IT Security Specialist

**Descartes Unites the People and Technology that Move the World**
The need for efficient, secure, and agile supply chains and logistics operations has become ever more critical and complex. By combining innovative technology, powerful trade intelligence and the reach of our network, Descartes helps get goods, information, transportation assets, and people where they’re needed, when they’re needed.

**We’re growing fast and invite you to join our amazing team.**

This opportunity is ideal for an individual who is seeking professional experience and is enthusiastic about the prospect of working at a growing company with a global focus, and who have a keen interest in learning and developing as a professional.

**RESPONSIBILITIES**
- Ability to learn and maintain knowledge of specific compliance frameworks and requirements such a HIPAA and PCI
- Coordination, preparation, and internal audit for ISO27001, SOC1, HIPAA, PCI, SOC2 Programs and alignment of program to NIST Cyber Security framework
- Experience in creating Policy Documentation and Metrics to measure compliance with Policy
- Risk Register Management and Security Exception Management
- Participate in Education and Awareness around the area of Compliance and GRC, Security Awareness, and other education campaigns related to Cyber Security.
- Develop and maintain compliance automation tools including on-line GRC systems, automated compliance checks, and other methods to scale and reduce overhead of compliance.
- Participation in Data Privacy initiatives including Data Privacy Impact Analysis
- Coordination with global IT Pillars to achieve Security and Compliance goals
- Threat Modeling new and existing processes and projects
- Cultivate core relationships between internal stakeholders and external partners and other third-party entities that support security requirements for handling sensitive data.
- Participation in creation and maintence of security collateral and whitepapers and RFP/RFI response support
- Establish and maintain compliance within the Public Cloud and utilization of automation technologies such as Cloud Security Posture Management
- Maintain a Security and Compliance roadmap and integration checkpoints for new acquisitions

**QUALIFICATIONS AND KEY ATTRIBUTES**

We are seeking an assertive, adaptable individual with excellent analytical skills, and who will thrive as both a team player and as an individual contributor.
- A college diploma is required
- Knowledge of information security best practices, risks and countermeasures.
- Some experience in a compliance related environment including but not limited to PCI Compliance, ISO27001, SOC2, GDPR
- The ability to weigh business risks and enforce appropriate information security measures.
- Outstanding interpersonal, verbal and written communication skills to interface with management, staff, vendors and customer prospects.
- A high degree of integrity and trust, along with the ability to work independently or as part of a team.
- Strong time management skills.
- Excellent documentation and analytical skills.
- Any information security certifications are an asset, including but not limited to CISM, CISSP, CISA, CRISC
- Understanding of complex technical environments including Traditional Datacenter, Public Cloud and Hybrid.
- Certification in ISO27001 Auditing is a plus

**Salary Range**: $90,000 to $100,000 CAD. Compensation information provided is a good faith estimate for this position only. Factors that may be used to determine your actual salary may include your specific skills as well as the years of experience you have. Similar positions located in different geographic regions will not necessarily receive the same compensation.

Location: This is a remote opportunity, open to applicants authorized to work in Canada.

**Join Us**
As we scale, we’re looking for new doers, collaborators and innovators to join Descartes in uniting the people and technology that move the world as the Global Leader in Logistics and Supply Chain Technology. We’re entrepreneurial, hardworking, geeky-in-a-good way problem solvers. Guided by our values, we nurture a TEAM focused culture that invests in people and creates opportunities for advancement across a broad spectrum of career paths. We prioritize work-life balance and foster an environment with the space to take ownership, to be heard, and to carve a path for your individual accomplishments to help drive our success. At Descartes, everyone has a voice and the best idea wins, regardless of who makes it. We offer competitive compensation, great benefits, remote and flexible work hours, and the opportunity to join a company on an awesome mission with a great existing team and trajectory.