BenchSci

BenchSci is a remote first organization. At this moment, we are welcoming applicants from Canada, the US and the UK for this position. BenchSci's vision is to help scientists bring novel medicine to patients 50% faster by 2025. We empower scientists to run more successful experiments with the world's most advanced, biomedical artificial intelligence software platform. Backed by F-Prime, Inovia, Golden Ventures, and Google's AI fund, Gradient Ventures, we provide an indispensable tool for scientists that accelerates research at 16 top 20 pharmaceutical companies and over 4,300 leading academic centers. We're a certified Great Place to Work®, and top-ranked company on Glassdoor.We are looking for a Senior Security Engineer to join our growing Infrastructure &amp; Security team! Reporting to the team’s Engineering Manager, you will help validate that BenchSci's services are implemented to the highest security standards. You will also analyze the security of applications and services, discover and address security issues, build security automation, and quickly react to new threat scenarios. Importantly, you will take the lead on all security-related matters and help us to ensure that all classified client data is kept confidential.
<h3>You Will:</h3>
<ul>
<li>Perform application security reviews</li><li>Drive outcomes with stakeholders to improve our application security posture</li><li>Create application security guidance and best practices documentation </li><li>Build and manage tools and libraries to help developers create secure software</li><li>Champion security at BenchSci</li><li>Maintain and improve the GDPR and SOC2 security compliance tracking and remediation efforts</li><li>Triage and drive resolutions for security vulnerabilities in the BenchSci Platform</li><li>Lead security engagements like third-party penetration tests and tabletop exercises</li><li>Uncover infrastructure and application level vulnerabilities as part of internal audits</li><li>Conduct system design reviews and guide engineers in building security into our architecture</li></ul>
<h3>You Have:</h3>
<ul>
<li>4+ years working as a software engineer with at least 2 years of experience in security </li><li>Experience in dealing with internal/external security audits and penetration tests</li><li>Experience with any combination of the following: threat modelling experience, secure coding and SDLC practices, OWASP Top 10 application security risks, and network security</li><li>An understanding of network and web-related protocols (such as TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols)</li><li>Experience configuring and tuning application security testing tools (SCA, SAST, and DAST)</li><li>An understanding of web services and an ability to reason the application code that drives them</li><li>Experience with Infrastructure as Code tools such as Terraform, CloudFormation or Config Connector</li><li>Knowledge of industry security frameworks like the CIS Benchmarks or OWASP ASVS</li><li>A background in security and compliance audits such as GDPR and SOC2</li></ul>
<h3>Nice to haves, but not required:</h3>
<ul>
<li>Experience in penetration testing</li><li>Experience in securing GCP or AWS environments</li><li>Experience in Python</li><li>Experience with Kubernetes</li></ul>Benefits and Perks:An engaging remote-first culture A competitive compensation package that includes BenchSci equity optionsComprehensive health and dental benefits Emphasis on mental health with $2500 CAD (or equivalent in your country’s currency) for Psychologist, Social Worker, or Psychotherapist servicesThree weeks of vacation plus an additional day for every completed yearUnlimited flex time to use toward sick days, personal days, religious holidays, birthdays and appointmentsAdditional time-off: 2 weeks for Winter Holidays, every other Friday in July and August, your birthday, and more!Generous parental leave benefits with a top-up plan or paid time off optionsA $2000 CAD (or equivalent in your country’s currency) Annual Learning &amp; Development budgetA $1000 CAD (or equivalent in your country’s currency) work from home allowance to make your home setup perfect for youA lifestyle spending account for employees to receive reimbursement for eligible expenses related to wellness, lifestyle and productivity $2500 CAD  (or equivalent in your country’s currency) per yearOur Culture:At BenchSci, we’re committed to cultivating an inspiring, inclusive, and equitable work environment for high performing, ego-free, self-starting individuals with a growth mindset, who enjoy the challenge of solving hard problems. We recognize that everyone here is a person first and an employee second. We want people to feel cared for and supported to bring the best versions of themselves to work and help the company achieve its mission. We believe culture is critical to success and invest accordingly. We live and promote our FASTT values of Focused, Advancement with Speed, Tenacity, and Transparency. We work hard to maintain an engaging, supportive environment where everyone can do their best work. To learn more, read our culture deck.Diversity, Equity and Inclusion:We're committed to creating an inclusive environment where people from all backgrounds can thrive. We believe that improving diversity, equity and inclusion is our collective responsibility, and this belief guides our DEI journey. To learn more, read about our DEI initiatives.Accessibility Accommodations:BenchSci provides accessibility accommodations during the recruitment process. Should you require any accommodation, we will work with you to meet your needs.BenchSci is a remote first organization. At this moment, we are welcoming applicants from Canada, the US and the UK for this position. #LI-Remote

