Information Security Specialist

Surex is Canada’s fastest growing online insurance provider. Surex's growth has been awarded by the Fintech Business of the Year Awards, Canadian Business' Growth 500, and the Globe & Mail's Top Growing Companies as a leading Canadian insurtech company in the insurance brokerage space. At Surex, our mission is to give security, transparency, and comfort to Canadians. Since 2012 we have helped 45,000+ Canadians (and counting) across 9 Provinces and Territories live a better life by finding them the right coverage at the right price. Founded in 2012, Surex is Canada’s fastest growing online insurance provider and listed on the Growth 500 list 3 years in a row by Canadian Business. Surex was recently acknowledged for "Top Insurance Workplace" from Insurance Business Canada and 50 Top Workplaces by Silicon Review in 2019 & 2020. And we are just getting started We are a people first company that strives to create the best experience for our employees by creating an inclusive, collaborative, challenging environment to learn and problem solve on a daily basis. We are currently looking for a highly motivated and experienced Systems Administrator to join Surex’s IT Operations team in Eastern Canada, reporting to our Cambridge/Burlington, Ontario office. Job Duties - Provide day-to-day direction and support for the Software Development team with regards to Cloud Security within the Surex organization - Define and mature cloud-focused security policies and controls (governance, processes, frameworks) - Identify, Implement, and Operationalize security technologies and processes to improve visibility and reduce risk - Leverage data analytics to improve our cloud security posture - Partner with other technical leaders throughout the organization to refine and mature Surex’s security posture for cloud-based technologies and platforms - Consult with project teams to ensure that platform architecture has proper security controls in place - Monitor security alerts and participate in security incident management and response - Stay up-to-date with emerging security threats including applicable regulatory security requirements - Implement processes and controls to mitigate risks and ensure IT compliance with different requirements (IT General Controls) - Be the point of contact during internal and external IT audits The Skills You Bring - Demonstrated technical expertise in Cloud DevOps, including Change Management, CI/CD pipelines, and system hardening for security. - Strong background in information security practices, controls, and governance - 7+ years of experience as a technical resource within an IT organization (enterprise / matrixed organization preferred) - 2+ years of experience with AWS - Strong soft skills: builds partnerships, translates complexities into simple terms, ability to maintain focus on objectives - Highly proficient in drafting technical documents: process/procedures, standards/policies, architectures, etc) - Security monitoring experience with one or more SIEM technologies **What we offer**: - Competitive Compensation - Paid Vacation & Paid Flex Days - Benefits & Health Spending Account - Ability to work from home - Secure future in the digital space - Flat Organization - ideas and feedback are welcomed Surex is dedicated to a policy of nondiscrimination on any basis including race, color, creed, religion, national/ethnic origin, sex, age, family status, or sexual orientation. We are committed to improving access and opportunities for all individuals, including those with disabilities by identifying and removing barriers that may prevent, inhibit, or restrict their access to employment opportunities. If you require accommodation at any stage of our recruitment and selection process, please contact us at 1-855-242-6612 Please note that all applicants must be legally eligible to work in Canada and must be willing to consent to a background check.