You’re in Good Hands®" promise. - Through our Employee Value Proposition, Opportunity, Flexibility, Community, Diversity and Family, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do._ **Role Designation**: Hybrid **Benefits to joining Allstate** - Flexible Work Arrangements - Employee discounts (15% on auto and property insurance, plus many other products and services) - Good Office program (receive up to 400$ back after purchasing office equipment) - Student Loan Payment Matching Program for Government Student loans - Comprehensive Retirement Savings Program with employer matched contributions - Annual Wellness allowance to support employees with improving health and wellbeing - Personal reflection day - Tuition Reimbursement - Working within the community and giving back Our team is growing and we are actively looking to hire a Security Compliance & Assurance to join our team **Accountabilities**: Program Design & Development - 70% - Participates in the company’s Sarbanes-Oxley (SOX) compliance program and work jointly with the corporate compliance team to provide assurance of the IT Controls to support this program. - Collaborate with IT teams to complete annual certifications for PCI compliance by assisting the Qualified Security Assessor (QSA) and leading in evidence collections, reviews and quality control to obtain Report on Compliance (RoC) and Attestation of Compliance (AoC). - Collaborates with cross-functional development teams to analyze and coordinate efforts for security solutions and conduct post-implementation performance audits. - Reviews and analyzes product changes for impacts to security, and architecture documentation to remediate design decisions, operating procedures, or processes that impact adherence to security commitments. Process Improvement - 30% - Develops, monitors, coordinates, and implements policies, standards, procedures, controls, and guidelines to support security, compliance, and audit requirements. - Remains abreast of evolving security trends, technologies, laws (e.g., Sarbanes-Oxley (SOX), etc.) and accreditation standards to recommend and implement changes as they arise. **Qualifications**: - Diploma or Bachelor’s degree in Computer Science / IT Security and experience in the information security field, process auditing, or other compliance related area. - Requires 2-5 years of relevant experience working in information security including experience with information security risk and compliance. - IT governance, risk, and compliance (GRC) principles, standards, and best practices (e.g., risk management, governance, information security controls, etc.). - Strong systems acumen to quickly learn and adapt to a variety of systems. - IT security and governance frameworks (e.g., ISO 27001/2, NIST, COBIT, etc.). - Data security risk management and mitigation processes. - Interpersonal, oral, and written communication skills. - Analytical, critical thinking, and problem-solving skills. **Bonus qualification**: - Security certification (e.g., CISSP, CISM, CISA, etc.) would be an asset. - Experience with a variance / exception management platform (e.g., Archer) is preferred. Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs. **Job Types**: Full-time, Permanent **Benefits**: - Dental care - Life insurance - Paid time off - Vision care Schedule: - Monday to Friday Ability to commute/relocate: - Markham, ON: reliably commute or plan to relocate before starting work (required) Application question(s): - How many years have you been working in information security including experience with information security risk and compliance? - What are your salary expectations? **Education**: - Bachelor's Degree (preferred) Work Location: Hybrid remote in Markham, ON