Current jobs related to Expert, Information Security Third Party Risk Management - Don Mills South Flemingdon Park - Canadian National Railway

  • Conseiller(ère) Aux Ventes

    4 months ago

    Greenfield Park, Canada Party Expert Full time

    _Le genre masculin est utilisé sans aucune discrimination et dans le seul but d'alléger le texte._ Vous aimeriez travailler dans un environnement des plus excitants! Vous êtes passionné et inspirant? Party Expert est une entreprise Québécoise, reconnue pour sa vaste sélection de produits reliés aux fêtes et célébrations de tous genres. Chef de...

  • Assistant(E) Gérant(E) Du Magasin

    4 months ago

    Greenfield Park, Canada Party Expert Full time

    _Le genre masculin est utilisé sans aucune discrimination et dans le seul but d'alléger le texte._ Vous aimeriez travailler dans un environnement des plus excitants! Vous êtes passionné et inspirant? Party Expert est une entreprise Québécoise, reconnue pour sa vaste sélection de produits reliés aux fêtes et célébrations de tous genres. Chef de...

  • Assistant(E) Gérant(E) Du Magasin

    1 month ago

    Greenfield Park, Canada Party Expert Full time

    _Le genre masculin est utilisé sans aucune discrimination et dans le seul but d'alléger le texte._ Vous aimeriez travailler dans un environnement des plus excitants! Vous êtes passionné et inspirant? Party Expert est une entreprise Québécoise, reconnue pour sa vaste sélection de produits reliés aux fêtes et célébrations de tous genres. Chef de...

  • Portfolio Management Advisor

    1 month ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Establishing a Career with IG Wealth Management At IG Wealth Management, our advisors harness their entrepreneurial spirit and determination to cultivate a successful practice while prioritizing the interconnected financial needs of our clients. Advisors benefit from personalized mentorship, comprehensive practice support tools, and access to industry...

  • Technical Specialist Property

    4 weeks ago

    Don Mills South (Flemingdon Park), Canada The Travelers Companies, Inc. Full time

    Who Are We?Solid reputation, passionate people and endless opportunities. That's Travelers. Our superior financial strength and consistent record of strong operating returns mean security for our customers - and opportunities for our employees. You will find Travelers to be full of energy and a workplace in which you truly can make a difference.Target...

  • Mobile Scheduling Coordinator

    4 days ago

    Don Mills, Ontario, Canada Bell Full time

    Job SummaryWe are seeking a highly organized and detail-oriented Mobile Scheduling Specialist to join our team at Dome Productions. As a key member of our operations team, you will be responsible for coordinating and scheduling owned mobile and uplink facilities, as well as negotiating and securing third-party cross rentals.Key ResponsibilitiesCoordinate and...

  • Mobile Scheduling Coordinator

    4 days ago

    Don Mills, Ontario, Canada Bell Full time

    Job SummaryWe are seeking a highly organized and detail-oriented Mobile Scheduling Specialist to join our team at Dome Productions. As a key member of our operations team, you will be responsible for coordinating and scheduling owned mobile and uplink facilities, as well as negotiating and securing third-party cross rentals.Key ResponsibilitiesCoordinate and...

  • Mobile Scheduling Coordinator

    5 days ago

    Don Mills, Ontario, Canada Bell Full time

    Job SummaryWe are seeking a highly organized and detail-oriented Mobile Scheduling Specialist to join our team at Dome Productions. As a key member of our operations team, you will be responsible for coordinating and scheduling owned mobile and uplink facilities, as well as negotiating and securing third-party cross rentals.Key ResponsibilitiesCoordinate and...

  • Client Wealth Strategist

    1 month ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Establishing a Career with IG Wealth Management At IG Wealth Management, our advisors harness their entrepreneurial mindset and determination to cultivate a successful practice while prioritizing the interconnected financial needs of our clients. Our advisors benefit from personalized mentorship, comprehensive practice support tools, and access to industry...

  • Wealth Management Consultant

    1 month ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Establishing a Career at IG Wealth Management At IG Wealth Management, our advisors harness their entrepreneurial spirit and determination to cultivate a thriving practice while prioritizing the interconnected financial needs of our clients. Our advisors benefit from personalized mentorship, comprehensive practice support tools, and access to industry...

  • Specialist, Configuration Management

    4 months ago

    Don Mills, Canada L3Harris Technologies Full time

    Configuration Management Specialist L3HARRIS WESCAM Division Toronto, Ontario About L3HARRIS WESCAM As a subsidiary of L3Harris Technologies and within the Integrated Mission Systems Segment, the WESCAM division develops the most advanced optical sensor and targeting systems for global defense and military sectors, National Security, Search & Rescue and...

