Information Security Officer at Vecima Networks responsible for ISMS maintenance and ISO compliance. Supporting governance activities, supplier security, and incident response during maternity leave coverage.
Responsibilities
Maintain and improve Vecima’s Information Security Management System (ISMS)
Support ISO/IEC 27001:2022 governance activities, including risk assessments, risk treatment tracking, control documentation, evidence collection, corrective actions, audit readiness, and follow-up on gaps
Coordinate periodic management reviews, policy and standards reviews, control updates, and related governance activities to support continuous improvement of the information security program
Maintain security metrics, dashboards, risk registers, and status reporting for leadership
Support and coordinate supplier security reviews, including due diligence, security questionnaires, risk assessments, remediation follow-up, and ongoing monitoring of higher-risk suppliers
Work with Supply Chain, Legal, internal business owners, and other stakeholders to ensure information security requirements are incorporated into supplier onboarding, contracting, monitoring, and offboarding processes
Use GRC, ISMS, and TPRM tools, including Optro (formerly AuditBoard), to manage security documentation, assessments, workflows, and evidence as applicable
Partner with internal stakeholders to define security requirements, assign action owners, track remediation, and escalate material security risks or unresolved issues as needed
Communicate security obligations, risks, and progress clearly to technical and non-technical audiences
Contribute to the development, implementation, and continuous improvement of the organization’s information security strategy aligned with business objectives
Stay current with emerging threats, security trends, and relevant technologies to help maintain an effective and practical security posture
Promote a strong culture of security awareness across the organization and support the delivery of effective security education and awareness activities
Support maintenance of the incident response plan and coordinate investigations, documentation, corrective actions, and follow-up activities related to security incidents
Requirements
Post-secondary education in Information Technology, Cybersecurity, Computer Science, or a related discipline, or an equivalent combination of education and experience
5+ years of relevant experience in information security, IT risk, compliance, audit, governance, or a related field
Strong practical experience with ISO/IEC 27001:2022 and with operating and maintaining an ISMS
Experience developing, maintaining, and improving information security policies, standards, procedures, and governance documentation
Experience performing or coordinating security risk assessments, audit support, remediation tracking, and evidence collection
Knowledge of cloud and SaaS environments and common security controls
Strong written and verbal communication skills, with the ability to work effectively with technical and non-technical stakeholders
Information Security Officer specializing in application and product security for the Government of Alberta. Safeguarding digital services through collaboration and compliance with cybersecurity policies.
Senior Security Engineer focusing on Application Security and Vulnerability Management for cybersecurity firm. Collaborating with teams on security operations, incident response, and compliance initiatives.
Security Analyst I supporting security operations and security engineering initiatives at Varicent. Collaborating across teams to strengthen security posture through operational excellence and risk - based decision - making.
Expert in application cybersecurity analyzing web components and supporting secure development practices within a dynamic team. Collaborate on cloud application security based in Quebec, Canada.