Ottawa

Senior Software Engineer, Security (Remote)

Lightspeed Commerce

Hi there! Thanks for stopping by 👋
Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!
We are looking for a Senior Information Security Engineer to join our team. Within the Security team, you will improve the robustness of our security engineering practices, tools and product while building a healthy security culture across Lightspeed. 
The Security team at Lightspeed is responsible for shepherding Lightspeed’s approach to all aspects of Trust &amp; security. Our mission is to cultivate trust with people by keeping their data and systems resilient to threats. As a Senior InfoSec Engineer, you will play a key part in Lightspeed’s continued efforts to cultivate that trust with our staff, retailers and consumers around the world.  In this role, you will need to stay on top of the latest threats, technologies and trends that are relevant to us in order to keep our data and systems resilient to threats.
<h3>Your responsibilities:</h3>
<ul>
<li>Implementing and maintaining security solutions to better protect the organization.</li>
<li>Ingest and parse security events from multiple sources.</li>
<li>Improve detection workflows with automation and alert enrichments.</li>
<li>Develop, apply, and refine/tune threat detection rules</li>
<li>Develop and automate incident response playbooks.</li>
<li>Analyze data from disparate sources, correlating noise into security events.</li>
<li>Write detection rules to identify threats specific to our environment.</li>
<li>Share knowledge and experience with peer teams.</li>
<li>Develop, document and implement processes for operationalization of security services.</li>
<li>Maintain and deliver metrics for measurable results and continuous improvements.</li>
<li>Participate and assist in investigating and responding to an incident.</li>
<li>Identify, define and document system security requirements and recommend solutions.</li>
<li>Participate in PoC’s and tool evaluations.</li>
</ul>
<h3>What you need to bring:</h3>
<ul>
<li>Enthusiasm for staying up to date with the very latest updates about security threats and solutions.</li>
<li>Expertise across a variety of security products including but not limited to SIEM, Log Management, Security Data Lake, SOAR, Threat Intelligence.</li>
<li>Engineering/Builder/Problem Solver mindset</li>
<li>Development and scripting experience for automation. (Python, Bash)</li>
<li>Strong technical experience in cloud technologies, log collection best practice within various environments. (AWS and GCP)</li>
<li>Experience working closely with architects and Engineering groups.</li>
</ul>
<h3>What’s in for you?</h3>
<ul>
<li>Lots of autonomy, flexible work culture and possibility of remote work</li>
<li>Development of very high traffic products, used at the global scale </li>
<li>Exposure to modern and proven technology </li>
<li>Tons of growth opportunities into technical or people management roles</li>
<li>Full suite of benefits &amp; perks, including equity for all Lightspeeders</li>
<li>Opportunity to join a fast-paced, high-growth company</li>
<li>Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story.</li>
</ul>To all recruitment agencies: Lightspeed does not accept unsolicited agency resumes. If we have not directly engaged your company in writing to supply candidates for a specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes.
Where to from here?Obviously, this has to be mutually beneficial: we want you to step into a role you love, and we want to offer you a place you’re proud to come to every day. For a glimpse into our world check out our <a href="https://www.lightspeedhq.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">career page here</a>.
Lightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal’s gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs.
Who we are: Powering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks.
Founded in Montréal, Canada in 2005, Lightspeed is dual-listed on the New York Stock Exchange (NYSE: LSPD) and Toronto Stock Exchange (TSX: LSPD). With teams across North America, Europe, and Asia Pacific, the company serves retail, hospitality, and golf businesses in over 100 countries.

