Senior Security Specialist

The Senior Security Specialist is a key player responsible for spearheading initiatives to identify, investigate, communicate, resolve, and improve information security governance, risk and compliance in our IT investments.

What You’ll Do
You will partner with across the organization, including Technology, Enterprise Risk Management, Internal Audit, PCI Compliance, Vendor Management and other stakeholders to assess cybersecurity risks for the organization, including vulnerabilities, while helping teams determine mitigation strategies to maintain and/or reduce the residual risk of the organization. Sounds like a lot? Well, there’s more:

Be the champion in risk assessment of technologies and processes in the environment, including our digital crown jewels and other compliance impacting technologies and processes

Understand and collaborate with stakeholders for prioritizing and mitigating vulnerabilities identified within the environment through vulnerability assessment, penetration testing, application security testing and/or any other risk assessment activity

Following up on vulnerabilities, configuration and cloud gaps and track remediation

Help further mature existing vulnerability management program

Connect the dots to improve and enhance risk assessment processes

Assess third-party risk on the use of vendors for day-to-day operations

Provide oversight, reporting, and metrics on risk functions.

Anticipate risk and assist owners in building action plans for risk mitigation

Review risk assessments of non-senior team members and peers

Validating operating effectiveness of IT general controls

Maintaining risk and controls repositories and documentation

Providing support for policy exception management procedures

Assisting with metrics and reporting

What You Bring

University degree or college diploma in technology

Possess one or more professional certifications, such as CISSP, CISM, CISA, CCSP, CRISC etc.

Overall 5+ years of experience in information technology and/or information/cyber security

Good knowledge and understanding of risks, audits and processes relating to Information/Cyber Security and IT

Excellent communication skills

Good documentation and presentation skills

Creative thinker who takes initiative

Problem solver with the ability to analyze and prioritize to meet business objectives

Collaborative team player with superior influencing skills, who builds relationships easily

Organized individual who is always seeking to automate or improve efficiency of procedures

Creative thinker who is observant to seek new opportunities and perceptive to abstract ideasl

Goal driven individual to seek out continuous improvement opportunities

The ability to take a collaborate approach to build strong relationships and have positive team experiences

Good knowledge/understanding and experience of vulnerability and configuration management procedures and how those impact an organization

Good knowledge and understanding about penetration testing and application security testing, including SAST, DAST and SCA

Some application development experience in professional setting is preferred

Flexible and dynamic individual who is able to adjust and prioritize accordingly to adapt to business demands and requirements

Solid foundation of relevant technical skills

Good scripting skills using Python or similar tools

We’re always looking for great talent! In addition to competitive pay, we offer:

Comprehensive benefits and retirement programs

Performance incentives, Continuing Education Programs

Other perks to support your well-being

Career growth opportunities and product discounts

Our typical hiring range is between $64,000.00 and $ per annum. Salary decisions are also dependent on other factors such as your experience, job-related knowledge, skills and competencies, market location, industry benchmarks, internal equity and other role-specific requirements. We're committed to attracting top talent. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.

This posting represents an existing vacancy within our organization.

About Us
At Canadian Tire…