Senior Information Security Specialist

What you’ll do

The Senior Information Security Specialist is responsible for ensuring that enterprise data is secured and the delivery services in the areas related to data discovery, encryption, certificate and key management, data loss prevention and data loss protections (DLP) infrastructure support. The Senior Information Security Specialist will focus the team on securing enterprise data by ensuring that strong practices and procedures are in place, and that the right tools are utilized in the correct capacity for the job. They will work with Security Architecture, IT and business partners to execute on the roadmap and strategy for Data Protection as well as oversee the continuous improvement of data security capabilities. This role will involve an on-call component.

The ideal candidate is a life-long learner who enjoys continuous learning of new data loss threats, trends, and application of this knowledge to tools and processes. The candidate will work with the Data Protection team to ensure stakeholder alignment with protecting sensitive data across different technologies to prevent data loss at Canadian Tire.

The Senior Security Specialist will assist in providing Cryptographic and Data Loss Prevention services to our business partners. The successful candidate will provide leadership and be responsible for working with other Technology Teams, Audit, Compliance, Legal, PCI Compliance and Vendor Management teams to provide data protection capabilities to the organization.

• Responsible configuring, maintaining, and enhancing solutions around PKI and Certificate Management processes and operations

• Responsible configuring, maintaining, and enhancing Data-at-Rest Encryption solutions

• Acts as Administrator for all cryptographic key activities

• Participates in Cryptographic reviews with businesses

• Develop and produce regular reporting and metrics in relation to Certificate and Key Management

• Development and maintenance of KPIs, KRIs, and SLAs

• Responsible for configuring, maintaining, and enhancing the Data Loss Protection (DLP) platform

• Manage creation and documentation of cryptography processes

• Provide technical support on all aspects of DLP technologies

• Proactive monitoring and maintenance of the DLP platform

• Daily operations relating to DLP such as Incident Triage, Discovery Scanning and Escalations

• Hands-on experience on Data Protection tools and technologies such as CASB, Data Classification tools etc.

• Provide support and further information to aid in investigation of DLP incidents where required

• Act as an expert in cyber security incident resolution and analysis

• Participate in projects and work with the Project team to support ongoing activities and project deliverables

• Assist team colleagues and be a point of contact for queries on aspects of cryptography, data protection tools, technology, and process

• Investigate and respond to critical end-point security incidents

• Assist in the coordination and completion of information security operations documentation

• Develop security processes and procedures and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained

• Propose corrective measures to ensure compliance with stated security standards

• Maintain security by monitoring and ensuring compliance to standards, policies, and procedures

• Analyze data trends to make informed decisions based on risks identified

• Implement cybersecurity and privacy principles in alignment with organizational requirements

• Collaborate with stakeholders, gaining a comprehensive understanding of their expectations, ensuring data is stored and protected appropriately

What you bring

• Minimum of 5 years' experience in Information Security

• Bachelor’s degree from an accredited college or university or equivalent experience

• Key Management Life Cycle - Key Generation, Storage, Distribution, Backup, Rotation, Revocation, Destruction etc.

• Hands on experience and knowledge of TLS, PKI, HSMs, KMIP, and Digital Certificate Management

• Knowledge of, or hands-on experience with security technologies similar to Data Loss Prevention (DLP)

• Must have at least one, preferably more of the following Security certification GIAC, CISSP, CISM, CISA, CEH

• Some Experience with Multiple Technologies Including: DLP Tools, MS Defender, CASB Solutions & MDM Solutions            

• Some Windows/Linux administrator experience

• Experience