Senior Information Security GRC Consultant

Astra North Infoteck Inc.; Toronto; On-site; CAD 100,000 - 125,000; Full time

Job summary

A leading cybersecurity firm in Toronto is seeking a professional to conduct security risk assessments, develop security policies, and assist in incident management. The ideal candidate will promote a culture of security awareness and ensure compliance with relevant regulations. This role involves collaboration across departments and requires strong communication skills.

Qualifications

• Experience in conducting security risk assessments.
• Proven ability to develop security policies and procedures.
• Knowledge of compliance standards and regulations.

Responsibilities

• Conduct comprehensive security risk assessments to identify vulnerabilities.
• Develop and implement security policies and guidelines.
• Collaborate on security strategy and initiatives.
• Design and deliver security awareness training programs.
• Assist in incident response and management.

Job description

Job Description :

Risk Assessment

• Conduct comprehensive security risk assessments to identify vulnerabilities and threats to organizational assets. Analyze and evaluate potential security risks and their impact on business operations.

Policy Development

• Develop and implement security policies, procedures, and guidelines in alignment with industry standards and best practices. Ensure that security policies are regularly reviewed and updated based on emerging threats and regulatory requirements.

Security Strategy

• Collaborate with cross-functional teams to develop and execute a comprehensive security strategy that addresses identified risks. Provide guidance on security initiatives and projects to ensure compliance with security policies.

Training and Awareness

• Design and deliver security awareness training programs for employees to promote a culture of security awareness. Stay updated on the latest security trends and threats, sharing insights with team members and stakeholders.

Incident Management

• Assist in the development and implementation of incident response plans to effectively manage security incidents and breaches. Participate in post-incident reviews to identify lessons learned and improve response strategies.

Stakeholder Engagement

• Act as a liaison between the security team and other departments to foster collaboration and ensure alignment on security initiatives. Present risk assessment findings and security recommendations to senior management and stakeholders.

Compliance

• Ensure compliance with relevant laws, regulations, and industry standards related to information security and risk management. Monitor and report on the effectiveness of security measures and compliance with established policies.