Information Security Advisor

People Corporation; Toronto; On-site; CAD 100,000 - 125,000; Full time

Job summary

A leading consulting firm is seeking an Information Security Advisor to join their team in Toronto or Winnipeg. The role focuses on safeguarding critical information assets and ensuring compliance with industry standards. The ideal candidate will leverage both technical and strategic skills to assess and mitigate security risks and lead cybersecurity initiatives. Competitive compensation and various benefits, including health programs and learning opportunities, are offered.

Benefits

Learning opportunities with industry experts

Extended health and dental benefits

Retirement savings plan with company contributions

Health & Wellness programs

Mental health support for you and your family

Assistance with industry designation costs

Competitive compensation

Qualifications

• Ability to influence technical and business outcomes.
• Thrive in dynamic, multi-stakeholder environments.
• Skills in translating goals into actionable steps.
• Strong verbal and written communication skills.
• Deep understanding of business operations.

Responsibilities

• Advise on security risk assessments and solutions.
• Develop and align security policies and standards.
• Recommend compliance and remediation initiatives.
• Maintain awareness of industry trends and regulations.
• Develop security strategies under the CISO's direction.

Skills

Leadership

Resilience

Strategy & Program Planning

Communication

Analytical Thinking

Judgment & Integrity

Job description

Join us to apply for the Information Security Advisor role at People Corporation.

We are hiring an Information Security Advisor to join our team in Toronto or Winnipeg. In this role, you will be a key player in protecting the organization’s critical information assets and ensuring compliance with industry standards and regulations. You will leverage a blend of technical expertise and strategic business insight to identify, assess, and mitigate security risks across all operations.

The Information Security Advisor Will:

• Advise business, I.S. management, and technology leaders in conducting security risk assessments and identifying security solutions.
• Collaborate with information security team members to develop and align security policies and standards with evolving business needs and industry standards (e.g., ISO 27001, NIST), ensuring their currency for all participating companies.
• Recommend compliance and remediation initiatives for technology, processes, and services to ensure the effectiveness of the security program, protect against threats, and meet regulatory and partner requirements.
• Maintain awareness of industry trends, best practices, and regulatory requirements in information security, researching and recommending improvements to security infrastructure.
• Develop and implement security strategies, plans, and budgets under the direction of the CISO, aligning with business objectives and risk appetite.
• Participate in benchmarking and cost-effectiveness studies to demonstrate business value.
• Complete business cases for security solutions with a focus on risk assessment.
• Maintain an understanding of the business unit, technologies, customers, partners, and data involved.
• Serve as the main contact or adviser for local security issues as part of the security leadership team, collaborating with IT, finance, HR, legal, and others.
• Provide leadership and strategic guidance for the cybersecurity program and enterprise security initiatives.
• Engage with partner firms to support security objectives and incident response communication.
• Participate in relevant meetings, conferences, and industry forums.
• Evaluate controls and risks, suggesting appropriate controls and management strategies to ensure policy compliance.
• Stay updated on security threats, vulnerabilities, and mitigations, sharing knowledge across business units.
• Identify, document, and address threats and vulnerabilities affecting the business.
• Define KPIs and metrics in collaboration with security and business leaders, communicating them effectively to non-technical stakeholders.

To succeed in this role, you will need:

• Leadership: Ability to influence both technical and business outcomes, leading cross-functional teams.
• Resilience: Thrive in dynamic, multi-stakeholder environments with initiative and ownership.
• Strategy & Program Planning: Skills in translating goals into actionable steps, managing multiple projects.
• Communication: Strong verbal and written skills, capable of tailoring messages for diverse audiences.
• Analytical Thinking: Deep understanding of business operations and technology integration.
• Judgment & Integrity: Make timely, ethical decisions, prioritize compliance, and uphold business standards.

What's In It For You:

• Learning opportunities with industry experts
• Extended health and dental benefits
• Retirement savings plan with company contributions
• Health & Wellness programs
• Mental health support for you and your family
• Assistance with industry designation costs
• Competitive compensation

At People Corporation, we are committed to diversity, inclusion, and creating an accessible environment. If you require accommodations or alternative formats, please contact [e-mail].