Senior Information Security Engineer

Hi there! Thanks for stopping by 👋
Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!
We are looking for a Staff Application Security Specialist to join our team. Within the Security team, you will improve the robustness of our security engineering practices, tools and product while building a healthy security culture across Lightspeed. 
In this role you will be providing support to deliver the Information Security program by leading and empowering a team of information security subject matter experts, and collaboratively working with various Lightspeed business functions. You will be managing the maturation of the security and compliance program, delivering alignment with the Information Security requirements in support of Lightspeed business objectives.
You will be responsible for:
<ul>
<li>ascertaining the level of security and reliability of the assets</li>
<li>supporting application security services</li>
<li>automating security tasks throughout the software development lifecycle</li>
<li>mentoring, training stakeholders on application, infrastructure, mobile, network security risks and security concepts</li>
</ul>
We’re not an ordinary company, so we don’t expect you to be either. If you love learning new stuff and enjoy digging into hard work - keep on reading!
We’re passionate about enabling people to do their best work. We dream big and we’re looking for people who do the same. With us, career milestones happen often and we celebrate every one. Come work with us and find out where your career will take you at Lightspeed!
We are a lean, multidisciplinary team driving to be progressive in our approach to security and the security culture at Lightspeed. Our mission is to cultivate trust with people by keeping their data and systems resilient to threats.
Primary Responsibilities
<ul>
<li>Be a subject matter expert to engineers empowering them to prevent weaknesses before they are shipped to our retailers</li>
<li>Write code to develop security tools and libraries, to help integrate security early into the software development lifecycle</li>
<li>Perform code reviews and penetration testing on our internal and external applications</li>
<li>Help manage vulnerability reports from external security researchers through our bug bounty program</li>
<li>Threat model existing applications</li>
<li>Drive our secure SDLC program with product development teams ensuring secure coding practices, SAST, DAST, and pentesting activities occur consistently and remediations are prioritized</li>
<li>Balance security risk and product advancement</li>
<li>Assist in incident response when a security event occurs</li>
</ul>

Requirements
<ul>
<li>Technical knowledge of security engineering, identity and access management, applied cryptography, and security protocols</li>
<li>Knowledge of, and hands-on experience with application threat modeling, web application vulnerabilities and secure code reviews</li>
<li>Knowledge of defensive security tools, techniques and procedures such as vulnerability scanning, IPS/IDS, WAF, etc.</li>
<li>Knowledge of encryption concepts and cryptographic key management</li>
<li>Knowledge of cloud infrastructure services such as AWS, GCP</li>
<li>Previous software engineering experience in a production environment</li>
<li>You can read, write, test and break code in one or more languages, ideally a mix of scripting languages and compiled languages, e.g. Python and Go</li>
<li>Acting responsibly with sensitive and confidential information, and appreciate that some black-hat hackers work at unsociable hours</li>
</ul>
What's in It for You?
<ul>
<li>Lots of autonomy, flexible work culture and possibility of remote work</li>
<li>Development of very high traffic products, used at the global scale </li>
<li>Exposure to modern and proven technology </li>
<li>Tons of growth opportunities into technical or people management roles</li>
<li>Amazing benefits &amp; perks, including equity for all Lightspeeders</li>
<li>Opportunity to join a fast-paced, high-growth company</li>
<li>Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story. </li>
</ul>To all recruitment agencies: Lightspeed does not accept unsolicited agency resumes. If we have not directly engaged your company in writing to supply candidates for a specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes.
Where to from here?Obviously, this has to be mutually beneficial: we want you to step into a role you love, and we want to offer you a place you’re proud to come to every day. For a glimpse into our world check out our <a href="https://www.lightspeedhq.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">career page here</a>.
Lightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal’s gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs.
Who we are: Powering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks.
Founded in Montréal, Canada in 2005, Lightspeed is dual-listed on the New York Stock Exchange (NYSE: LSPD) and Toronto Stock Exchange (TSX: LSPD). With teams across North America, Europe, and Asia Pacific, the company serves retail, hospitality, and golf businesses in over 100 countries.