  • Block Clerk II

    4 weeks ago

    Don Mills South (Flemingdon Park), Canada TORO ADESA Toronto Full time

    Who We Are:At OPENLANE we make wholesale easy so our customers can be more successful. We're a technology company building the world's most advanced-and uncomplicated-digital marketplace for usedvehicles. We're a data company helping customers buy and sell smarter with clear, actionable insights they can understandand use. And we're an innovation company...

  • Customer Support Specialist

    1 month ago

    Don Mills South (Flemingdon Park), Canada Gatestone & Co. Inc Full time

    About GatestoneFounded in 1926, Gatestone has established itself as a leader in delivering outstanding outsourced Customer Contact Center and Business Process Outsourcing (BPO) services to prestigious organizations, including those listed among the Fortune 500. We are proud to be recognized by Forbes as one of Canada's top employers for 2024. Our...

  • Financial Consultant

    7 days ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Successful Practice at IG Wealth ManagementAs a Financial Advisor at IG Wealth Management, you will leverage your entrepreneurial spirit and drive to grow a business while prioritizing clients' interconnected financial needs. Our advisors receive personalized mentorship, practice support tools, and access to experts to help clients achieve...

  • Financial Consultant

    1 week ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Successful Practice at IG Wealth ManagementAs a Financial Advisor at IG Wealth Management, you will leverage your entrepreneurial spirit and drive to grow a business while prioritizing clients' interconnected financial needs. Our advisors receive personalized mentorship, practice support tools, and access to experts to help clients achieve...

  • Financial Services Professional

    2 weeks ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Thriving Practice at IG Wealth ManagementAt IG Wealth Management, we empower our advisors to grow a successful business while prioritizing our clients' interconnected financial needs. Our advisors receive personalized mentorship, practice support tools, and access to industry experts to help clients achieve financial well-being for themselves and...

  • Financial Services Professional

    2 weeks ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Thriving Practice at IG Wealth ManagementAt IG Wealth Management, we empower our advisors to grow a successful business while prioritizing our clients' interconnected financial needs. Our advisors receive personalized mentorship, practice support tools, and access to industry experts to help clients achieve financial well-being for themselves and...

  • Financial Advisor

    3 months ago

    Sherwood Park, Canada IG Wealth Management Full time

    Building a practice at IG Wealth Management IG Wealth Management advisors rely on their entrepreneurial spirit and drive to grow a business while keeping our clients interconnected financial needs at the core of everything they do. Advisors receive one-on-one mentorship, practice support tools and access to experts that help our clients achieve...

  • Financial Consultant

    15 hours ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Successful Practice at IG Wealth ManagementAt IG Wealth Management, we're looking for entrepreneurial individuals who can grow a business while prioritizing our clients' interconnected financial needs.Our advisors receive personalized mentorship, practice support tools, and access to experts to help clients achieve financial well-being for...

  • Financial Consultant

    12 hours ago

    Sherwood Park, Alberta, Canada IG Wealth Management Full time

    Building a Successful Practice at IG Wealth ManagementAt IG Wealth Management, we're looking for entrepreneurial individuals who can grow a business while prioritizing our clients' interconnected financial needs.Our advisors receive personalized mentorship, practice support tools, and access to experts to help clients achieve financial well-being for...

