Sr. Security Services Consultant

Fortra-2; Ontario (CA); On-site; USD 93,000 - 107,000; Full time

Job summary

Fortra seeks a Senior Security Services Consultant to serve as a trusted advisor, assessing client environments and guiding remediation to strengthen security and compliance. You will design solutions aligned with frameworks such as PCI DSS, SOX, and HIPAA, and translate complex findings into actionable plans.

You will lead security assessments, mentor others, and help customers adopt effective security practices while managing multiple engagements and travel to client sites as needed.

Qualifications

• 10+ years of professional experience with IBM i operating system.
• 10+ years of information security, cybersecurity, enterprise risk, or related discipline.
• Experience with IT/security risk frameworks and enterprise risk methodologies.
• Familiarity with PCI DSS, SOX, HIPAA and similar regulatory requirements.
• Experience designing or assessing security architecture, infrastructure, systems, applications.
• Hands-on security assessments and testing, including white-box testing.
• Ability to mentor colleagues and manage multiple engagements.

Responsibilities

• Conduct IT and information security risk assessments and provide actionable remediation recommendations.
• Design security solutions aligned with regulatory requirements and client needs.
• Perform white-box penetration testing and guide remediation efforts.
• Assist customers with security implementations related to PCI DSS, SOX, HIPAA and similar frameworks.
• Develop sustainable security processes and controls post-engagement and monitor compliance.
• Communicate findings clearly to technical and business stakeholders.

Skills

IT risk assessment

Security consulting

Penetration testing

Regulatory compliance

Security architecture

Certifications (CRISC, CISA, CISM, CIS

Education

CRISC

CISA

CISM

CISSP

Job description

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!We are seeking an experienced, client-focused Senior Security Services Consultant to join our team. In this role, you will serve as a trusted security advisor to customers, helping them identify and address security risks, strengthen their security posture, and meet evolving compliance requirements.You will assess customer environments, design security solutions aligned with business and regulatory requirements, and guide customers through remediation and implementation initiatives. Combining deep technical expertise with strong consulting and communication skills, you will translate complex security challenges into practical, sustainable solutions.As a senior member of the team, you will also share expertise, mentor others, and help customers adopt security practices and processes that enable them to manage their environments effectively beyond the initial engagement.WHAT YOU'LL DOConduct IT and information security risk assessments, identify security gaps, and provide clear, actionable recommendations for remediation.Design and recommend security solutions that align with customer requirements, internal security policies, and applicable regulatory or compliance obligations.Perform white-box penetration testing to identify vulnerabilities and security weaknesses and recommend appropriate remediation.Guide customers through security implementations and remediation initiatives related to requirements and frameworks such as PCI DSS, SOX, and HIPAA, as applicable.Assist customers in addressing findings from security assessments and audits and implementing new security technologies and controls.Advise customers on security architecture, operating system capabilities, configuration, and security best practices.Develop and implement sustainable processes and controls that help customers maintain appropriate security practices following project completion.Help customers implement and monitor compliance requirements, including applicable security and compliance solutions and supporting documentation.Communicate technical findings, risks, and recommendations effectively to both technical and business stakeholders.Build trusted, long-term customer relationships by providing practical guidance tailored to each customer’s environment and business needs.Manage multiple customer engagements and projects while maintaining clear communication regarding priorities, progress, risks, and outcomes.Mentor colleagues and educate customers and internal stakeholders on cybersecurity practices and emerging security considerations.Identify opportunities to improve consulting methodologies, assessment practices, documentation, and service delivery.Perform additional duties and contribute to security initiatives and projects as needed.QUALIFICATIONS10+ years of professional experience working with the IBM i operating system.10+ years of experience in information security, cybersecurity, enterprise risk, compliance, or a related discipline.Significant experience identifying and remediating security concerns discovered through formal risk assessments.Demonstrated experience with IT and information security risk frameworks, enterprise risk methodologies, and security risk assessment practices.Strong knowledge of regulatory, privacy, and security compliance requirements and their application within customer environments.Experience designing or assessing security architecture, infrastructure, systems, and applications.Hands-on experience conducting security assessments and testing, including white-box penetration testing.Experience supporting security or compliance initiatives involving standards and requirements such as PCI DSS, SOX, HIPAA, or similar frameworks and regulations.At least one relevant security, risk, audit, or governance certification, such as CRISC, CISA, CISM, CISSP, or equivalent.Strong consulting and communication skills, with the ability to translate complex technical and security concepts for business and technical audiences.Demonstrated ability to work independently, take ownership of customer engagements, and keep appropriate stakeholders informed.Strong project and time-management skills, including the ability to lead and coordinate multiple concurrent customer engagements.Proven ability to develop trusted, long-term customer relationships.Experience mentoring others and sharing cybersecurity knowledge and best practices.Ability and willingness to travel to customer sites as required.This position requires proficiency in English to interact, support and/or provide services to non-French speaking customers, employees and/or partners inside and/or outside the province of Quebec.We are an equal opportunity employer and encourage applications from candidates of all backgrounds.We do not require Canadian work experience; all relevant experience will be considered. This posting is for an existing vacancy.Expected Compensation : C$130,000 – C$150,000Ready to join us? Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.