Security Lead responsible for driving security function and strategy at Newton, a crypto trading platform. Ensuring CIRO and SOC 2 alignment while embedding security practices across all systems and applications.
Responsibilities
Own and drive our security function end-to-end, combining strategic direction with hands-on technical authority.
Review, challenge, and strengthen our systems.
Act as the security authority within engineering.
Define guardrails and drive remediation when risks arise.
Build the structure and standards needed as we scale.
Own the company wide security strategy and architecture.
Ensure CIRO and SOC 2 alignment.
Embed strong security practices across infrastructure, applications, and internal systems.
Requirements
Understand IAM and least privilege principles
Understand logging, monitoring, and alerting architecture
Be comfortable reviewing infrastructure-as-code (Pulumi)
Reason confidently about security architecture across infrastructure and application layers
Be willing to deepen your technical capabilities where needed
Have hands-on experience with SOC 2 or comparable audit processes
Have experience in a regulated environment (fintech, financial services, or similar), ideally CIRO-regulated
Have a strong understanding of risk management frameworks
Influence and challenge cloud architecture decisions when needed
Experience with AI tooling governance or AI-related security considerations is a strong plus
Benefits
At Newton, we celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply. We are committed to providing reasonable accommodations and will work with you to meet your needs. If you are a person with a disability and require assistance during the application process, please don’t hesitate to reach out!
Hiring 2 Endpoint Security Consultants for a 6 - month hybrid contract in Toronto. Focus on endpoint security tool deployment, validation, and operationalization.
Infrastructure security specialist supporting incident management and security measures deployment in a hybrid environment at TEHORA, a multidisciplinary Quebec firm.
Security Software Engineer developing AI - powered security systems at NerdWallet. Collaborating with engineering teams to address security vulnerabilities and enhance software development practices.
Senior Technical Manager for IAM AI Compliance at RBC, balancing risk and AI innovation in finance. Collaborating across teams to enhance identity governance and compliance metrics.
Staff Cloud Security Architect leading the design and implementation of security solutions in RBC's cloud environment. Focus on Azure, Kubernetes, and AI infrastructure, ensuring compliance with regulatory standards.
Practice Leader managing TDIS risks for iA Financial Group, focusing on risk management and technology governance. Leading initiatives to enhance organizational risk practices and frameworks.
Instructor teaching online Information Security course at Wilfrid Laurier University. Providing students with knowledge on information security fundamentals and related risks.
Information Security Student role at Nasdaq Verafin gaining hands - on experience in cybersecurity. Collaborating with security analysts to investigate cloud security issues and standards compliance.
Security Consultant II responsible for delivering customer success and integrating solutions. Working with global customers to enhance security services at Akamai.