zensurance - Security Engineer (Remote First)

Remote - Toronto, ON1mo ago

Remote Senior NA Cybersecurity Software Cloud Computing Security Engineer AWS Reporting MBA

Requirements

• 5+ years of experience in Information Security. • Hands-on experience with information security frameworks: CIS Controls v8, NIST, ISO 27001, SOC 2, PIPEDA, or PCI. • Experience writing cybersecurity policies and conducting security gap analyses. • Experience translating business stakeholder needs into technical security requirements. • Experience with cloud security controls (AWS or equivalent). • Familiarity with security platforms such as CrowdStrike and Mimecast. • Experience working alongside legal, audit, and compliance teams. • Strong written and verbal communication skills — able to engage technical and non-technical audiences. • University degree or college diploma in Information Security, Cybersecurity, or a related field (or equivalent experience). • Bachelor's in Information Systems; MBA or MS in Information Security preferred. • Security certifications: CISSP, CISA, CISM, GIAC, CBCP, MBCI, or similar. • Experience in an agile, fast-paced environment.

Responsibilities

• Support and maintain the company-wide information security program, including policies, standards, and guidelines. • Facilitate IT risk assessments with business units and help define acceptable levels of residual risk. • Monitor the external threat environment and advise stakeholders on emerging risks. • Manage day-to-day threat and vulnerability management, including detection, response, and remediation. • Coordinate incident management and support disaster recovery and business continuity planning. • Liaise with engineering, IT, and enterprise architecture teams to embed security into system design and selection. • Produce regular reporting and metrics on program effectiveness for leadership and stakeholders. • Oversee security testing procedures and manage remediation of identified risks. • Ensure audit trails and system logs comply with policy and audit requirements. • Lead security awareness training across the organization.