Senior Consultant leading cyber regulatory remediation for banks, broker - dealers, and insurers. Driving incident response, vulnerability, patch, and IAM workstreams to closure.
About the role
- Information Systems Security Manager securing RideCo’s cloud-based on-demand transit platform. Leading compliance, risk management, incident response, and security operations.
Responsibilities
- Design, implement, maintain and enforce security policies and protocols
- Protect RideCo’s data and IT infrastructure
- Develop and enforce comprehensive security policies and procedures aligned with business objectives and legal compliance
- Own and maintain the organizational security roadmap using NIST SP 800-53 and NIST CSF 2.0
- Lead the strategy and annual audit for SOC 2 Type 2 certification and compliance
- Lead RideCo’s Privacy Program
- Conduct threat assessments, vulnerability scanning and audits
- Develop and enforce governance policies for secure AI adoption
- Monitor network traffic, firewalls, endpoints and data systems for suspicious activity
- Review contracts, RFPs and security questionnaires
- Establish and maintain agency-based security and privacy procedures
- Identify, contain and remediate security breaches or attempts
- Oversee security awareness programs and specialized training against AI-generated threats
- Oversee deployment of encryption tools, antivirus software and access controls
- Assess third-party vendor security protocols
Requirements
- Bachelor’s degree in Cybersecurity, IT or related field
- 5+ years of related experience
- Certified Information Systems Security Professional (CISSP)
- Proficient understanding of network infrastructure, firewalls and compliance frameworks
- Experience coordinating with IT teams
- Knowledge of NIST SP 800-53 and NIST CSF 2.0
- Experience with SOC 2 Type 2 certification and compliance
- Knowledge of GDPR and HIPAA
- Experience with vulnerability scanning, threat assessments, audits and incident response
- Experience with security technologies including encryption tools, antivirus software and access controls
- Experience assessing third-party vendor security protocols
Benefits
- Performance-based bonus
- Flex-time work schedules
- Vacation time
- Bi-weekly catered lunches
- Social events
- Casual dress code
- Medical benefits
- Dental benefits
- Prescription coverage
- Life/health spending accounts
- Continuous education
- Certification maintenance
- Conference attendance
- Complimentary rides to and from work in Waterloo Region
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Cyber Security Specialist protecting Scarborough Health Network hospitals and healthcare infrastructure. Managing security systems, assessments, vulnerabilities, incidents, and compliance across the Central East Region.
Team Lead protecting Wealthsimple clients through fintech risk, fraud, and security operations. Managing CX specialists, threat response, compliance workflows, and performance delivery.
Product Security Engineer building secure CIAM authentication services for Affirm’s pay - over - time platform. Developing Python/Kotlin APIs, MFA, identity integrations, and reliable account - access experiences.
Staff Security Software Engineer securing Keycard’s agent identity and access infrastructure. Threat - modeling token exchange, delegation, cloud controls, and AI - agent authorization.
Senior Security Consultant leading integrated security system design and project delivery. Advising Canadian commercial, institutional, and government building clients.
Global cybersecurity leader defining strategy, risk governance, and security operations for Innocap’s managed alternative - investment platform. Leading worldwide teams and protecting regulated financial technology.
Senior AI security specialist strengthening governance, architecture, and risk controls at TD, a global financial institution. Advising executives and technology teams on secure AI adoption.
Principal Product Security Researcher shaping threat research and security strategy for Chainguard’s hardened open - source software. Influencing product roadmaps, mitigating supply - chain risks, and advancing industry security practices.
Principal Product Security Researcher leading threat research and product security strategy. Shaping secure, production - ready open - source software builds for Chainguard customers.