Benefits

• Health Insurance (includes Virtual Health, and HCSA)

• Dental Insurance

• Vision Insurance

• Life Insurance

• Long-term Disability

• Short-term Disability

• RRSP Match

• Paid Vacation

• Floating Days

• Employee Assistance Program

• Employee Engagement Events

• Awards and Recognition

• Tuition reimbursement

• Service Awards

• Employee Perks & Discounts

Key Responsibilities

Security Operations & Threat Detection

• Monitor and investigate security events across networks, endpoints, servers, cloud platforms, and email
• Identify unauthorized access attempts, suspicious activity, and potential data exfiltration
• Review security logs and alerts to detect inappropriate access to sensitive, financial, or executive data
• Support and lead security incident triage, investigation, containment, and remediation

Data Protection, Governance & DLP

• Support the design and operation of Data Governance and Data Classification frameworks
• Monitor and investigate potential data loss or data misuse, including:
  • Large data transfers
  • Emailing sensitive data externally or to personal accounts
  • Unauthorized access to confidential or regulated data
• Support the implementation and tuning of Data Loss Prevention (DLP) controls across email, endpoints, cloud, and collaboration tools
• Partner with business teams to balance data protection with productivity

Project & Architecture Security

• Participate in IT and business‑led projects to ensure security and data protection requirements are defined and embedded
• Identify and document security and data risks introduced by new systems, integrations, or processes
• Recommend practical, risk‑based remediation options and compensating controls
• Provide security architecture guidance aligned to business needs

Governance, Risk & Compliance

• Contribute to security policies, standards, procedures, and guidelines
• Perform threat and risk assessments for key and critical systems
• Support audits and compliance activities (e.g., PCI, ISO 27001, internal audits)
• Track remediation actions and validate risk reduction outcomes

Incident Response & Resilience

• Support development and execution of incident response plans
• Participate in disaster recovery and business continuity testing
• Conduct post‑incident analysis and recommend control improvements

Education & Continuous Improvement

• Deliver security and data protection awareness sessions
• Develop and maintain security documentation and user guidance
• Identify opportunities to improve detection, response, and prevention capabilities
• Stay current with emerging threats, attack techniques, and defensive controls

Required Experience

• 5–8 years of experience in Cyber Security, Security Operations, or Incident Response roles
• Hands‑on experience with SIEM / logging platforms (e.g., QRadar, Splunk, ArcSight, Elastic)
• CISSP, CISM, or similar certifications
• Experience analyzing vulnerability data and managing findings using a risk‑based approach
• Strong background in security incident investigation and response
• Experience working with endpoint, network, and email security technologies
• Experience collaborating directly with IT, cloud, and business teams

Data Protection Experience (Must Have)

• Experience working with Data Classification, Data Governance, and/or DLP controls
• Understanding of how sensitive data flows across systems, email, cloud, and endpoints
• Experience investigating data‑related security incidents or policy violations

Nice to Have

• Experience with EDR, NDR, IPS, and advanced threat protection tools
• Knowledge of cloud security and SaaS platform
• Experience supporting regulatory or audit requirements