Specialist, Information Security

Resmed; Halifax; On-site; CAD 90,000 - 130,000; Full time

Job summary

ResMed is seeking an Information Security Specialist to protect information assets, platforms, and operations. You will lead risk assessments across cloud and hybrid environments, evaluate third‑party products for security and compliance, and guide secure design in AI/ML-enabled systems.

You will partner with cross‑functional teams and drive security throughout the software development lifecycle. You will communicate risks and remediation plans to business stakeholders and help maintain

Qualifications

• Bachelor’s degree required.
• 5+ years of information security experience.
• Certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
• Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
• Knowledge of AWS cloud security controls.
• Experience in healthcare or manufacturing environments.

Responsibilities

• Lead security risk assessments across cloud-native and hybrid environments.
• Evaluate third-party products and services for security and compliance.
• Lead reviews of AI/ML-enabled products for secure design and risk mitigation.
• Partner with project managers, architects, and developers to embed security in SDLC.
• Communicate risks, recommendations, and remediation plans clearly to stakeholders.
• Maintain risk assessments, security summaries, and remediation documentation.
• Track risks and controls using GRC tools.

Skills

Risk assessments

Cloud security

Third-party risk

AI/ML security

Stakeholder comms

Security controls

Education

Bachelor’s degree

Job description

The Information Technology (IT) team plays a key role in providing business enablement throughout ResMed. We are focused on application, infrastructure, and user productivity solutions, with innovation, efficiency and security. Our goal is providing customer oriented agile delivery, effective business partnership and state-of-the-art technology solutions.

Shape the future of secure innovation at global scale.

As an Information Security Specialist, you will play a critical role in protecting Resmed’s information assets, technology platforms, and business operations. Working within the Enterprise Security Group, you’ll lead security risk assessments across cloud environments, third-party solutions, and AI/ML-enabled products, helping teams make informed decisions while enabling innovation. Your expertise will guide secure design practices, strengthen risk management, and support compliance and audit readiness across a global organization. This is an opportunity to influence how security is embedded into technology initiatives, collaborate with stakeholders around the world, and make a meaningful impact on the systems and solutions that support Resmed’s mission.

What You’ll Do

• Lead security engagement across global projects, aligning security practices with business and technical objectives.
• Conduct end-to-end security risk assessments for cloud-native and hybrid environments, including architecture and control reviews.
• Evaluate third-party products and services during onboarding and integration to ensure security and compliance requirements are met.
• Lead security reviews of AI/ML-enabled products, focusing on secure design, guardrails, and risk mitigation.
• Partner with project managers, product owners, architects, and developers to integrate security throughout the software development lifecycle.
• Communicate security risks, recommendations, and mitigation plans in a clear, business-relevant manner.
• Produce and maintain risk assessments, security summaries, remediation recommendations, and related documentation.
• Track risks and controls using GRC tools to ensure accountability and traceability.
• Stay current on emerging technologies, security threats, and industry best practices.
• Contribute to the continuous improvement of security frameworks, processes, and standards across the organization.

What You Bring

• Proven ability to independently lead security risk assessments across a variety of technologies and environments.
• Experience with third-party security risk management processes and platforms.
• Strong understanding of:
• Authentication and authorization
• Encryption
• Application and network security
• Data Loss Prevention (DLP)
• Endpoint protection
• Cloud Security Posture Management (CSPM)
• Cloud Access Security Broker (CASB)
• Privileged Access Management (PAM)
• Zero Trust Network Access (ZTNA)
• Logging and monitoring
• Vulnerability management
• Incident response

Nice to Have

• Bachelor’s degree.
• 5+ years of related information security experience.
• Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
• Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
• Knowledge of AWS cloud security controls.
• Experience within healthcare or manufacturing environments.

What Sets You Apart

• Strategic Thinker: You balance security requirements with business objectives and help teams make informed decisions.
• Influential Communicator: You translate complex security concepts into practical guidance that resonates with technical and non-technical audiences.
• Collaborative Partner: You build strong relationships across functions, cultures, and time zones to drive successful outcomes.
• Proactive Problem Solver: You identify risks early, assess impacts thoughtfully, and develop practical recommendations.
• Continuous Learner: You stay curious about emerging technologies, evolving threats, and new approaches to security.
• Ownership Mindset: You take accountability for delivering high-quality work and following through on commitments.

Why Join Resmed

Joining Resmed is more than helping to create a healthier world. It’s an opportunity to be part of a global organization where innovation, collaboration, and excellence come together to drive meaningful impact. You’ll work alongside talented teams, contribute to securing cutting-edge technologies, and help shape how security enables business success. We are committed to fostering a diverse and inclusive culture where every individual can thrive, bring their authentic self to work, and contribute new ideas. At Resmed, you’ll find a challenging, supportive, and inspiring environment where you can grow your career while helping make a difference.

Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals, but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates. If this sounds like the workplace for you,