Cybersecurity Officer ensuring end-to-end cybersecurity for Growe Talents in a leadership role. Overseeing security operations, defining strategies, and managing security teams in a dynamic environment.
Responsibilities
Own end-to-end cybersecurity, information security, and IT security across the company, covering both internal security (breach attempts, internal network monitoring) and product security (product-related threats and risks);
Define, evolve, and execute the company-wide cybersecurity strategy and security roadmap aligned with business and product priorities;
Establish and enforce security policies, standards, procedures, and organization-wide security controls;
Lead security risk management, including risk assessments, risk register ownership, and mitigation planning;
Ensure compliance with regulatory and industry standards (e.g., GDPR, ISO 27001, SOC 2) and manage internal/external audits;
Oversee secure architecture across cloud infrastructure, applications, SDLC, and IAM, including review of critical architectural decisions;
Define and enforce security standards for encryption, key management;
Own security operations, including monitoring, detection, response capabilities, and incident response for critical (P0/P1) events;
Drive Application Security and DevSecOps practices (SAST, DAST, SCA, CI/CD security controls, threat modeling) in collaboration with engineering teams;
Oversee IAM, endpoint, and workforce security, including access control models, EDR strategy, device security, and joiner/mover/leaver processes;
Lead fraud prevention, vendor security, and internal/external abuse investigation processes, while managing security KPIs, reporting, budget, and team scaling;
Manage a cybersecurity team, including Cloud Security, SOC, Application Security / DevSecOps, Endpoint Security, IAM, and Information Security functions.
Requirements
7+ years of experience in cybersecurity, or similar role;
Experience in a leadership role;
Strong expertise in cloud security (AWS, GCP, or Azure);
Solid understanding of application security and secure SDLC practices;
Hands-on experience with SIEM, EDR, and incident response processes;
Deep knowledge of identity and access management models (RBAC, ABAC, least privilege);
Experience working with compliance frameworks such as ISO 27001, SOC 2, and GDPR;
Proven track record of building and scaling security programs in growing organizations;
English - upper-intermediate or higher (able to communicate in technical discussions).
Benefits
Health & Wellness Focus;
Global Medical Coverage;
Growth Opportunities;
Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.