Manager, Enterprise Information Security Full Time Permanent

VTRAC Consulting Corporation
Intelligent Solutions
Thank you for applying to VTRAC opportunities. Please e-mail your resume as a MS-WORD document in confidence Subject: Manager, Enterprise Information Security (Hybrid), Attention: [email protected] or call: (647) 254-0904
Position#:                      23027

Position:                        Manager, Enterprise Information Security (Hybrid)

Position Type:               Permanent
No. of Positions:           1
Location:                      GTA, ON

About the company:

Are you ready for leading a growing information security team?

We’re offering an exhilarating opportunity for a dynamic individual to lead our client’s Information Security team as their Manager, Enterprise Information Security. If you’re passionate about safeguarding digital frontiers, envisioning innovative security strategies, and steering a team towards excellence, this role promises an exciting journey and autonomy ahead. We are seeking a leader who can enhance the security of our digital assets and navigate the ever-advancing cybersecurity landscape. Join us at this exciting juncture and be part of our journey towards further expansion and innovation.

What We Offer:

• A hybrid work environment: You will typically work two days a week, ideally on Mondays and Wednesdays, ensuring focused and effective leadership.
• Competitive compensation package including health and dental benefits, and a bonus.
• Immediate health and dental benefits.
• Company pension plan with matched contributions.
• Associate vehicle discount program.
• Professional growth and development programs, including tuition reimbursement.
• Fitness reimbursement.
• Paid holiday shutdown and competitive paid time off benefits.
• Summer Hours – condensed work week during the summer.

Position Summary:

As the Manager, Enterprise Information Security, you will be tasked with building a comprehensive framework for information security within the organization. You will play a pivotal role in securing our digital assets and defining the future of our information security landscape. You will lead a team of skilled information security professionals, including security architect, engineers and analysts, safe guarding the organization against evolving cyber threats.

Your responsibilities will include approximately: management (40%), security operations review (30%), governance and risk assessment (20%), and architecture review (10%). You will be instrumental in creating a robust security frame work and practices, starting with conducting gap analyses, and setting goal-oriented objectives based on real evidences.

Key Responsibilities:

• Strategic Leadership: Develop and deliver an enterprise information security strategy and roadmap, establishing best practices for our information security architecture.
• Risk Management and Incident Response: Implement a robust security framework to assess and manage technological risks, conducting TRA/PIA assessments during project delivery cycles. Prior experience in risk management and incident response is of paramount importance. You will be responsible for leading the process in identifying, assessing, and mitigating security risks, as well as orchestrating swift responses to security incidents.
• Compliance Assurance: Ensure ongoing compliance with company’s and regulatory security and risk requirements, safeguarding the integrity of our brand.
• Technology Standards: Create and maintain technology standards for the organization, fostering a culture of security excellence.
• Security Architecture: Actively mature the security architecture capability to protect our enterprise’s information assets.
• Data Quality and Control: Develop and maintain controls for data quality, interoperability, and sources to effectively manage corporate risk.
• Collaboration: Collaborate with key business and IT leaders to establish security and business continuance standards and action plans. Ultimately work closely with the architecture and innovation leaders to drive technology and innovation within the organization.
• Audits and Threat Management: Direct all security audits and tasks to maintain the confidentiality, integrity, and availability of information. Stay informed about new threats and vulnerabilities.
• Security Platforms: Lead the design and implementation of security platforms and associated software, ensuring the security of on-premises and cloud solutions.
• Third-party Oversight: Oversee third-party security and compliance audits and facilitate remediation actions as needed.
• Planning and Improvement: Your strategic planning skills will be key to driving continuous improvement in our security practices. You will oversee critical areas such as telematics, infrastructure, and identity management.

Qualifications:

• Experience: 12+ years of overall IT and business/industry work experience, with a minimum of 8 years in information security, including consulting experience.
• Leadership: 3 years of leadership experience in managing the information security function (matrix or direct reporting structure).
• Security Expertise: Strong background in security architecture and operations is mandatory.
• AI for Security: experience in AI in Security and automation is an asset
• Strategy Development: Experience in developing security strategies, ideally in retail, wholesale, automotive, or manufacturing settings.
• Cloud Security: Understanding of in securing on-premises and cloud solutions (IaaS/PaaS/SaaS).
• Frameworks: Familiarity with common information security management frameworks, such as ISO 2700x, COBIT, or NIST.
• Exposure to Adobe, Salesforce and E-Commerce secure environment is an asset
• Technical Knowledge: Strong understanding of information security concepts, standards, practices, including firewalls, intrusion prevention and detection, TCP/IP, device monitoring, and log management.
• Communication: Excellent communication and interpersonal skills.
• Management: Strong management and team-building skills.
• Problem-solving: Effective problem-solving, negotiation, and decision-making skills.
• Certification: CISSP certification is mandatory.
• Education: University Degree in Computer Science, Information Systems, Business Administration, or related disciplines.

We thank all candidates in advance. Only selected candidates for interviews will be contacted. For other exciting opportunities, please visit us at www.vtrac.com. VTRAC is an equal opportunity employer.

Toronto                   .           New York                  .            Miami                    .           Houston                   .              Palo Alto   

Tagged as: 2700x, CISSP, COBIT, NIST, TCP/IP