Senior Application Security Specialist

ATB Financial

Our bottom line is different.There’s something special about working at ATB, and it’s been recognized on every <a href="https://www.atb.com/company/careers/why-atb/" rel="noopener noreferrer nofollow ugc" target="_blank">top employer list</a> that matters. Maybe it’s our exceptional culture where your <a href="https://www.atb.com/company/careers/why-atb/benefits/" rel="noopener noreferrer nofollow ugc" target="_blank">total wellness </a>is supported through market-leading benefits and you’re free to bring your whole self to work. Maybe it’s our commitment to a growth mindset and our unrelenting thirst for <a href="https://www.atb.com/company/careers/why-atb/our-values/" rel="noopener noreferrer nofollow ugc" target="_blank">making it possible</a> for fellow Albertans—even the ones who aren’t our clients.Whatever it is, you won’t find a more genuine, driven and knowledgeable group of humans anywhere. We foster a culture of purpose, performance and possibilities. We engage with intense curiosity, and bring our whole selves to work, every day. We know it starts with people like you, so take a chance and start with us.Job Number: REQ4425Location: Anywhere in Canada, preference of Alberta #LI-RemoteApply by: Friday, July 29, 2022Paygrade: M-OTH# Positions available: 1System Title: Security Developer 8Leader Name: Glenn JoinerAs ATB’s next Senior Cyber Security Analyst on our Cybersecurity and Security Assurance team, you will be responsible for performing all forms of complex, technical, security assessments of customers’ information technology systems. These can include (but are not limited to) Internet, Intranet, Applications, Hosts, Firewalls, APIs, Cloud implementations, Mobile applications etc. The successful candidate must have extensive penetration testing and software development experience.We are looking for someone with curiosity – who thinks differently about problems and looks for new angles in challenging situations. Responsibilities:<ul> <li>Research and analyze past and present security vulnerabilities, threats, exploits, trends and intelligence.</li> <li>Develop custom scripts, tools and methodologies that detect and prove the potential and practical exploitation of the above.</li> <li>Lead and participate in vulnerability assessments, penetration testing and Red Team activities.</li> <li>Communicate effectively as and be a confident subject matter expert in the context of Cybersecurity and Security Assurance.</li> </ul>Requirements<ul> <li>Practical experience and technical knowledge of cybersecurity threats, vulnerabilities, intrusion techniques and exploit methodologies.</li> <li>Expertise in the field of penetration testing including the implementation of techniques and methods of attacks, scanning, reconnaissance, malicious tools, etc.</li> <li>Strong technical background and working experience in the field of Cybersecurity including firewalls, VPNs, networks, TCP/IP, Unix, Linux and Windows Server.</li> <li>Experience with scripting (minimum) or formal software development (advantage) in one or more object oriented programming languages</li> <li>Ability to communicate highly complex technical information clearly and articulately for all levels and audiences both verbally and in writing.</li> <li>Strong team-oriented interpersonal skills with the ability to interface with a broad range of people and roles including vendors, executives, peers, other teams and IT-business personnel.</li> <li>Computer Science degree, or an equivalent combination of education, certifications and experience.</li> <li>Knowledge of common web application security vulnerabilities (OWASP Top Ten, SANS Top 25, etc.), as well as remediation techniques.</li> <li>Solid understanding of one or more Information security standards and IT frameworks (ISO27002, NIST, CoBIT, ITIL, ISF, CIS, CSA etc.)</li> </ul>Nice to have:<ul> <li>Certifications like OSCP, GIAC *, CISM or CISSP is an advantage.</li> <li>Unix, Windows and networking security skills are an advantage.</li> <li>A complete understanding of all Layers described in the OSI Model is an advantage.</li> <li>Experience with scripting, coding or formal software development in two or more object oriented programming languages is an advantage.</li> </ul>At ATB, we know that as you develop in your career, you gain many transferable skills. If you believe your experience and qualities are a match for this position, please consider applying.Online applications are preferred. Please let us know if you require any accommodations.BenefitsBe great. Be you. Believe.We are dedicated to building a workforce reflective of the diversity within our communities and creating an environment where every team member has what they need to reach their potential. We encourage candidates from all equity-seeking groups to apply.What happens <a href="https://www.atb.com/company/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">next</a>?Thank you for applying online. If you are shortlisted for this opportunity, you will hear from us after the posting close date regarding next steps. We might ask you to participate in a <a href="https://resources.workable.com/tutorial/video-interview-tips-for-candidates" rel="noopener noreferrer nofollow ugc" target="_blank">digital interview</a> or phone interview. If you require any accommodations, please let us know.Stay in touch! ATB is excited to know you’re interested in a career with us! Follow us on <a href="https://www.linkedin.com/company/atb-financial/?viewAsMember=true" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>, <a href="https://www.facebook.com/ATBFinancial/" rel="noopener noreferrer nofollow ugc" target="_blank">Facebook</a> and <a href="https://www.instagram.com/atbfinancial/?hl=en" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> to get the inside scoop on what our team is up to.

