Cyber Commercial Support & Assurance Consultant -TELUS Health

TELUS; Toronto; Presencial; CAD 80.000 - 110.000; Jornada completa

Descripción de la vacante

A leading healthcare technology company is seeking a Cyber Commercial Support & Assurance Consultant. The role involves validating compliance with security standards, supporting sales processes, and enhancing cyber security for clients. Candidates should have extensive experience in cyber security and strong communication skills. This is a full-time position located in Toronto, Canada.

Formación

• 5 to 7 years of cyber security experience.
• Familiarity with security frameworks like ISO27001.
• Strong experience in compliance policies.

Responsabilidades

• Carry out security clause reviews.
• Respond to customer security risk assessments.
• Assess platforms against cyber security frameworks.

Conocimientos

Cyber security expertise

Technical security in IT infrastructure

Compliance policies knowledge

Strong communication skills

Interpersonal skills

Descripción del empleo

Overview

Join to apply for the Cyber Commercial Support & Assurance Consultant -TELUS Health role at TELUS

The TELUS Health CSO team is dedicated to securing TELUS Health data and systems, providing excellence in security networks and systems, and improving the cyber security posture. We manage cyber risks and provide governance, assurance and oversight to secure data. The Cyber Commercial Support team supports colleagues during the sales process and commercial negotiations. The role operates within a global team across multiple time zones, supporting TELUS Health services, solutions, and SaaS products.

What you’ll do and how you’ll contribute is described below.

What You'll Do

• Carry out contractual security clause reviews of both new and existing customer’s security requirements
• Review and respond to customer security risk assessments, questionnaires, RFIs and RFPs
• Assess TELUS platforms and solutions against appropriate cyber security frameworks (as applicable)
• Deliver transparent and auditable outputs to validate compliance against the framework(s), in the form of reports, dashboards and standardised templates
• Take a hands-on approach, work collaboratively with peers and stakeholders as necessary to assess compliance with appropriate cyber security framework(s) at pace
• Report clearly and concisely on non-conformities and advise on actions required to remediate, interacting/collaborating with wider TELUS teams as necessary
• Identify appropriate stakeholders at all levels and build and maintain relationships
• Where necessary, ensure risks are raised to the appropriate bodies/authority and ensure appropriate ownership and management
• Under Continuous Service and Process improvement, assist in developing repeatable, sustainable processes as applicable, ensuring process is followed and outputs / knowledge is shared as applicable
• Reinforce TELUS Health's Customers First values in ensuring positive security outcomes for external customers and internal stakeholders
• Provide cyber security technical knowledge and support to business and development operations teams
• Undertake administrative tasks, as is necessary, to support processes and that underpin the TELUS Health Cyber Assurance methodology

What You Bring

• 5 to 7 years of cyber security experience within a dynamic fast paced commercial environment
• 3 to 5 years of demonstrable technical security in IT infrastructure, applications and networks, ideally in a consultancy or assurance role
• Experience with compliance policies, standards and baselines in the privacy and technical security domains
• Strong experience in applying technical security baseline standards from internal and external standards to ensure security through the full product lifecycle of enterprise and consumer products and services
• Demonstrable experience of security controls frameworks such as ISO27001 and the NIST Cybersecurity Framework (CSF)
• Demonstrable experience in assessing systems and evaluating evidence against the control set(s)
• Familiarity and experience of Cloud, DevSecOps and Secure by Design architectures and delivery methodologies and processes would be advantageous
• A sound understanding of the fundamental concepts relating to security architectures within Networks, Infrastructure and Applications
• Effective oral and written communications skills, with an ability to tailor messaging on complex technical issues to a variety of technical and non-technical audiences
• Comfortable undertaking required security clearance processes as applicable
• Flexibility and comfortable with ambiguity and change
• Strong interpersonal and influencing skills to build relationships

Great to have

• CISSP, CISM. ISP, IS027001 LI/LA, CISA, CCSP, NIST800-53 or similar
• PIPEDA, GDPR
• French and other languages

Seniority level

• Not Applicable

Employment type

• Full-time

Job function

• Other

Industries

• IT Services and IT Consulting, Telecommunications, and Utilities