Sr. Security Services Consultant

WHAT YOU'LL DO

QUALIFICATIONS

• 10+ years of professional experience working with the IBM i operating system.
• 10+ years of experience in information security, cybersecurity, enterprise risk, compliance, or a related discipline.
• Significant experience identifying and remediating security concerns discovered through formal risk assessments.
• Demonstrated experience with IT and information security risk frameworks, enterprise risk methodologies, and security risk assessment practices.
• Strong knowledge of regulatory, privacy, and security compliance requirements and their application within customer environments.
• Experience designing or assessing security architecture, infrastructure, systems, and applications.
• Hands-on experience conducting security assessments and testing, including white-box penetration testing.
• Experience supporting security or compliance initiatives involving standards and requirements such as PCI DSS, SOX, HIPAA, or similar frameworks and regulations.
• At least one relevant security, risk, audit, or governance certification, such as CRISC, CISA, CISM, CISSP, or equivalent.
• Strong consulting and communication skills, with the ability to translate complex technical and security concepts for business and technical audiences.
• Demonstrated ability to work independently, take ownership of customer engagements, and keep appropriate stakeholders informed.
• Strong project and time-management skills, including the ability to lead and coordinate multiple concurrent customer engagements.
• Proven ability to develop trusted, long-term customer relationships.
• Experience mentoring others and sharing cybersecurity knowledge and best practices.
• Ability and willingness to travel to customer sites as required.
• This position requires proficiency in English to interact, support and/or provide services to non-French speaking customers, employees and/or partners inside and/or outside the province of Quebec.
• We are an equal opportunity employer and encourage applications from candidates of all backgrounds.
• We do not require Canadian work experience; all relevant experience will be considered. This posting is for an existing vacancy.
• Expected Compensation: C$130,000 – C$150,000
• Ready to join us? Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.
• All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.

Responsibilities

• Conduct IT and information security risk assessments, identify security gaps, and provide clear, actionable recommendations for remediation.
• Design and recommend security solutions that align with customer requirements, internal security policies, and applicable regulatory or compliance obligations.
• Perform white-box penetration testing to identify vulnerabilities and security weaknesses and recommend appropriate remediation.
• Guide customers through security implementations and remediation initiatives related to requirements and frameworks such as PCI DSS, SOX, and HIPAA, as applicable.
• Assist customers in addressing findings from security assessments and audits and implementing new security technologies and controls.
• Advise customers on security architecture, operating system capabilities, configuration, and security best practices.
• Develop and implement sustainable processes and controls that help customers maintain appropriate security practices following project completion.
• Help customers implement and monitor compliance requirements, including applicable security and compliance solutions and supporting documentation.
• Communicate technical findings, risks, and recommendations effectively to both technical and business stakeholders.
• Build trusted, long-term customer relationships by providing practical guidance tailored to each customer’s environment and business needs.
• Manage multiple customer engagements and projects while maintaining clear communication regarding priorities, progress, risks, and outcomes.
• Mentor colleagues and educate customers and internal stakeholders on cybersecurity practices and emerging security considerations.
• Identify opportunities to improve consulting methodologies, assessment practices, documentation, and service delivery.
• Perform additional duties and contribute to security initiatives and projects as needed.