Senior Cyber Security Analyst, CSSA - Ottawa

Our bottom line is different.There’s something special about working at ATB, and it’s been recognized on every <a href="https://www.atb.com/company/careers/why-atb/" rel="noopener noreferrer nofollow ugc" target="_blank">top employer list</a> that matters. Maybe it’s our exceptional culture where your <a href="https://www.atb.com/company/careers/why-atb/benefits/" rel="noopener noreferrer nofollow ugc" target="_blank">total wellness </a>is supported through market-leading benefits and you’re free to bring your whole self to work. Maybe it’s our commitment to a growth mindset and our unrelenting thirst for <a href="https://www.atb.com/company/careers/why-atb/our-values/" rel="noopener noreferrer nofollow ugc" target="_blank">making it possible</a> for fellow Albertans—even the ones who aren’t our clients. Whatever it is, you won’t find a more genuine, driven and knowledgeable group of humans anywhere. We foster a culture of purpose, performance and possibilities. We engage with intense curiosity, and bring our whole selves to work, every day. We know it starts with people like you, so take a chance and start with us. Job Number: REQ4224Location: RemoteApply by: June 28th, 2022Paygrade: O-OTH# Positions available: 1Leader Name: CISOThe Managing Director, Security Operations and Threat Assurance significantly contributes to setting ATB’s Cybersecurity Strategy and direction to inspire and drive continuous improvement of operational security controls, as well as proactive threat intelligence and assessment to evaluate and protect against current and future cybersecurity threats throughout the enterprise. The role will have to stand up and manage a mixed team of staff and vendor partners with a view to ATB retaining strong control over direction and execution of work, while getting great efficiency and value as well as interacting with ATB businesses to coordinate work and ensure their needs are met. As ATB's next Managing Director, Security Operations and Threat Assurance, you will be a senior leader who bears responsibility on behalf of the organization to lead teams responsible for the operations of critical cybersecurity controls, and technical assessment and assurance of cybersecurity risks in products and technical solutions. The position will also drive thought leadership for Cyber Security Operational and Threat Hunting accountabilities on behalf of the CISO organization. The associated accountabilities include:<ul> <li>Oversee critical cybersecurity areas including Security Operations, Security incident response, Data Loss Prevention, Security monitoring and threat intelligence, Security Assurance validation, and Security Champions programs. </li> <li>Focus on the technical design and delivery of preventive and detective controls adhering to Cyber Security policies and processes to secure ATB systems and data against cybersecurity threats. Contribute to and implement security controls and practices that align with security architecture principles &amp; technical standards.</li> <li>Lead the Security Operations team to implement, operate, and monitor security controls aligned to our security strategy with a strong focus on scalable and automatable cloud based security controls. Monitor and continuously improve SIEM operations.</li> <li>Lead the Security Assurance and Threat Intelligence team to drive high quality, objective technical assessments and remediations of current and future cybersecurity threats to critical systems and applications and advise team on prioritized remediations.</li> <li>Plan, Prepare and Execute validation activities to ensure new projects and operational systems adhere to Information Security policies and processes with a focus on reporting, tracking, communication and coaching to resolve identified issues.</li> <li>Mentor, coach and lead other team members that fall under the direct accountability of the role. </li> <li>Prepare and track all fiscal budgetary accountabilities that fall under the direct accountability of the role.</li> <li>Represent CISO in select Steering Committees, RFP Creation and evaluation teams and Working committees in this domain.