Sr. Security Services Consultant

Fortra; Canada; On-site; CAD 130,000 - 150,000; Full time

Job summary

Fortra, a leading security services provider in Canada, seeks a Senior Security Services Consultant to act as a trusted advisor, helping customers identify and address security risks and meet evolving compliance requirements. You will assess environments, design aligned security solutions, and guide remediation with a focus on practical, sustainable outcomes.

You will mentor colleagues, support security and compliance initiatives (PCI DSS, SOX, HIPAA), and manage multiple engagements while

Qualifications

• 10+ years of experience in information security, cybersecurity, enterprise risk, compliance, or related field.
• 10+ years of professional experience working with the IBM i operating system.
• Significant experience identifying and remediating security concerns from formal risk assessments.
• Strong knowledge of regulatory, privacy, and security compliance requirements and their application within customer environments.
• Hands-on experience conducting security assessments and testing including white-box penetration testing.
• Experience with PCI DSS, SOX, HIPAA or similar frameworks and regulations.
• At least one relevant security, risk, audit, or governance certification (CRISC, CISA, CISM, CISSP).
• Strong consulting and communication skills to translate complex security concepts for business and technical audiences.
• Willingness and ability to travel to customer sites as required.

Responsibilities

• Conduct IT and information security risk assessments, identify gaps, and provide actionable remediation recommendations.
• Design and recommend security solutions aligned with customer requirements and applicable regulations.
• Perform white-box penetration testing to identify vulnerabilities and remediation.
• Guide customers through security implementations and remediation initiatives tied to PCI DSS, SOX, HIPAA.
• Assist customers in addressing findings from assessments and audits and implementing new controls.
• Advise on security architecture, operating system capabilities, configuration, and best practices.
• Develop and implement sustainable processes and controls for post-project security management.
• Help customers implement and monitor compliance requirements and supporting documentation.
• Communicate findings and recommendations effectively to technical and business stakeholders.
• Build long-term customer relationships with practical guidance tailored to environment and business needs.
• Manage multiple engagements with clear priorities, progress updates, risks, and outcomes.
• Mentor colleagues and share cybersecurity knowledge and best practices.

Skills

Security risk assessments

Regulatory compliance knowledge

White‑box penetration testing

Security architecture design

Consulting & communication

Project & time management

Stakeholder management

Mentoring others

Travel-ready

English proficiency

Education

Security certification (CRISC/CISA/CISM/CISSP)

Tools

IBM i operating system

Job description

Whether you're an experienced professional or just getting started, your contributions matter at Fortra. If you're passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

We are seeking an experienced, client-focused Senior Security Services Consultant to join our team. In this role, you will serve as a trusted security advisor to customers, helping them identify and address security risks, strengthen their security posture, and meet evolving compliance requirements.

You will assess customer environments, design security solutions aligned with business and regulatory requirements, and guide customers through remediation and implementation initiatives. Combining deep technical expertise with strong consulting and communication skills, you will translate complex security challenges into practical, sustainable solutions.

As a senior member of the team, you will also share expertise, mentor others, and help customers adopt security practices and processes that enable them to manage their environments effectively beyond the initial engagement.

What You'll Do

• Conduct IT and information security risk assessments, identify security gaps, and provide clear, actionable recommendations for remediation.
• Design and recommend security solutions that align with customer requirements, internal security policies, and applicable regulatory or compliance obligations.
• Perform white-box penetration testing to identify vulnerabilities and security weaknesses and recommend appropriate remediation.
• Guide customers through security implementations and remediation initiatives related to requirements and frameworks such as PCI DSS, SOX, and HIPAA, as applicable.
• Assist customers in addressing findings from security assessments and audits and implementing new security technologies and controls.
• Advise customers on security architecture, operating system capabilities, configuration, and security best practices.
• Develop and implement sustainable processes and controls that help customers maintain appropriate security practices following project completion.
• Help customers implement and monitor compliance requirements, including applicable security and compliance solutions and supporting documentation.
• Communicate technical findings, risks, and recommendations effectively to both technical and business stakeholders.
• Build trusted, long-term customer relationships by providing practical guidance tailored to each customer’s environment and business needs.
• Manage multiple customer engagements and projects while maintaining clear communication regarding priorities, progress, risks, and outcomes.
• Mentor colleagues and educate customers and internal stakeholders on cybersecurity practices and emerging security considerations.
• Identify opportunities to improve consulting methodologies, assessment practices, documentation, and service delivery.
• Perform additional duties and contribute to security initiatives and projects as needed.

Qualifications

• 10+ years of professional experience working with the IBM i operating system.
• 10+ years of experience in information security, cybersecurity, enterprise risk, compliance, or a related discipline.
• Significant experience identifying and remediating security concerns discovered through formal risk assessments.
• Demonstrated experience with IT and information security risk frameworks, enterprise risk methodologies, and security risk assessment practices.
• Strong knowledge of regulatory, privacy, and security compliance requirements and their application within customer environments.
• Experience designing or assessing security architecture, infrastructure, systems, and applications.
• Hands-on experience conducting security assessments and testing, including white-box penetration testing.
• Experience supporting security or compliance initiatives involving standards and requirements such as PCI DSS, SOX, HIPAA, or similar frameworks and regulations.
• At least one relevant security, risk, audit, or governance certification, such as CRISC, CISA, CISM, CISSP, or equivalent.
• Strong consulting and communication skills, with the ability to translate complex technical and security concepts for business and technical audiences.
• Demonstrated ability to work independently, take ownership of customer engagements, and keep appropriate stakeholders informed.
• Strong project and time-management skills, including the ability to lead and coordinate multiple concurrent customer engagements.
• Proven ability to develop trusted, long-term customer relationships.
• Experience mentoring others and sharing cybersecurity knowledge and best practices.
• Ability and willingness to travel to customer sites as required.

This position requires proficiency in English to interact, support and/or provide services to non-French speaking customers, employees and/or partners inside and/or outside the province of Quebec.

We are an equal opportunity employer and encourage applications from candidates of all backgrounds.

We do not require Canadian work experience; all relevant experience will be considered. This posting is for an existing vacancy.

Expected Compensation

C$130,000 - C$150,000

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.