GoRight Fleet Solutions Inc. continues to grow, and we want you to grow with us!

We are seeking a talented and highly motivated Information Security Engineer to work out of our Mississauga location. If you are ready for your next challenge, we want to hear from you.

The ideal candidate will be responsible for security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance standards and regulations, and recommend mitigation strategies.

GoRight is a leader in the transportation maintenance industry and one of Ontario’s preferred employers, which offers employees:

Industry leading pay structure
Comprehensive Benefits - featuring 100% medical and dental, vision, AD&D, Life and Dependent Life Insurance and affordable STD/LTD premiums
RRSP program including employer matching
Employee Assistance Plan offering great membership perks at retailers
Open, inclusive culture
On Demand Pay
CareerPath™ personal and professional development
Opportunities for career advancement

GoRight knows its employees are the backbone of our operation. That's why we invest in and support our team to help them grow within the company.

Responsibilities:

Proactively guide our teams with technical recommendations and best practices.
Assess the current company situation, evaluating trends and anticipating security requirements.
Analyze IT specifications and overall security risk, implementing appropriate security measures, and responding to security incidents.
Understand and discuss applicable controls of Policies, Standards, and processes.
Determine security violations and inefficiencies by conducting periodic audits.
Assist in the development of the Information security policies and procedures.
Identify and solve potential and actual security problems.
End to End Security Assessment Framework, Security Testing, Reporting, Recommendation and Revalidation to close all identified Security Gaps.
Assist in Risk assessment to identify Information security risks, threats, and vulnerabilities related to information assets.
Identify and document controls using risk-based and business impact assessment to mitigate risks.
Assist in selection of appropriate awareness techniques for awareness programs, perform regular awareness events for internal staff.
Automated and Manual Security Testing experience
Experience in presenting weekly/monthly executive reports
Strong knowledge of Web Application Security Testing, patch management process and Secure Code Review
End to End Security Assessment Framework. Security Testing, POC reporting, Recommendation and Revalidation to close all identified Security Gaps
Coordinating with other Departments to report identified vulnerabilities, providing recommendations and follow up to closure

Qualifications:

Degree in Computer Science, Information technology or related field
Minimum of 3 years of experience in a Cyber Security role
Strong understanding of information security principles
Knowledge in cybersecurity architecture, design, and experience into SOC and NIST frameworks
Hands on Experience in Vulnerability Assessment (VA) and Penetration Testing (PT)
Up to date with the latest IT security trends in order to protect the organization effectively
Understanding of Cyber Security concepts including Antivirus, EDR, SIEM, IDS, IPS, Firewall, Web Gateway, Email Gateway, WAF, DDOS Protection, Honeypot, Sandbox, Email Security, DLP, MFA/2FA, MDM, Patch Management, Vulnerabilities scanner, Threat Intelligence, OSINT, Attack patter, TTPs, IOC, Malware Analysis etc.
Vulnerabilities, incident, and risk assessment management
Strong knowledge of Threat Modeling, and System and Network Hardening
Experience in the development of policies, procedures, and best practices
Strong analytical, interpersonal and communication skills
Lead SOC2, ISO and NIST certification processes.
Experience with CISSP, CISA, OSCE, CISM, CRISC or ISO 27001 Lead Implementer would be an asset

#GoRightEP

Job Types: Full-time, Permanent

Benefits:

Company events
Dental care
Employee assistance program
Extended health care
Life insurance
Paid time off
RRSP match
Vision care

Schedule:

8 hour shift
Day shift
Monday to Friday

Application question(s):

Are you legally entitled to work in Canada? If yes, are you a Canadian Citizen, Permanent Resident or have a valid work Visa?
What is your expected salary range for the position?
Do you have work experience with creating security policies, run phishing campaigns and know how to work with B2C active directory setup? Please explain.
Do you know how to setup Azure Threat Protection?
Are you able to work in the office 5 days a week, Monday to Friday?

Licence/Certification:

G Class License (preferred)

Work Location: One location

GoRight Fleet Solutions Inc.

New Jobs

Information Security Engineer