Cybersecurity and Cloud Infrastructure Specialist

**About Futurpreneur**

Futurpreneur is a national non-profit organization that empowers young, diverse entrepreneurs, ages 18-39 to start, buy or grow their businesses in Canada, by providing loans with mentorship and resources.

Founded in 1996, we have helped more than 18,700 young entrepreneurs, promoting entrepreneurship among Canadian youth as a critical pillar for diversifying the economy, generating employment opportunities, and fostering a sustainable future.

Futurpreneur is a founding member of the G20 Young Entrepreneurs’ Alliance, the Canadian member of Youth Business International and the Canadian host of Global Entrepreneurship Week (GEW).

**Our Purpose**(why we exist): To drive inclusive Canadian prosperity by fostering the success of young entrepreneurs

**Our Mission**(what we do every day to achieve our purpose):To empower diverse entrepreneurs ages 18-39 by providing loans with mentorship and resources to help them start and buy businesses that contribute to sustainable and inclusive economic prosperity, in their communities and across Canada.

**Our Values** (how we work - our core principles & commitments): We are mission-driven, collegial & collaborative, diverse & inclusive, and accountable & transparent.

**Here’s the opportunity: Cybersecurity and Cloud Infrastructure Specialist**

The **Cybersecurity and Cloud Infrastructure Specialist** will be responsible for securing and managing both on-premises and cloud-based assets. They will assist in the design, implementation, and maintenance of security policies and controls that align with industry standards and regulatory requirements, ensuring the protection of sensitive data and systems. Additionally, they manage the deployment of security measures, such as encryption, firewalls, and intrusion detection systems, within Azure and other Microsoft cloud services, continuously monitoring for anomalies and potential threats.

Reporting to the IT Manager, the Specialist is a hands-on, proactive cybersecurity professional who excels in technical execution and has deep expertise in threat detection, vulnerability management, and incident response across hybrid environments. The incumbent is a true team player who can provide solid recommendations to the IT Manager and IT team on how to optimize existing and new technology to benefit business operations. They will have to stay ahead of emerging threats, adapt to evolving cloud technologies, and coordinate with cross-functional teams to integrate security seamlessly into all aspects of the cloud infrastructure.

This is a **permanent, full-time position located in Toronto, ON**. The incumbent will be working on our hybrid work model (minimum 2 days in the office per week).

**Threat & Vulnerability Management (40%)**
- In collaboration with the IT Manager, oversee the deployment, configuration, and management of Tenable solutions across the organization.
- Mitigate threats found in penetration tests.
- Regularly conduct vulnerability scans and assessments, analyze results, and develop remediation plans.
- Ensure timely patch management and risk mitigation strategies in response to identified vulnerabilities.
- Manage and maintain EPP, EDR, and XDR solutions to ensure comprehensive endpoint security across all devices (including ensuring real-time monitoring and response capabilities).
- Develop and maintain threat hunting protocols, leveraging EDR/XDR capabilities to identify potential risks.
- Implement policies for malware detection, prevention, and response.
- Conduct regular security assessments, identifying vulnerabilities and areas for improvement.
- Stay updated on the latest cybersecurity trends and technologies, recommending enhancements to existing security posture.
- Work closely with MDR providers to monitor, detect, and respond to security incidents.
- Coordinate incident response activities with MDR teams, ensuring effective risk mitigation.
- Review and analyze MDR reports, implementing recommended security improvements.
- Investigate and respond to endpoint security incidents, coordinating with other IT, business teams, and staff as necessary.
- Administer and monitor IDS/IPS solutions, ensuring real-time detection and prevention of security threats.
- Analyze IDS/IPS alerts, coordinating incident response efforts as needed.
- Assist in the development and execution of incident response plans, ensuring rapid and effective responses to security incidents.
- Document and report on incidents, providing insights for continuous improvement of security measures.

**Cloud Infrastructure & SaaS Administration (40%)**
- Administer and secure cloud environments, including IaaS, PaaS, and SaaS platforms.
- Implement cloud security best practices, including data encryption, access controls, and network security.
- Regularly audit cloud environments for security compliance and risk management.
- Manage and secure Microsoft Azure environments, including Entra ID resource groups, and subscr