Consulting Director, IT Security Technical Advisor

CNA Canada; Toronto; On-site; CAD 90,000 - 140,000; Full time

Job summary

An established industry player seeks a Consulting Director for IT Security to lead security initiatives and advise project teams. This role involves developing security standards, guiding cloud security solutions, and ensuring compliance with security policies. The ideal candidate will possess strong analytical skills, experience in solution architecting, and a deep understanding of information security concepts. Join a dynamic team focused on promoting a culture of collaboration and continuous learning, where your contributions will significantly impact the organization's security posture and operational success.

Qualifications

• Strong understanding of security policies and their implementation.
• Experience in consulting or technical account management preferred.

Responsibilities

• Lead information security delivery efforts for CNA Canada.
• Develop and implement security standards and procedures.
• Evaluate emerging vulnerabilities and recommend corrective actions.

Skills

Information Security Concepts

Solution Architecting

Security Tooling

Analytical Skills

Cloud Security Solutions

Project Management

Communication Skills

Interpersonal Skills

Education

Bachelor's degree in Computer Science

Minimum seven years of technical experience

Tools

AWS

Azure

Google Cloud Platform (GCP)

Job description

Consulting Director, IT Security Technical Advisor page is loaded

Consulting Director, IT Security Technical Advisor

Apply locations Toronto, ON, CAN time type Full time posted on Posted 5 Days Ago job requisition id R-5054

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

Individual contributor responsible for leading and managing numerous tactical engineering workflows, individualize security consultations for project teams and acting as the cross-domain security contact for CNA Canada. This role will act as a tactical advisor and consultant to CNA Canada project teams and IT leadership working on everything from cloud application deployments to network infrastructure overhauls. The role will also serve as the primary point of contact between the global security organization and the CNA Canada IT organization.

This role will be providing guidance on directing, evaluating, developing, implementing, communicating, operating, monitoring and maintaining information security technologies, policies and procedures.

JOB DESCRIPTION:

Essential Duties & Responsibilities

Performs a combination of duties in accordance with departmental guidelines:

• Drive Information Security adoption and delivery within the CNA Canada portfolio through partnership with IT management and Information Security leaders.
• Develop and implements security standards, procedures and guidelines for multiple platforms and diverse systems environments with respect to CNA Canada’s IT needs (e.g., firm-wide, distributed, client server systems, and e-applications).
• Develops communications and related campaigns for information security awareness among all CNA Canada IT leaders and staff. Act as the primary liaison between Information Security and CNA Canada leaders with respect to transformation initiatives and IT projects.
• Lead Information Security delivery efforts to ensure CNA Canada needs and requirements are represented in all Information Security initiatives and that all Information Security initiatives will be effectively deployed within the CNA Canada IT environment.
• Operates with a deep knowledge and foundational understanding of the CNA Canada IT environment, technical architectures, application stacks and all related systems.
• Review the development, testing and implementation of security plans, products and control techniques with respect to the CNA Canada environment.
• Brief Chief Information Security Officer on CNA Canada IT portfolio projects, security efforts and related initiatives. Assist in information security investigations as needed and recommend appropriate corrective actions for information security incidents.
• Identifies emergent vulnerabilities and evaluate associated risks and threats endemic to IT projects throughout CNA Canada’s applications and technologies. Develop security threat assessments and security stories for application development and project teams.
• Evaluates and advises on appropriate security methods and control techniques such as firewalls, intrusion detection software, data encryption, data backup and recovery.
• Understand cloud security solutions and review incoming cloud projects to provide guidance to technical cloud teams deploying on Google Cloud Platform and Microsoft Azure.

May perform additional duties as assigned.

In all responsibilities and interactions, all employees are expected to adopt and align with CNA’s Winning Behaviours – to be externally focused, accountable, collaborative, innovative, inclusive and continuously learning.

Skills, Knowledge & Abilities

• Ability to influence change in corporate understanding and adoption of information security concepts.
• Experience with solution architecting/engineering within the information security space.
• Familiar with security tooling, controls and/or architecting in a variety of roles.
• Strong analytical and problem solving skills. Robust communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients.
• Solid understanding of security policy construction and publication.
• Working knowledge of any of the common cloud platforms (AWS, Azure and GCP)
• Ability to manage various technical projects to completion.
• Willingness to learn new technologies, tools, applications and systems both supporting the information security organization and CNA’s operations.

Education & Experience

• Bachelor's degree in Computer Science, or related discipline, or equivalent work experience.
• Typically a minimum of seven years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination.

• Experience in consulting or technical account management preferred.
• Preferred insurance or financial services industry knowledge.
• CISSP, CCSP, PMP, Network+ and/or Security+.

At CNA, we are committed to providing equal employment opportunities to all employees and applicants. It is our policy to provide equal employment opportunities to employees and applicants based on job-related qualifications and ability to perform a job. If you require an accommodation during the hiring process or upon hire, please inform Human Resources. If a selected applicant requests accommodation during the recruitment process, CNA will consult with the applicant in order to provide suitable accommodation that takes into account the applicant’s accessibility needs.

About Us

At CNA, we are focused on success, individually and collectively. We pride ourselves on promoting a culture that challenges and engages people. We strive to connect people, departments and business areas, to function as a team, and to serve our customers and communities with professionalism and respect.

Our dedication to employee engagement, continuous learning and the open exchange of ideas is the cornerstone of our business. These ideals, combined with our focus on the customer, enable us to explore new market opportunities and build on our success.

Our values, culture and financial strength are what differentiates us from other employers and make CNA the place you want to work.

Inclusion at CNA

At CNA, we are committed to advancing a culture of inclusion – one that attracts talent from all walks of life, fosters respect and collaboration, and enables all of our colleagues to do their best work.

Corporate Social Responsibility

At CNA, we have a long standing commitment to the diverse communities in which we live and work. We actively make a difference for the greater good through partnerships, sustainability, initiatives, and working together for a better tomorrow. Corporate Social Responsibility is not one person, or one department, it's the entire enterprise coming together to make the world a better place.