Description:

We are looking for a senior resource to perform the role of Senior Cybersecurity Specialist to work with the Enterprise Information Security leadership and cybersecurity business lead to define outcomes, develop requirements and lead security projects that address risks and business security requirements, with a focus on protecting digital assets.

This role will require significant cross-functional collaboration and is critical in supporting the fundamental elements of the Enterprise Information Security strategy and team operations. The Cybersecurity Specialist will maintain open lines of communications with business and technology units to understand their plans and how information security can securely enable them to execute their vision and business obligations. This role leads initiatives to protect digital assets (for example, by defining access privileges, control structures and resources; defining endpoint hardening configurations for workstations, servers, and hypervisors in accordance with best practice and industry standard baselines).

The successful candidate is an expert in cloud security, with significant solution development and technology infrastructure experience. Strong problem solving, communication and consulting skills to influence and advise all levels of the organization (technology and business teams) on the security practices associated with protecting digital assets and managing information security risks. As senior specialist, adepts at understanding business focus and processes and ability to inject cybersecurity into the business through teamwork and influence. The Senior Cybersecurity Specialist has a high level of integrity, trustworthiness and confidence, and is able to represent the company and security leadership with the highest level of professionalism. They will lead by example.

Responsibilities:

• Act as a key point of contact with business and technology stakeholders for protecting digital assets program, clarifying security control requirements, defining key performance indicators (KPIs) and metrics aligning with business initiatives and deliver to non-technical teams in terms that are readily comprehensible.

• Lead and support independent verification and validation testing of the company networks, application and data protection through internal team resources and independent consulting engagements - oversee testing and validation of security controls across projects.

• Provide support, including mentoring, to information security analysts for strategies and implementation of security controls - improve risk management for Access Management, Data Privacy & Protection, Application penetration tests (SAST/DAST), and Infrastructure Security (including cloud – Azure).

• Manage outsourced vendors that provide services for protecting digital assets domain - for compliance with contracted deliverables/outcomes and service-level agreements.

• Participate in assessment, procurement, configuration and maintenance of solutions such as security information and event management (SIEM) systems, user and entity behavior analytics (UEBA), identity and access management (IAM), deception technologies, vulnerability management and code analysis.

• Be highly involved with IT security programs to confirm the company’s systems are fully compliant with all applicable regulatory requirements and privacy laws.

• Data-driven decisions: draw heavily on your experience collecting, analyzing, and summarizing data from a variety of sources to create compelling written and verbal communications.

• Research, evaluate, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical expertise for the administration of security tools.

• Serve as a team lead and point of contact for incident response analysts, security operations center (SOC) analysts and application engineers.

• Assist with cybersecurity services roadmaps and communications disseminated throughout the organization.

Additional Skills & Qualifications:

• At least two years cloud computing (e.g., Microsoft Azure Cloud Platform ) security configuration and management experience preferred.

• Industry recognized security certifications. (Eg. CISSP, CISM, CEH, Security+, etc.).

• Practical experience with Security risk management and threat modeling.

• Strong project management and experience working with teams using agile methodology.

• Ability to communicate fluently in business environment in both official languages (French and English).

Experience Level:

Expert Level

Allegis Middleware Test Company

New Jobs

Cybersecurity Specialist