Info Security Specialist

Info Security Specialist

Location:

Toronto, ON Onsite Flexibility

Hybrid — 3 days in office, 2 days work from home Contract Details

Position Type:

Contract Contract Duration:

1 year (with possibility of extension based on business needs and performance; conversion to permanent also possible based on business needs and performance) Pay Rate:

C$90.00–C$106.00 / Hour (CAD) Shift / Schedule:

Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day Travel Requirements:

Not required Job Summary

We are seeking an experienced

Information Security Specialist

to provide security consulting, governance oversight, and technical expertise across complex technology and business initiatives. In this role, you will partner with Architecture, Infrastructure & Engineering, and Risk teams to assess security risks, develop security standards, and implement effective security controls that support modern technology solutions. You will play a key role in defining security requirements, establishing governance guardrails, and enabling the secure adoption of cloud, container, AI, and enterprise network technologies. Key Responsibilities

Provide security consulting and risk assessments for technology initiatives and projects. Review solution designs and provide risk-based security recommendations aligned with enterprise security standards. Develop and maintain security standards, technical requirements, STIGs, control mappings, and implementation guidance. Support governance and security reviews for cloud, hybrid, on-premises, containerized, B2B, and emerging technology environments. Assess and provide guidance on security controls for Kubernetes, cloud-native platforms, APIs, SaaS solutions, AI-enabled technologies, and partner connectivity solutions. Design and maintain governance controls supporting secure access, URL filtering, network segmentation, B2B connectivity, and Zero Trust initiatives. Partner with technology teams to establish security guardrails and governance controls that can be consistently applied across the enterprise. Contribute to governance modernization, automation, and process improvement initiatives. Support enterprise-wide security governance programs and strategic security initiatives. Build strong relationships with business, technology, engineering, and security stakeholders. Review network traffic flows and identify security vulnerabilities and gaps. Assess firewall rules, risky network ports, and access control lists (ACLs). Understand routers, switches, VLANs, network architecture, and network diagrams. Review URL filtering, website blocking, risk ratings, and security controls. Conduct network security consultations and identify overly permissive configurations. Prepare detailed process documentation and technical specifications for audit purposes. Perform governance reporting and reconcile network changes against approved change orders and firewall tickets. Investigate reporting anomalies and compliance gaps. Must-Have Requirements

10 years of Networking experience Strong understanding of security governance, risk management, and security control frameworks. Experience conducting security assessments and evaluating technology risk. Strong knowledge of network security technologies, architectures, and enterprise security principles. Strong knowledge of enterprise network infrastructure, including routers, switches, load balancers, proxies, DNS, and related network technologies. Ability to understand network traffic flows and assess security implications across complex enterprise environments Required Skills

Strong networking fundamentals and engineering/build background Practical understanding of network security and traffic flows Knowledge of high-risk ports and why certain ports should be blocked Firewall security and rule assessment experience Router, switch, VLAN, and ACL knowledge Network vulnerability and security gap identification URL filtering and web security controls Strong technical writing and

process documentation

skills Experience preparing Methods of Procedure (MOPs) Must be comfortable working with established corporate documentation templates Must document security controls, approval steps, risk assessments, and implementation processes Documentation must be suitable for regulatory and internal audit reviews Strong communication skills (written and verbal) Strong documentation skills (writing processes) Strong collaboration skills, team player mindset Preferred Skills

Industry certifications such as CISSP, CCSP, CISM Knowledge of Zero Trust architectures, secure access technologies, and network segmentation principles Automation skills Automation experience using Ansible and Tufin Bitbucket experience Automating firewall request reviews, approvals, or governance reporting Excel, macros, and reporting/rec