Data Security Advisor - Data Strategy

Altis Technology; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading financial services client is seeking a Data Security Manager to develop and enhance their data security program. This hybrid position based in Toronto involves collaborating across teams to ensure compliance with data protection standards. The ideal candidate has a Bachelor's degree in Computer Science and over 6 years of relevant experience in Information Security Management. Key responsibilities include developing security policies, educating teams, and managing compliance assessments.

Qualifications

• 6+ years of experience in Information Security Management.
• Bachelor's degree in Computer Science or related field; graduate degree preferred.
• Relevant certifications such as CISSP, ISO27001, or CISM are preferred.

Responsibilities

• Develop and enhance the enterprise-wide Data Security Program.
• Educate teams on security best practices.
• Create and maintain data security policies and procedures.

Skills

Information Security Management

Data Protection

Stakeholder Engagement

Project Leadership

Education

Bachelor's degree in Computer Science

Tools

Reporting tools

MS Purview

Job description

Overview

Our leading financial services client is looking for a permanent resource to join their team as a Data Security Manager (Data Security Strategy Advisor). This will be a hybrid role reporting to their Toronto office.

Responsibilities

• Develop, implement, and enhance the enterprise-wide Data Security Program.
• Educate business and IT teams on security best practices and data protection controls.
• Work cross-functionally to embed data security principles into everyday operations.
• Create and maintain data security policies and procedures, including data classification standards.
• Support assessments like Privacy Impact Assessments and Transfer Impact Assessments.
• Collaborate with Privacy, IT, and Security teams to align on sensitive data protection strategies.
• Stay informed on legal and regulatory data security requirements and ensure compliance.
• Identify and map data sources, including structured and unstructured data repositories.
• Collaborate with business units to classify data and ensure adequate controls are in place.
• Monitor classification processes and provide metrics and reporting to leadership.
• Support and deliver training on data classification and protection best practices.
• Design and implement technical and process-based data protection controls.
• Ensure protection of data at rest, in use, and in transit through security technologies.
• Oversee tools related to data loss prevention and perform periodic control reviews.
• Maintain compliance through regular assessments and tool optimization.

Qualifications

• Bachelor's degree in Computer Science, IT Management, or a related field (graduate degree preferred).
• Previously technical leadership experience, presenting and translating technical to non-technical stakeholders.
• 6+ years of experience in Information Security Management, particularly in data protection.
• Strategy focus and experience working and presenting to stakeholders.
• Relevant certifications such as CDPSE, CISSP, ISO27001, CISM, or CISA are preferred.
• Hands-on experience developing and maintaining security frameworks and controls, especially within financial services.

Technical Skills

• Deep understanding of ISO 27001, NIST CSF, and data lifecycle protection standards.
• Strong communication and stakeholder engagement skills.
• Proven ability to lead complex projects and cross-functional initiatives.
• Proficiency with reporting tools, presentations, and Excel.
• MS Purview experience is an asset.

Seniorities & Employment

• Seniority level : Associate
• Employment type : Full-time
• Job function : Information Technology