Specialist, IT Security

Are you looking for more than a job? At World Vision Canada we offer challenging careers that change the lives of children all over the world and it will change yours too. Come and be part of a team of 400 Canadians with a vision for the world: Life in all its fullness for every child.

You will experience Christian faith in action helping to make real and lasting change in the lives of the world’s most vulnerable children. Join the World Vision Canada team and be part of a powerful and effective force for good:

For Children. For Change. For Life.


Position: Specialist, IT Security
Reports to: Vice President, Enterprise Technology and Transformation
Position Term: Full Time Permanent
Primary Location: Mississauga, Ontario, Canada
Workplace Type: Hybrid


Job Purpose
Reporting to the Vice President, Enterprise Technology and Transformation, the Specialist, IT Security will oversee the planning, execution, and management of multi-faceted projects related to IT compliance, control assurance, risk management, security, and infrastructure/ information asset protection.

The Specialist, IT Security will be responsible for developing and managing enterprise IT security across multiple IT functional areas (e.g., data, systems, network and/or Web), developing and managing enterprise security services, and developing security solutions for critical and/or highly complex assignments to ensure the company’s infrastructure and information assets are protected.


Responsibilities

Strategies, Policies and Risk Management
• Plan, execute, and manage IT projects related to compliance management, risk assessment and mitigation, control assurance, business continuity and disaster recovery, and user awareness
• Develop and drive security strategies, policies/standards, ensuring the effectiveness of solutions, and providing security-focused consultative services to the organization
• Develop, execute and manage data, system, network and internet security strategies and solutions across the enterprise
• Define and develop security policies and procedures such as user log-on and authentication rules, security breach escalation procedures, security auditing procedures and use of firewalls and encryption routines
• Guide the enforcement of IT security policies and procedures
• Manage and enforce Identity and Access Management (IAM) and Privilege Access Management (PAM) policies, including multi-factor authentication (MFA)
• Update, maintain and document security controls and provide direct support to the business and internal IT groups
• Evaluate and recommend security products, services and/or procedures
• Communicate and educate IT and the business about security policies and industry standards, and provide solutions for enterprise/business security issues
Analysis & Response
• Work with and provide guidance to technical teams, as they perform infrastructure, application and code scans as well as Penetration Tests (PEN) tests in order to uncover vulnerabilities within the WVC IT systems topology
• Analyze vulnerabilities found through Vulnerability (VA) scans and PEN tests and propose remediation strategies
• Influence delivery teams to align to the WVC security directives and provide guidance and strategies to integrate into the delivery lifecycle
• Manage data security profiles on all platforms by reviewing security violation reports and investigating security issues and exceptions
• Administer and optimize security tools, including SIEM, endpoint protection (EDR/XDR), firewall/VPN technologies, and intrusion detection/prevention systems (IDS/IPS)
• Document all IT security incidents and assess their actual or potential damage to WVC
• Liaise between WVI Security group and WVC with respect to IT security policy, process, procedures, training and communication
• If any security incidents should occur, work with the Infrastructure Operations/DevOps team to document the “lessons learned” and manage the implementation of improvements to existing processes/procedures/best practices or the creation of new processes/procedures/best practices if they do not already exist
• Ensure the Chief, Information Officer & VP, Enterprise Technology & Transformation are provided with weekly/monthly/quarterly and annual security reports
Cyber Security Solutions Delivery
• Develop and implement solutions to alleviate risks and enhance system security and support teams as a technical expert for the project, system or solution they are working on
• Implement network, server, website, application, and Data/Information security improvements for cloud, hosted, and on/off premise solutions, by assessing current situation; evaluating trends; anticipating requirements and making rec