IT Risk & Compliance Consultant

Celestica; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

A global technology company in Toronto is seeking a Senior Specialist in IT Risk and Compliance. This role involves managing data protection activities and supporting compliance projects while utilizing Data Loss Prevention technologies. The ideal candidate will have extensive experience in DLP, the ability to evaluate compliance requirements, and strong stakeholder management skills.

Qualifications

• 7-10 years of experience in DLP and security tools.
• Sound knowledge of DLP versions, patches, and system updates.
• Ability to create executive dashboards capturing KPIs.

Responsibilities

• Implement DLP technology across the enterprise.
• Monitor and respond to alerts from DLP systems.
• Participate in the audit process to ensure compliance.

Skills

Data Loss Prevention (DLP)

Security tools

Network architectures

Customer management

Teamwork

Education

Bachelor’s Degree in related field

DLP product certifications

CISSP or equivalent certification

Job description

Summary

The Senior Specialist, IT Risk and Compliance requires extensive experience with Data Loss Prevention (DLP) and similar technologies in order to be capable of managing Data protection and monitoring activities while coordinating IT compliance projects. The incumbent will interact with internal and external stakeholders and provide support and guidance around DLP and security tools.

Responsibilities

• Implementation of DLP technology across a large enterprise.

• Administration of the DLP tools to include configuration of policies, upgrading, patching etc.

• Monitor and respond to alerts generated from the DLP systems and other technologies.

• Evaluate false positives and false negatives, fine tune the data protection policies to correct the errors

• Perform regular fine-tuning of DLP console

• Create new rules / fingerprinting as required by Celestica

• Assess the applicable regulations and risk and privacy requirements (both external and internal) and accordingly design DLP rules for the same

• Establish end user awareness through response mails, case studies etc.

• Understand and follow the incident response process through event escalations.

• Collaborate with business groups to help them identify, classify, and secure data

• Implementation of proactive measures to enhance accuracy and effectiveness of DLP tools

• Develops and supports project management processes, guidelines and products. Provides project planning support for project gating. Organizes and supports project management training.

• Provides expertise to the business and IT teams on IT controls improvements and implementation, assisting with the IT controls updates and re-design

• Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits

• Assists with policy and process changes to ensure the documents are up to date

Knowledge/Skills/Competencies

• Sound knowledge of DLP versions, patches and other initiatives for system updating/up gradation.

• Good understanding of organizational network architectures including cloud.

• Experience in maintaining various metrices and SLAs

• Good to have skills like DRM, Database Management etc.

• Ability to work in a team environment.

• Strong customer management skills

• Ability to clearly articulate the role that IT can play in enhancing the customer’s activities

• Create executive dashboards / presentations which capture the overall state of the data loss prevention function leveraging KPIs tracked

Physical Demands

• Duties of this position are performed in a normal office environment.

• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data.

• Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Typical Experience

• Between 7 to 10 years of experience in DLP and similar security tools and technologies.

Typical Education

• Bachelor’s Degree in related field.

• DLP product certifications (e.g., Forcepoint DLP Engineer).

• CISSP, or equivalent certification desired

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on any protected status (including race, religion, national origin, gender, sexual orientation, age, marital status, veteran or disability status or other characteristics protected by law).

At Celestica we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected and supported. Special arrangements can be made for candidates who need it throughout the hiring process. Please indicate your needs and we will work with you to meet them.

COMPANY OVERVIEW

Celestica (NYSE, TSX: CLS) enables the world’s best brands. Through our recognized customer-centric approach, we partner with leading companies in Aerospace and Defense, Communications, Enterprise, HealthTech, Industrial, Capital Equipment and Energy to deliver solutions for their most complex challenges. As a leader in design, manufacturing, hardware platform and supply chain solutions, Celestica brings global expertise and insight at every stage of product development – from drawing board to full-scale production and after-market services for products from advanced medical devices, to highly engineered aviation systems, to next-generation hardware platform solutions for the Cloud.

Headquartered in Toronto, with talented teams spanning 40+ locations in 13 countries across the Americas, Europe and Asia, we imagine, develop and deliver a better future with our customers.

Celestica would like to thank all applicants, however, only qualified applicants will be contacted.

Celestica does not accept unsolicited resumes from recruitment agencies or fee based recruitment services.