Expert, Information Security Third Party Risk Management

3 months ago

Don Mills South Flemingdon Park, Canada Canadian National Railway Full time
At CN, we work together to move our company-and North America-forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks. You will be able to develop your skills and career in our close-knit, safety-focused culture working together as ONE TEAM. The careers we offer are meaningful because the work we do matters. Join us
Job Summary
The purpose of this role is to maintain and grow an industry leading Information Security Third Party Risk Management (TPRM) practice to support the mission of empowering the business by building resilience against evolving cyber threats. This will include program governance, policy and guideline development, risk assessments, information protection contract clauses, continuous monitoring, compliance assessments, regulatory compliance assurance, due diligence and selection processes, technology and tool development and maintenance, cloud transformation, and stakeholder awareness and communication.
This role oversees the development and operations of the third-party security function within CN's Chief Information Security Office (CISO). It interfaces with a variety of senior stakeholders within I&T and the business in order to develop and influence the required changes for the management of third-party security risks originating from suppliers, customers, subsidiaries, and cloud-based technology tools and platforms, to a level that is manageable and aligned to CN's business risk tolerance. They are a senior resource with an understanding of how to apply deep technical knowledge while coordinating activities between multiple internal groups and third-party organizations to enable business objectives by ultimately managing risk to a level that is acceptable for the organization.
Main Responsibilities
Practice Development and Planning
• Align third party information security with organizational business goals
• Oversee a broad range of Information Security activities related to third party suppliers, solutions, subsidiaries and customers, including large outsourcing initiatives (e.g. I&T infrastructure and help desk managed services)
• Develop and maintain a set of policies & guidelines specific to protecting CN's assets where they are accessed or managed by third parties
• Create and maintain a TPRM practice, including a framework for evaluating and managing third party risk
• Ensure information security requirements are integrated with procurement processes
• Proactively monitor emerging trends and evolving threat landscapes to identify innovative ideas that would position CN to be an industry leader
Operation and Execution
• Identify, assess, and report critical and high risks involving third parties
• Manage and escalate incidents such as a material control weaknesses and security breaches and working with the Security Operations Centre (SOC) as required
• Report critical non-compliances and high risks to the appropriate business stakeholders
• Write and negotiate contractual terms internally and with external partners and suppliers to ensure CN's business goals are met relating to information security
• Ensure CN's Information Security policies & guidelines related to third parties meet regulatory requirements for security and privacy protection (e.g. TSA directives, CCSPA requirements, privacy bills, etc.)
• Enhance existing processes through innovation and continuous improvement
• Subject Matter Expertise
• Drive action across various internal and external stakeholders by communicating technical and process requirements
• Provide leadership and expertise on matters relating to third party information security to various internal stakeholders, including I&T, Procurement, Internal Audit, Legal, Facilities Management, and Insurance teams
• Discover and bring to light innovation opportunities and influence other groups to support and implement changes that will generate business value
• Mentor resources, provide knowledge transfer, and delegate support tasks
Organizational Impact
Decision Making & Impacts
The Expert, Information Security Third Party Risk Management implements the governance, risk, and compliance capabilities required to bring Information Security risks involving third party suppliers, solutions, subsidiaries, and customers to acceptable levels required to enable to enable the organization to achieve its business objectives.
To achieve this they conduct strategic planning, create and maintain processes and tools, and coordinate activities between various internal teams and external organizations.
Level of Interaction/Influence
The Expert, Information Security Third Party Risk Management influences and drives action among various areas within the organization, including Legal, Procurement, Internal Audit, Facilities Management, Insurance, and different areas within I&T. They also drive action within external subsidiaries, suppliers, and customers.
This would include incorporating Information Security requirements into procurement processes, ensuring I&T asset inventory systems include relevant data, influencing behaviours of Solution Architects to identify and mitigate high risks, negotiating contractual terms with Legal and Facilities Management, providing expertise to Internal Audit and Insurance teams, issuing Cybersecurity Policies and conducting compliance monitoring activities on subsidiaries, influencing external agencies and service providers to better align to CN's needs, working with customers on Information Security requirements and posture, and many other interactions with various internal and external stakeholders.
Requirements
Education/Certification/Designation
• B.S. degree in Computer Science, Information Systems or other related field, or equivalent work experience
Skills/Knowledge
• Broad skillset and depth of expertise in technical areas of information security and how they impact business objectives
• Demonstrated capability to understand the security implications of complex business operations and how they are linked to technological solutions that provide practical risk mitigation and business enablement
• Good knowledge of existing and emerging technologies and architecture principles involved in complex information and technology systems
• Significant and proven experience in applying a structured approach to problem resolution
• Sufficient knowledge on matters relating to third party information security
• Excellent written and verbal communication skills as well as business acumen
• Detail-oriented self-starter with a high level of commitment and personal motivation
• Knack for prioritizing tasks and working in a fast-paced environment
• Able to learn quickly to keep pace with rapidly evolving technology and cybersecurity environments
• Able to lead initiatives to completion with minimal management oversight
• Able to communicate in a clear, concise manner
• Experience with contract and supplier negotiations
• Able to multi-task and work effectively across multiple organizational units
• Security assessment experience
• Strong understanding of security frameworks including NIST CSF, NIST SP 800-53, and ISO-270001
• Strong understanding of regulatory requirements including SOX, PIPEDA, HIPAA and TSA
• Deep understanding of security threat landscape
• Ability to translate complex technical topics into simple business language for business audiences
• Experience developing and delivering executive level presentations
• Relationship management skills
• Experience dealing with third parties
• Strong process orientation
• Recognized security certifications (e.g. CISSP, CISM, CRISC, CISA)
Specific skills per speciality
Experience
• Minimum 5 years experience in Information Security
• 10+ years of I&T experience or 5+ years in a similar role
• 10-15 years overall work experience
• Assets
• Knowledge of railway systems
• Good understanding of Cloud Computing
• Understanding of both IT and OT systems
Working Conditions
Occasional business travel (Canada and US) in accordance with CN policy
This position is posted as a grade LEVEL 7. For internal candidates, note that the grade level of the position may adjust based on the employee's experience.
About CN
CN is a world-class transportation leader and trade-enabler. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. As the only railroad connecting Canada's Eastern and Western coasts with the Southern tip of the U.S. through a 19,500 mile rail network, CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN is committed to programs supporting social responsibility and environmental stewardship. At CN, we work as ONE TEAM, focused on safety, sustainability and our customers, providing operational and supply chain excellence to deliver results.
For internal candidates, note that the grade level of the position will depend on the employee's experience.
. click apply for full job details