Information Security Operations Specialist

7shifts; Markham; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

7shifts is seeking an Information Security Operations Specialist to build and manage their Security Operations Center (SOC). The role involves strengthening security capabilities, incident response, and collaboration across teams to enhance security posture. The ideal candidate will have relevant certifications and experience in security operations, bringing a proactive and analytical approach to complex security challenges.

Benefits

Health and dental benefits

Flexible vacation policy

Latest Apple tech and home office setup

Coaching and professional growth support

Qualifications

• Hands-on experience in security operations.
• Strong communication skills.
• Curious and analytical mindset.

Responsibilities

• Manage RFPs and recommend security solutions.
• Lead implementation of security operations framework.
• Govern and manage security incidents.

Skills

Communication

Problem Solving

Analytical Mindset

Education

Certifications like CEH, CHFI, OSCP, or ISC2 SSCP

Tools

SIEM

Job description

Information Security Operations Specialist

Toronto, On (Remote)

7shifts is a scheduling and payroll platform designed to help restaurant teams thrive. With an easy-to-use app and industry-specific solutions, 7shifts saves time, reduces errors, and helps keep costs in check for over 55,000 restaurants. Our mission is to simplify team management and improve performance for restaurants, with a long-term vision of creating a thriving restaurant industry through the power of connected & engaged teams.

As the Information Security Operations Specialist, you’ll be at the forefront of building and managing our Security Operations Center (SOC), reporting to the Director, Information Security and Privacy. You’ll be instrumental in strengthening our security capabilities by implementing key frameworks and optimizing technical controls, leading incident response efforts, and delivering hands-on technical training. You’ll collaborate across teams to recommend and implement solutions, manage KPIs and dashboards, and respond decisively in high-stakes situations, all while helping advance our information security roadmap and protecting what matters most!

We’re building an inclusive work environment that is representative of the diverse industry we have the pleasure of serving, and we encourage candidates from all backgrounds to apply.

What you’ll do:

• Manage RFPs and recommend security solutions that align with business needs and compliance requirements
• Lead implementation of the security operations framework through effective technological and procedural controls
• Tune and optimize technical security controls to improve coverage, effectiveness, and efficiency
• Oversee the Information Security Dashboard, reporting on KPIs and KRIs to inform decisions and improvements
• Govern and manage security incidents, ensuring timely resolution and minimal business disruption
• Deliver technical training and lead incident response exercises to strengthen team readiness
• Collaborate with stakeholders to advance security projects and execute the Information Security roadmap

What you bring:

• Hands-on experience in the security operations world, you know the playbook and how to put it into action when it matters most
• Certifications like CEH, CHFI, OSCP, or ISC2 SSCP - you’ve got the credentials to back up your hands-on experience and stay sharp in a fast-changing space
• Strong communication skills, you know how to bring people together, because strong security relies on teamwork across the business, not just behind the scenes
• A sharp eye for solving tough problems and cutting through complexity, you don’t just spot issues, you find smart ways to fix them
• A curious, analytical mindset that’s always looking for a smarter, better way to do things — you’re the kind of person who asks “why not?” and pushes the work forward

It’d be even cooler if you had:

• Experience implementing and maintaining a range of security tools, like SIEM, to keep systems locked down and resilient
• Familiarity with managing application security frameworks and making sure they run smoothly
• A solid grasp of security principles — you understand threat and risk assessments and how to manage them effectively
• Bonus points if you know the ins and outs of restaurant operations and what keeps that world running

Our commitment to our Shifties:

• Opportunity: Our product is evolving in exciting ways, and we’re focused on delivering even more value to restaurants. This momentum creates real opportunities to learn and grow. Whether you’re honing your craft or exploring new paths, you’ll be supported and empowered to own your growth and impact a product shaping the future of the restaurant industry.
• Challenge: We’re tackling real problems in a fast-moving, complex industry. The work is scrappy and ambiguous, but meaningful. You’ll think critically, act with intention, and shape solutions that make a real difference for restaurant teams.
• Culture:We’re proud to be recognized among the best workplaces in North America. Guided by our mission and values, we move fast to solve meaningful problems and celebrate wins together. Whether through in-office and remote events, team offsites like Sparks, or everyday moments of connection, we create space for shared growth, collaboration, and fun.
• Equity: We’re a Series C, VC-backed SaaS company, and we believe everyone should share in the success they help create. When we build together, we grow together.
• Health and Wellness:We support Shifties in and outside of work, knowing that what people need can change over time. From day one, you’ll have access to benefits like health and dental, lifestyle spending accounts to a parental leave program built with flexibility in mind, to help you bring your best self to work.
• Flexibility:Our team is intentional around how and where we work, whether remotely, in person, or a mix of both. We prioritize candidates who thrive in a hybrid work environment with offices in Saskatoon and Toronto, ensuring in-person collaboration and connection when possible. Plus, we offer a flexible vacation policy to encourage everyone to recharge when needed. Oh, and our ‘90 Day Shift’ program lets Shift work from (almost) anywhere because who wouldn’t want to trade their desk for a beach view once in a while?
• Support: We set Shifties up for success with the tools they need, like the latest Apple tech, a home office setup, and some 7shifts swag to make it official. But support goes beyond day one. We’re serious about professional growth, offering coaching, feedback, development planning, and opportunities to grow from within.

We know you might not check every box, and that’s okay. If you’re excited about this role, inspired to contribute to a meaningful product, and eager to share ideas that drive real change, we’d love to hear from you. We’re building an inclusive team that reflects the diverse industry we serve, and we welcome applicants from all backgrounds.

We thank you for your interest in joining the 7shifts team!

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Are you legally entitled to work in Canada? * Select...

Please note that we are able to support immigration for candidates eligible through the Global Talent Stream (GTS) or the Provincial Nominee Program (PNP). These programs apply to candidates in engineering, IT, experience design, and data analyst roles that have completed formal education (degree or college program) in their designated field and have 5 or more years of experience.

Are you currently located in (or willing to relocate) to Canada? * Select...

Please note that this role is a remote or hybrid opportunity within Canada.

Do you have experience working with SOC 2, ISO 27001, or PCI DSS compliance frameworks? * Select...

Do you have experience working with Google Cloud Platform (GCP)? * Select...

Tell us about a time you prepared for or supported a SOC 2, ISO 27001, or PCI compliance audit. What was your role, and how did you help shape the roadmap, key milestones, and outcomes to ensure success? *

Tell us about a time you prepared for or supported a SOC 2, ISO 27001, or PCI compliance audit. What was your role, and how did you help shape the roadmap, key milestones, and outcomes to ensure success?

How did you hear about 7shifts or this position? *

If you heard about us from someone on our team, please let us know who!