Security Analyst

360 IT Professionals; Montreal (administrative region); On-site; CAD 90,000 - 120,000; Full time

Job summary

Bell is seeking an Information security specialist for a 6-month engagement to support compliance and risk management activities. You will assess supplier security controls, identify risks, and work with business units to implement remediation and reporting.

The role requires strong communication with technical and non-technical stakeholders and familiarity with major security frameworks. Bilingual English/French is a significant asset; certifications such as CISSP/GSLC are desirable.

Qualifications

• Conducting security assessments to identify information security risks and required mitigations.
• Participating in contract negotiations with suppliers to ensure inclusion of security requirements.
• Experience communicating with both technical and non-technical contacts across teams.
• Understanding of ISO 27001/27002 and related frameworks (ITIL, COBIT, NIST, TOGAF).

Responsibilities

• Lead risk assessment activities and develop remediation plans.
• Collaborate with business units and security teams to implement controls.
• Communicate risk findings and security requirements to stakeholders at all levels.
• Assist in security contract language and vendor risk management.

Skills

Security risk assessments

Contract negotiations

Stakeholder communication

Security frameworks knowledge

Job description

360 IT Professionals is a Software Development Company based in Fremont, California that offers complete technology services in Mobile development, Web development, Cloud computing and IT staffing. Merging Information Technology skills in all its services and operations, the company caters to its globally positioned clients by providing dynamic feasible IT solutions. 360 IT Professionals work along with its clients to deliver high-performance results, based exclusively on the one of a kind requirement.

Our services are vast and we produce software and web products. We specialize in Mobile development, i.e. iPhone and Android apps. We use Objective C and Swift programming languages to create native applications for iPhone, whereas we use Android Code to develop native applications for Android devices. To create applications that work on cross-platforms, we use a number of frameworks such as Titanium, PhoneGap and JQuery mobile.

Furthermore, we build web products and offer services such as web designing, layouts, responsive designing, graphic designing, web application development using frameworks based on model view controller architecture and content management system. Our services also extend to the domain of Cloud Computing, where we provide Salesforce CRM to effectively manage one’s business and ease out all the operations by giving an easy platform. Apart from this, we also provide IT Staffing services that can help your organization to a great extent as you can hire highly skilled personnel’s through us.

We make sure that we deliver performance driven products that are optimally developed as per your organization’s needs. Take a shot at us for your IT requirements and experience a radical change.

Montreal is preferred location, however Toronto is also acceptable.

The specific compliance areas will be assessments of supplier security controls. TCI and COBIT are just provided as examples of frameworks that the contractor should be familiar with.

Bell is looking for an Information security specialist to support compliance and risk management activities during a 6-month engagement. Assessing Bell's suppliers, the candidate will work closely with the business units and security teams to identify, communicate, and develop remediation for supplier security risks. The candidate will also develop progress and risk reports to be presented to involved stake holders.

The chosen candidate will have the following experience:

• Conducting Security Assessments for the determination of information security risks and required mitigation activities;
• Participation in the negotiation of contracts with suppliers to ensure the inclusion of specific security requirements.
• Experience communicating and working with both technical and non-technical contacts; and
• An understanding of ISO 27001/27002, or other similar security frameworks such as ITIL, ISO, CoBiT, NIST, TOGAF.

Success in the role will be defined by the candidate's ability to:

• Ability to prioritize and work under pressure; strong analytical / problem-solving skills with attention to detail, and good business judgement.
• Develop and track project plans, and identify and address potential roadblocks or other project risks
• Understand risk modeling and be able to convert that into a risk assessment process
• Communicate effectively both verbally and in written reports, to all levels of the organization
• Motivate business users and technical teams to take action on security issues
• Understand and be able to communicate the potential impact of specific vulnerabilities on specific systems based on the system architecture, compensating controls, and purpose of the system

Bilingualism is a significant asset (English and French)

Certifications related to security (CISSP, GSLC, etc) are an asset

PMP or equivalent is an asset

Regards,

Happy Singh

Sr.Technical Recruiter

Office: 972-455-8296

happy.singh(@)mcpsinc.com

Additional Information

Thanks and Regards,

Happy Singh

Office: 972-455-8296

happy.singh(@)mcpsinc.com