This is a flexible position and has the option of working in our Toronto office full time, hybrid throughout the week or working entirely remotely.

About the role:

Vena's Product Information Security Officer serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer and business information within our SaaS Product offerings in compliance with the organization's information security policies. The Information Security Officer will serve as the company's subject matter expert on information security related matters for both internal and external resources, and will partner with the VP, Data Privacy & Corporate Security and the Executive Leadership Team (ELT) to determine acceptable levels of risk for the organization and collaboratively develop policy and standards. This position is responsible for establishing and maintaining a comprehensive information security management program for our customer facing SaaS products to ensure that information assets and customer data is adequately protected. This includes the planning, organization and leadership of security, disaster recovery and related functions associated with information systems to ensure data confidentiality, data integrity, and data accessibility.

What you will do:

Build an awesome Product Security team of Security Professionals
Develop, implement and monitor a strategic, comprehensive Information security and Technology risk management program covering our SaaS market offerings, including physical, network, database and application, leveraging best practices
Review and approve all technical designs and implementation plans to ensure compliance.
Provide input on Policy and Standards developed in conjunction with our enterprise Risk team
Oversee the implementation of Information Security Controls and Policy based standards and the testing required to ensure robustness of the controls
Develops strategies and provides support for initiatives to continuously improve data security and assists in the development and regular testing of the business continuity and disaster recovery plans.
Mitigate security related risks and work with appropriate leaders across the organization to implement corrective actions. Initiate, participate in and/or lead audits to identify areas of vulnerability, and oversee the deployment, use, and maintenance of threat and vulnerability tools, including intrusion detection prevention, firewall, virus protection, encryption, user authentication, and audit logs.
Ensure that the architectural framework meets the company's information security needs
Work directly with the business units to enable our go-to-market teams to effectively communicate our security approach.
Develop and enhance an information security management framework
Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
Assist with the overall Product & Technology planning, providing a current knowledge and future vision of technology and systems

Does this sound like you?

Possess one or more of the following industry certifications:

CISSP / CISA / CISM
CCSP – Certified Cloud Security Professional
SABSA - Security Architecture
Other industry recognized Information Security certifications

Demonstrated knowledge of current cloud platforms, services and security best practices for their protection
Demonstrated knowledge and understanding of information security industry standards (e.g. ISO17799, ISO27001, NIST, COBIT, ITIL, etc), and legislative/regulatory requirements (e.g. SAS-70, SOX, B198, PIPEDA, etc)
Minimum of 7-10 years experience in information security including:

Security Management, Policy & Procedure development, Governance Frameworks, Security Programs
Experience working with MSS partners
Developing and implementing cloud security architectures
Risk Assessment, Risk Management
Security Architecture, IS Infrastructure Processes
Operational security (network architecture, application, systems)
Strong vendor management

Strong sense of teamwork
Proven track record of attracting, developing, retaining and motivating a high-performing team. A passion for building strong culture that aligns to Vena's CORE values
Thorough knowledge of multiple hardware platforms, operating systems, databases, application development platforms and software communications and network protocols, and common data security tools such as intrusion prevention
Knowledge of common information security management frameworks, such as ISO/IEC 27001, SOC, and NIST.
Extraordinary communication and interpersonal skills across all levels of the organization with demonstrated ability to influence cross-functionally
High degree of resourcefulness, flexibility, adaptability and innovation
The ability and desire to deliver results at both the strategic & operational level
An inquisitive nature with a passion for continuous improvement
Experience with contract and vendor negotiations and management including managed services.
Specific experience in Agile (scaled) software development or other best in class development practices.

Not checking every box?
Sounds like the job for you, but you don't think you have what it takes on paper? Reach out to us anyway! We're aware that members of marginalized groups typically apply only when they check every box. Vena is an inclusive workplace that considers all applicants. We value diversity—in professional backgrounds and in experiences—and are committed to providing equal opportunity and a sense of belonging for all employees and applicants. Let's discover together whether you could be a great fit at Vena.

Why choose Vena?

Total Rewards: Grow with Vena and celebrate its success with our Employee Stock Option Program (ESOP). We look ahead and invest in your future with our Retirement Savings Matching Program. We also provide comprehensive health benefits through our employer group plan effective from day one.
Unique Culture: Join us in our ongoing commitment to build a diverse and inclusive workplace. Every voice, action and idea matters at Vena.
Career Growth: We invest in your job training, professional development and continuing education and offer an Education Subsidy. Pursue your interests and chart your growth towards a new position on your current team or a new one. Vena had 180+ employee promotions and internal moves to new roles in 2021!
Executive Leadership: Be inspired by our executive leadership as they lead and motivate our team.
Read what employees say about working at Vena!
- Glassdoor
- Comparably
- Indeed

Please note: Due to COVID-19 Guidelines, all interviews will be conducted using Zoom. As we continue to monitor the situation and follow public health guidelines, our commitment to ensuring the safety and health of our employees, customers, candidates and community around the world remains a top priority. We will continue to offer flexible working arrangements that include working remotely or on site with proper safety and health measures in place.

Vena celebrates the differences that make us all unique and strives to make our workplace accessible however we can.

Should you require accommodation throughout any stage of the recruitment and selection process, please specify your requirements to careers@venasolutions.com when submitting your application and we will work with you to accommodate your needs.

We incorporate accessible practices into all of our internal roles and invite others to join us in our ongoing efforts. Find out more at www.venasolutions.com/va11y

Vena Solutions

New Jobs

Information Security Officer, Product