Security Engineer at Zensurance supporting information security management and collaborating with IT teams. Focus on policy compliance, risk management, and employee training in a leading InsurTech.
Responsibilities
Support and maintain the company-wide information security program, including policies, standards, and guidelines.
Facilitate IT risk assessments with business units and help define acceptable levels of residual risk.
Monitor the external threat environment and advise stakeholders on emerging risks.
Manage day-to-day threat and vulnerability management, including detection, response, and remediation.
Coordinate incident management and support disaster recovery and business continuity planning.
Liaise with engineering, IT, and enterprise architecture teams to embed security into system design and selection.
Produce regular reporting and metrics on program effectiveness for leadership and stakeholders.
Oversee security testing procedures and manage remediation of identified risks.
Ensure audit trails and system logs comply with policy and audit requirements.
Lead security awareness training across the organization.
Requirements
5+ years of experience in Information Security
Hands-on experience with information security frameworks: CIS Controls v8, NIST, ISO 27001, SOC 2, PIPEDA, or PCI
Experience writing cybersecurity policies and conducting security gap analyses
Experience translating business stakeholder needs into technical security requirements
Experience with cloud security controls (AWS or equivalent)
Familiarity with security platforms such as CrowdStrike and Mimecast
Experience working alongside legal, audit, and compliance teams
Strong written and verbal communication skills — able to engage technical and non-technical audiences
University degree or college diploma in Information Security, Cybersecurity, or a related field (or equivalent experience)
Benefits
Remote-first setup for added flexibility
Home office allowance to create a comfortable workspace
Top-tier tech: "Office in a box" with all necessary tech equipment
Half days before public holidays: Enjoy half days before long weekends
Flexible health and dental plans for families, including mental health support
Health & personal spending accounts to invest in wellness your way
Parental leave top-up, because family comes first
Education assistance reimbursement for courses, conferences, books, and memberships
Opportunities to learn from industry experts and grow your career
Weekly Friday huddles to share updates and connect across teams
Virtual & in-person team-building events to strengthen our culture
Information Security Advisor conducting cyber - risk assessments and contract reviews for Sun Life, a global financial - services company. Advising business and technology teams on security controls, compliance, and risk remediation.
Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.