Consulting Director, IT Security Technical Advisor

CNA; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

CNA seeks an experienced Information Security professional to lead security adoption and implementation initiatives. Responsibilities include developing security standards, managing risks, and ensuring compliance across IT projects. This role requires a strong background in information security, with significant experience in multiple platforms and strong leadership skills.

Qualifications

• Typically a minimum of seven years in security aspects across multiple platforms.
• Experience in IT consulting or account management preferred.
• Understanding of security policy construction required.

Responsibilities

• Drive Information Security adoption and delivery within CNA Canada.
• Develop security standards and guidelines for diverse systems.
• Lead initiatives to ensure security needs are represented.

Skills

Analytical skills

Problem solving

Interpersonal skills

Strong communication

Knowledge of cloud platforms

Education

Bachelor's degree in Computer Science

CISSP certification

CCSP certification

PMP certification

Job description

Performs a combination of duties in accordance with departmental guidelines :

• Drive Information Security adoption and delivery within the CNA Canada portfolio through partnership with IT management and Information Security leaders.
• Develop and implements security standards, procedures and guidelines for multiple platforms and diverse systems environments with respect to CNA Canada’s IT needs (e.g., firm-wide, distributed, client server systems, and e-applications).
• Develops communications and related campaigns for information security awareness among all CNA Canada IT leaders and staff. Act as the primary liaison between Information Security and CNA Canada leaders with respect to transformation initiatives and IT projects.
• Lead Information Security delivery efforts to ensure CNA Canada needs and requirements are represented in all Information Security initiatives and that all Information Security initiatives will be effectively deployed within the CNA Canada IT environment.
• Operates with a deep knowledge and foundational understanding of the CNA Canada IT environment, technical architectures, application stacks and all related systems.
• Review the development, testing and implementation of security plans, products and control techniques with respect to the CNA Canada environment.
• Brief Chief Information Security Officer on CNA Canada IT portfolio projects, security efforts and related initiatives. Assist in information security investigations as needed and recommend appropriate corrective actions for information security incidents.
• Identifies emergent vulnerabilities and evaluate associated risks and threats endemic to IT projects throughout CNA Canada’s applications and technologies. Develop security threat assessments and security stories for application development and project teams.
• Evaluates and advises on appropriate security methods and control techniques such as firewalls, intrusion detection software, data encryption, data backup and recovery.
• Understand cloud security solutions and review incoming cloud projects to provide guidance to technical cloud teams deploying on Google Cloud Platform and Microsoft Azure.

May perform additional duties as assigned.

In all responsibilities and interactions, all employees are expected to adopt and align with CNA’s Winning Behaviours – to be externally focused, accountable, collaborative, innovative, inclusive and continuously learning.

Skills, Knowledge & Abilities

• Ability to influence change in corporate understanding and adoption of information security concepts.
• Experience with solution architecting / engineering within the information security space.
• Familiar with security tooling, controls and / or architecting in a variety of roles.
• Strong analytical and problem solving skills. Robust communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal / external business partners / clients.
• Solid understanding of security policy construction and publication.
• Working knowledge of any of the common cloud platforms (AWS, Azure and GCP)
• Ability to manage various technical projects to completion.
• Willingness to learn new technologies, tools, applications and systems both supporting the information security organization and CNA’s operations.

Education & Experience

• Bachelor's degree in Computer Science, or related discipline, or equivalent work experience.
• Typically a minimum of seven years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination.
• Experience in consulting or technical account management preferred.
• Preferred insurance or financial services industry knowledge.
• CISSP, CCSP, PMP, Network+ and / or Security+.

At CNA, we are committed to providing equal employment opportunities to all employees and applicants. It is our policy to provide equal employment opportunities to employees and applicants based on job-related qualifications and ability to perform a job. If you require an accommodation during the hiring process or upon hire, please inform Human Resources. If a selected applicant requests accommodation during the recruitment process, CNA will consult with the applicant in order to provide suitable accommodation that takes into account the applicant’s accessibility needs.