Information Security Lead

High Tech Genesis; Montreal; On-site; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking an Information Security Lead to spearhead cybersecurity initiatives and ensure compliance with security standards. This pivotal role involves leading the design and implementation of IT security systems, managing security incidents, and collaborating with various departmental heads to enhance the organization's security posture. The ideal candidate will possess extensive knowledge of IT infrastructure, risk management, and security protocols, along with relevant certifications. Join this dynamic team to make a significant impact on information security and drive quality improvements across the organization.

Qualifications

• Proven experience in leading cybersecurity initiatives and compliance.
• Strong understanding of IT infrastructure and security protocols.
• Ability to manage relationships with security vendors and stakeholders.

Responsibilities

• Lead the design and implementation of IT security systems and policies.
• Manage security incident operations and threat management.
• Collaborate with cross-departmental teams to integrate security measures.

Skills

Cybersecurity

Information Security Compliance

Identity and Access Management

NIST Standards

ISO27001

IT Security Architecture

Risk Management

Incident Response

Technical Knowledge of IT Infrastructure

Security Protocols

Education

CISSP Certification

CISM Certification

CRISC Certification

ISO 27001/2 Training

Tools

Firewalls

IDS/IPS

Data Loss Prevention Tools

Encryption Tools

Monitoring Systems

Job description

Join to apply for the Information Security Lead role at High Tech Genesis.

Location: Montreal, QC (on-site)

Term: Permanent

High Tech Genesis is hiring an Information Security Lead to join the Information Services team. Reporting to the CSO and CIO, this role will lead cybersecurity initiatives, ensure compliance with security standards, and integrate security into all projects and services across departments.

In this role, you will:

1. Review system security measures, design, and lead implementation of IT security systems and policies.
2. Lead on development and delivery of measures and metrics to support the assessment, reporting and ongoing improvement of the information security posture of colleges.
3. Build strong collaborative relationships with the Head of IS, Head of Software Engineering, Product Manager, and departmental Heads and Leads to support the delivery of Information Security improvement objectives.
4. Work closely with college stakeholders to keep abreast of planned changes to technologies, working practices, and business activities that could impact security or risk profiles.
5. Audit controls via standards such as NIST or ISO27001, advising on mitigation options and implementing measures to satisfy control requirements.
6. Collaborate with the Data Protection Officer to meet Information Security requirements.
7. Manage and improve Identity and Access Management procedures.
8. Use influencing skills to promote collaborative working and quality improvement across the group.
9. Ensure security is integrated into hardware, software, and application evaluations, following Privacy by Design principles.
10. Manage security incident operations, including detection, response, and reporting.
11. Oversee threat and vulnerability management, risk tolerances, treatment plans, and residual risk communication.
12. Evaluate exception requests to policies, ensuring adequate controls are in place.
13. Review audit trails, system logs, and monitoring data for compliance and security events.
14. Create standards for system hardening, change management, and documentation.
15. Perform periodic firewall audits and ensure disaster recovery processes are effective.
16. Implement corrective and preventative actions following best practices.
17. Demonstrate experience in designing, implementing, and improving IT security architecture and controls.
18. Possess broad technical knowledge of IT infrastructure including networks, cloud servers, hardware, storage, and monitoring systems.
19. Apply security controls in areas like Unix/Linux, Windows, firewalls, IDS/IPS, vulnerability management, WAF, Wi-Fi, data loss prevention, encryption, forensics, LAN/WAN.
20. Understand security protocols, cryptography, authentication, and authorization techniques.
21. Maintain high personal integrity and confidentiality judgment.
22. Hold formal certifications such as CISSP, CISM, or CRISC, or training in standards like ISO 27001/2 or COBIT.
23. Manage relationships with security vendors and suppliers.
24. Show passion for information security and IT interests.
25. Lead and collaborate effectively within teams.

Bonus skills:

• Bilingual in English and French, written and spoken.

High Tech Genesis Inc. is an Equal Opportunity Employer committed to diversity and inclusion. Please inform us of any accommodation needs.

Applicants must have the legal right to work in Canada. Kindly submit your resume in MS Word format upon application.