Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
About the role
- Head of Security & Compliance at Masabi overseeing security and compliance for public transport systems globally. Leading initiatives to strengthen compliance and security practices.
Responsibilities
- Take ownership of security and compliance across Masabi, creating clarity on priorities and ways of working
- Build a clear view of our current security posture and define a practical path to strengthen it over time
- Define security and compliance requirements and work closely with Engineering and IT teams to ensure they are implemented effectively
- Maintain existing compliance across PCI DSS, ISO27001, SOC2 and Cyber Essentials, and lead new compliance initiatives across additional standards such as ISO 27017 and ISO 27018
- Manage audits end to end, from preparation through to delivery and follow-up actions
- Work closely with Engineering and Product teams to embed security practices in a way that supports delivery
- Maintain a clear and actionable view of risk, helping the business prioritise what matters most
- Build a more scalable approach to customer assurance, including clearer processes and reusable materials for customer and audit requests
- Help guide decisions on which compliance standards we take on as we grow
- Lead and support a small team, creating focus, trust and shared direction
Requirements
- You’ve worked in security and compliance within a payments, fintech or PCI-regulated environment
- You have strong, hands-on experience with PCI DSS, ISO27001 and SOC2, including preparing for and delivering audits
- You’ve personally owned and delivered compliance programmes, not just overseen them
- You understand how security and compliance connect, and how to make them work in practice across a business
- You’ve operated in a growing or scaling company, where you’ve had to bring structure and prioritise effectively
- You’re comfortable driving work across teams without direct authority, and following through to completion
- You bring sound judgement when balancing risk, delivery and commercial needs
- You’ve supported or led a small team and know how to create clarity and accountability
- You communicate clearly with both technical and non-technical audiences, helping people understand what matters and what action is needed
Benefits
- 20 days of vacation per year (in addition to public holidays). On top of this, our office is shut every year between Christmas and New Year, totaling a whopping 28+ days of vacation
- Private Healthcare and Life Insurance
- Menopause support
- Choice of a workstation
- Training allowance of up to CAD$1300 per year
- CAD$325 per year to spend on your home office
- $50 CAD per month for team building activities
- Ability to work for up to 3 months per year from any country in the world
- Enhanced family leave
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.
Security Advisor Specialist protecting Intact’s insurance business through enterprise CDN, WAF, and API security. Automating controls with Terraform and CI/CD while investigating threats and tuning defenses.
Senior IAM Cyber Security Specialist onboarding applications to RBC’s identity and access management solutions. Ensuring security compliance, risk reporting, and onboarding testing for a global bank.
Security advisor strengthening Desjardins's security posture across risk, compliance, data protection, and fraud prevention. Advising partners and coordinating security initiatives for the financial cooperative Desjardins.
Senior software developer evolving Genetec’s internal cloud security platform. Building event - driven detections and operating secure production systems with DevOps automation.