Senior Threat and Vulnerability Management Engineer

Gateway Casinos Corporate Office; Toronto; On-site; CAD 105,000 - 125,000; Full time

Job summary

A leading gaming and entertainment company in Toronto seeks an experienced Cyber Security leader to oversee risk management and cyber security initiatives. The ideal candidate has over 7 years of experience in cyber security, strong technical expertise, and project management skills. This role offers a full-time position with a competitive salary range and a comprehensive benefits package. Join a dynamic team dedicated to innovation and security in the gaming industry.

Benefits

Full benefits package

Retirement savings plan

Training and development opportunities

Discounts on travel and entertainment

Qualifications

• 7+ years of experience leading a Cyber security team function, preferably in gaming or large enterprises.
• Strong technical background in cyber security.
• In-depth understanding of information security policies and risk analysis.

Responsibilities

• Oversee Enterprise Risk management program ensuring data protection.
• Stay aware of the threat landscape and communicate updates.
• Lead technical initiatives to address security risks.

Skills

Cyber security leadership

Technical cyber security expertise

Project management

Communication skills

Risk analysis

Education

Bachelor’s degree in Technology or Computer Science

CISSP, CISM, CISA, GSEC, CEH, GCIH certifications

Tools

SIEM

DLPs

NGFWs

Identity Management Solutions

Vulnerability Assessment Tools

Cloud Security Controls

Job description

Job Type: Full-Time

Salary Range: $105,074 - $125,000

We Provide

• Full benefits package for full-time employees
• Retirement savings plan
• Exciting, supportive and fun work environment
• Family and friends discounts on travel, tech, food, beverage, and fitness
• Development and training opportunities

The Position

The incumbent will be responsible for guiding technical teams of cyber security technical specialists to ensure risk reduction is achieved while abiding cyber security standards. Provide support and guide the maintenance of cyber solutions ensuring the protection and integrity of Gateway corporate and Gaming Management Systems (GMS). They will ensure that cyber threat intelligence is consistently woven into the fabric of our threat & vulnerability management program; managing the backbone of the cyber program growth must be always maintained in accordance with established standards.

Key Responsibilities

• Oversee and maintain the overall Enterprise Risk management program by ensuring that security and compliance risks are mitigated and is responsible for protecting data from compromise
• Maintain active situational awareness of the threat landscape by consistently evaluating cyber threat intelligence and communicating critical updates to cyber leadership
• Provide technical leadership within CTI-driven initiatives to further address attack surface management risks with peers across our industry vertical
• Responsible for analyzing, developing, implementing and enforcing security, privacy and data protection requirements, policies and corporate technical guidelines
• Provide technical guidance among cross functional groups to ensure compliance with gaming standards and Gateway requirements as across multiple sites and lines of businesses
• Guide and mentor a high-performance team of Cyber Security Professionals by providing technical expertise to their growth and development
• Initiate, facilitate and promote activities to increase the level of information protection awareness within the company
• Lead threat management related initiatives and implements process and methods to raise the maturity of security governance and execution within the company while improving the security of information assets
• Oversee ongoing evaluation of vulnerability assessment measures, identifying any threats and making recommendations to reduce exposure
• Ensure systems, applications, and client programs are designed in accordance with data protection policies, guidelines, and standards
• Manage and investigate security related incidents and conduct threat risk assessments
• Oversee in the implementation of risk reduction controls
• Act as a technical trusted leader advising cyber leadership, representative for all security and/or business continuity audits, reviews, certifications or inquiries with internal and external clients
• Manage the maintenance of documentation on information protection practices, policies and procedures
• Lead ongoing tuning of data protection and cyber security technologies as a trusted technical expert
• Review new business opportunities to ensure proper privacy/security/business continuity requirements are appropriate, and adequately captured
• Work with leadership to ensure all SOP documentation is up to date. Accountable for the accuracy of procedural efficiency and documentation relating to the application or cyber services
• Partner with peers in other departments to implement security and overall compliance initiatives
• Some travels maybe required
• Overtime work as required
• Other duties as required

What You Bring

• Bachelor’s degree in Technology, Computer Science or equivalent
• CISSP, CISM, CISA, GSEC, CEH, GCIH are considered an asset
• 7+ years of experience leading a Cyber security team function, cyber security support/solution delivery team preferably in a casino or gaming and entertainment industry or other large enterprise environment
• 7+ years’ experience in a hands-on role leading implementation and supporting cyber security initiatives with focus on business application systems
• Experience in leading DR runbook and execution in a mission-critical high availability environment preferred
• Experience in providing services to agreed SLAs and OLA preferred
• Strong technical cyber security background
• Experience with cloud technologies
• Project management experience
• Excellent communication, organizational and multi-tasking skills
• Ability to use and understand cyber security technologies and standards
• Broad understanding of Cyber Security technology
• In depth understanding of information security policies and risk analysis
• Advanced knowledge/familiarity with SIEM, DLPs, NGFWs, SIEMs, Identity Management Solutions, IDS/IPS, Vulnerability Assessment Tools, Internet Security Tools, Multi Factor Authentication, Cryptography, Multi-platform access controls, Cloud Security Controls
• Oversee and instruct employees in security awareness and practices
• Working knowledge of MS Windows, Linux controls and cloud computing architecture platforms, networks and firewalls
• Experience with leading vulnerability assessment functional practices
• In depth knowledge of business continuity & disaster recovery concepts, controls and processes.
• Must work well under tight deadlines and schedules

Who We Are

Gateway Casinos & Entertainment Limited (“Gateway”) is one of the largest and most diversified gaming and entertainment companies in Canada with 31 gaming properties in British Columbia, Ontario and Alberta. Across its entire portfolio, Gateway currently employs approximately 7,200 people and features approximately 391 table games (including 31 poker tables), 14,288 slots, 81 food and beverage outlets and 564 hotel rooms.

Gateway has been in the business of gaming and entertainment in Canada for more than thirty years and continues to evolve and expand its renowned offerings, including developing casino and restaurant brands. The Gateway to Your Future starts with us.

Gateway celebrates and empowers our team members, who make it all possible. A career at Gateway means working with great people, being recognized for your unique contribution and career advancement opportunities across our 31 locations. Our employees thrive with ongoing training and leadership programs while working in a dynamic and fun environment. See for yourself what it’s like to be on a team that values your vision, skill and energy.

This job posting is for an existing vacancy.

Gateway does not utilize any form of artificial intelligence (AI) in the screening, assessment, or selection of applicants.