Senior Information Security Specialist

Role overview

Work arrangement

• Hybrid arrangement with 1–3 days per week onsite and remaining days remote.

What you’ll do

• Review requirements documentation, architecture diagrams, and solution designs to assess feasibility and security risk.
• Recommend action plans and coordinate risks under control and deficiency management policies.
• Complete project security assessments before production go-live.
• Present risk documentation and recommendations to executive management.
• Participate in security assessment process implementation and respond to business-unit queries.
• Conduct threat-risk and information security assessments, manage deviations, and coordinate penetration testing and reporting.
• Conduct threat models, set priorities, and recommend controls to reduce risks.
• Collaborate with senior leaders and business teams on practical, risk-based security decisions.
• Partner with subsidiary and affiliate stakeholders on control assessments and integration plans.
• Work with first-line centers of excellence on control enhancements and new controls.

Qualifications and experience

• Experience in information security, threat-risk assessments, vulnerability and penetration testing, and application security development projects.
• Familiarity with the banking ecosystem and cloud computing technologies is an asset.
• Exposure to Agile development processes is an asset.
• CISSP, Offensive Security/CEH, CASE-E-Council, or CSSLP certifications are assets but not mandatory.
• Work with cybersecurity control owners, architects, and engineers to develop integration plans and deliverables.