Information Security Engineer-CAN

BREAKDOWN SERVICES OF CANADA LTD; North Vancouver, Toronto; Remote; CAD 90,000 - 105,000; Full time

Job summary

BREAKDOWN SERVICES OF CANADA LTD is seeking an Information Security Engineer for a full-time, remote role in Canada. The position leads cybersecurity strategy, risk management, and governance, requiring a degree in information security or related field and relevant certifications.

Responsibilities include developing strategy, guiding security architecture across IT and business units, managing incident response, and promoting security awareness.

Qualifications

• Bachelor's or Master's in Information Security, Computer Science, or a related field.
• Proven leadership in cybersecurity roles and strong communication skills.
• Certifications such as CISSP, CISM, or CISA desirable.

Responsibilities

• Develop and lead the implementation of the organization's cybersecurity strategy.
• Provide strategic direction and vision to the cybersecurity team.
• Conduct risk assessments and implement risk mitigations.

Skills

Leadership

Strategic Leadership

Risk Management

Incident Response

Security Architecture

Security Governance

Security Awareness

Vendor Risk Management

Security Monitoring

Communication

Education

Bachelor's or Master's in Information Security/CS/related field

CISSP

CISM

CISA

Job description

Job Details

Job Location: NORTH VANCOUVER, BC V7N 2S8, Salary Range: $90,000.00 - $105,000.00 Salary, Breakdown Services is seeking a dynamic and experienced Information Security Engineer to join our organization. The position is full time, permanent and REMOTE. Candidates must be authorized to work in either British Columbia or Ontario, Canada.

Responsibilities

Cybersecurity Strategy and Leadership

• Develop and lead the implementation of the organization's cybersecurity strategy, ensuring alignment with business objectives.
• Provide strategic direction and vision to the cybersecurity team, fostering a culture of security awareness and compliance throughout the organization.

Risk Management

• Conduct regular risk assessments to identify and prioritize cybersecurity risks.
• Develop and implement risk mitigation strategies and controls to safeguard the organization against potential threats.

Security Governance

• Establish and maintain effective security governance frameworks, policies, and procedures.
• Ensure compliance with relevant laws, regulations, and industry standards related to information security.

Incident Response and Management

• Develop and maintain an incident response plan, including coordinating the response to cybersecurity incidents.
• Conduct post-incident analysis to identify root causes and recommend improvements to prevent future incidents.

Security Architecture and Design

• Collaborate with IT and business units to integrate security best practices into the design and development of systems and applications.
• Ensure the continuous evaluation and enhancement of security architecture to address emerging threats.

Security Awareness and Training

• Implement a comprehensive security awareness program for employees, promoting a security-conscious culture.
• Provide training on cybersecurity best practices and conduct regular drills to test the organization's readiness for security incidents.

Vendor and Third-Party Risk Management

• Oversee the assessment and management of cybersecurity risks associated with third-party vendors and partners.
• Ensure that vendors adhere to the organization's security standards and policies.

Security Monitoring and Reporting

• Implement and manage security monitoring tools and processes to detect and respond to security events.
• Generate regular reports on the organization's cybersecurity posture and incidents for executive leadership.

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.
• Proven experience in a cybersecurity leadership role.
• Industry certifications such as CISSP, CISM, or CISA are highly desirable.
• Strong understanding of cybersecurity technologies, risk management, and compliance.
• Excellent leadership, communication, and interpersonal skills.