Security Advisor Specialist responsible for identifying and mitigating information security risks. Providing guidance on security practices and collaborating with development teams to ensure compliance.
Responsibilities
Identify security events that need to be monitored.
Advise and support our team in all stages of development.
Ensure key risk metrics/indicators are developed and implemented to systematically measure and report information-related risks.
Identify and classify the risks then propose risk mitigation or remediation.
Analyze the risks associated with the various options available and propose a security solution to the operational issue that offers a fair balance between potential losses and the cost of the solution.
Identify gaps in IT compliance control and supervise the documentation, implementation and tests for the entire IT compliance control portfolio.
Monitor the latest industry trends and, where appropriate, proactively propose the introduction of new security practises and technologies when they become profitable.
Perform or coordinate application security tests for project teams.
Interpret the results of application security tests (code scanning, application intrusions, etc.).
Inform and educate development teams with regard to the application security development standards, methods and tools.
Requirements
University degree in information security or any combination of equivalent education and experience
Minimum 8 years of relevant experience in information technology, more specifically in information technology security
Security certification would be an asset
Strong knowledge of application security principles and practices
Strong and practical knowledge of Cloud environment in terms of Security risk and tools available in AWS or other cloud environment
Experience in a DevSecOps - CI/CD environment
Good understanding of common security gaps in data and cloud applications and of operating techniques from sources such as SANS, OWASP Top 10 and Cloud Security Alliance (CSA)
Good understanding of common security gaps in data/AI applications
Team player / good collaboration skills set
Strong ethical principles and understanding of business and information security ethics
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.
No Canadian work experience required however must be eligible to work in Canada.
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Network Security Specialist securing firewalls, proxies, load balancers, and access systems for CMA CGM’s global shipping and logistics operations. Supporting cybersecurity incidents, infrastructure health, and technology projects.
RBC seeks a Staff Cloud Security Engineer to spearhead cloud security solutions, design services using automation and IaC, and drive cloud security transformation.
Join our Security Automation team to engineer and scale our SOAR platform. Design automation playbooks in Python, build integrations, and implement CI/CD.
Security Manager leading Government of Canada - compliant security programs for PCL’s defence construction projects across Canada. Advising pursuits, managing clearances, audits, incident response, and security teams.
AI founder exploring physical cybersecurity for AI - operated critical infrastructure with Forum Ventures. Building and validating a venture - backed B2B SaaS company with studio support.
Network, systems and security administrator configuring and securing computing infrastructure at the University of Toronto. Troubleshooting servers, networks, endpoints, and systems while supporting IT projects.
Product Security Engineer securing Fellow’s AI meeting assistant and software platforms. Building security tooling, remediating vulnerabilities, and enabling safe AI - assisted development.