Senior Security Specialist protecting BDO Canada’s enterprise systems through threat detection, incident response, and vulnerability management. Supporting security operations across blended office, client - site, and virtual environments.
About the role
- Lead security for Duetto's hotel revenue management platform across AWS, DevSecOps, compliance, incident response, and enterprise customer trust. Own the security posture for a global hospitality technology business.
Responsibilities
- Own Duetto's overall security posture across cloud, product, infrastructure, IT, compliance, and customer assurance
- Lead cloud security across AWS, including IAM, logging, network security, encryption, Kubernetes and container security, backup posture, and configuration risk
- Partner with Engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and production operations
- Lead vulnerability management end-to-end, including alert triage, posture management, prioritisation, remediation tracking, and reporting
- Serve as primary security incident leader for major incidents, investigations, escalations, root cause analysis, and executive reporting
- Lead incident response and disaster recovery tabletop exercises, backup testing coordination, and business continuity plan security reviews
- Own SOC 2 Type 2, ISO 27001, and ISO 42001 readiness and NIST CSF maturity tracking
- Maintain the security risk register, risk treatment plans, security roadmap, and security debt backlog
- Partner with Legal and Privacy on DPA, DTIA, DPF, GDPR, SCCs, and subprocessor management
- Own customer-facing security assurance, including strategic RFPs, security questionnaires, enterprise security reviews, Trust page content, and sales support calls
- Provide security guidance to IT on MDM, endpoint security, AV/EDR coverage, access reviews, and SaaS security controls
- Report security posture, risks, incidents, remediation status, and audit readiness to executive leadership
Requirements
- 8+ years of experience in security, cloud security, DevSecOps, security engineering, infrastructure security, or security operations
- Strong hands-on knowledge of AWS, including cloud architecture risk review
- Experience securing DevOps environments, CI/CD pipelines, Kubernetes and container environments, cloud IAM, logging, secrets management, and infrastructure-as-code
- Experience with SOC 2 Type 2 audits and familiarity with ISO 27001, NIST CSF, and GDPR security requirements
- Experience with vulnerability management, penetration testing programmes, and incident response
- Ability to translate technical risks into business-level priorities and communicate with Engineering, Legal, Sales, auditors, customers, and executives
- Hands-on experience with Snyk, Lacework, Vanta, MDM platforms, endpoint protection, and cloud posture tools
- Prior ownership of SOC 2 Type 2 audit readiness end-to-end
- ISO 27001 implementation or certification support experience
- Experience supporting enterprise SaaS security reviews and customer trust programmes
- Familiarity with ISO 42001 or AI governance frameworks
Benefits
- Equal opportunity employer committed to diversity and an inclusive environment
- Remote work (US/Canada)
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.
FTTH security expert auditing PON, CPE, and telecom infrastructure for P1 Security. Producing penetration - test reports and remediation guidance for critical network security.
Senior CyberArk engineer strengthening Manulife’s enterprise privileged - access security platform. Automating PAM operations, integrations, resilience, and production support.
Security Engineer building IAM, PAM, and IGA capabilities for Marqeta’s cloud - based embedded finance platform. Automating access controls across AWS, SaaS, DevOps, and AI/ML systems.
Senior Security Engineer securing gaiia’s cloud - based telecom operating system. Protecting applications, infrastructure, customer data, and compliance programs across a serverless TypeScript platform.
Cloud security leader supporting ServiceNow’s AI - native SaaS security and Canadian enterprise customers. Leading customer security engagements, incident investigations, and cloud security improvements.
Senior Consultant leading cyber regulatory remediation for banks, broker - dealers, and insurers. Driving incident response, vulnerability, patch, and IAM workstreams to closure.
Cyber Security Specialist protecting Scarborough Health Network hospitals and healthcare infrastructure. Managing security systems, assessments, vulnerabilities, incidents, and compliance across the Central East Region.