</li> </ul>Primary Responsibilities<ul> <li>Drive a leading security assurance and threat intelligence team focused on continuous improvement and red team challenge techniques</li> <li>Deliver operational security controls complying with agreed operating level agreements for timeliness and responsiveness while continuing to focus on reducing cybersecurity risk in alignment to the NIST cybersecurity framework. Define cybersecurity operational controls and practices, lead the creation (and assure the ongoing relevance) of the firm’s security operations and threat intelligence roadmap in collaboration with various technical and business stakeholders as well as architecture.</li> <li>Accommodate sometimes conflicting requirements and constraints from diverse stakeholders, such as line-of-business users, peers, Network and Security architects, analysts, and administrators. Collaborate with technical colleagues, client experience team members, and business stakeholders on self-service frameworks to embed security focused solutions and security driven culture. Analyze, shape and prioritize stakeholder requirements to ensure they are implemented within initiative, functional, non-functional and environmental requirements and constraints. Ensure roadmaps are implemented in both Security Operations platforms, and Security assurance platforms. Identify value opportunities for ATB and ATB clients; shapes agenda and priorities in collaboration with clients.</li> <li>Direct and assist as necessary, investigations into information security breaches while liaising with the Legal, Risk and Privacy teams as well as the involved teams and leaders ensuring root-causes of such breaches are understood and addressed.</li> <li>Promote a strong cybersecurity culture across the organization through the evolution of the employee Security champions program. Promote a strong cybersecurity culture across the organization and develop Security teams that support a highly effective security focused mindset current with modern cloud security technologies </li> <li>Represent CISO in a variety of governance forums such as Project Steering Committees, Architecture Review boards, Design and Decision boards, RFP creation and evaluation teams, Leadership Strategy teams, vendor oversight teams to ensure the needs and objectives of the cybersecurity team are met &amp; security requirements are translated into vernacular the teams’ understand and are able to adopt.. </li> <li>Collaboration: <ul> <li>Work closely with procurement teams to review and support contract and MSA negotiations as it relates to Security vendors and suppliers &amp; follow the Technology Assessment Process (TAP) on any new software or services requirements.</li> <li>Work with finance teams, program managers and CISO to ensure fiscal budgetary items are defined annually, tracked and managed appropriately.</li> <li>Establish relationships with vendor partners to ensure strong delivery, innovation and ongoing improvement in receiving high value services.</li> <li>Interact with ATB businesses along with TIE business partners to coordinate work and ensure their needs are met. </li> <li>Work with CISO Leadership team to develop and manage a team of cybersecurity professionals and strategize on team structure on behalf of the Security Operations team and Cyber Security Assurance team. </li> <li>Work closely with peers to align team efforts toward common strategy objectives. </li> <li>Work with other Technology and Customer experience team members and TIE peers to increase understanding and adoption of effective Security processes and controls to ensure we are best able to protect the organizations and customers assets. </li> <li>Ensure strong collaboration with Architecture teams in support of developing cybersecurity. </li> </ul> </li> </ul>Management and Operational AccountabilitiesThe role has a moderate level of complexity. The individual will interact with other leaders within the AOE’s SSU’s, and TIE, as well as external service partners. The MD of Security Operations and Threat Assurance contributes to supporting ATB’s strategic direction to inspire and drive continuous improvement of operational security controls, as well as proactive threat intelligence and assessment to evaluate and protect against current and future cybersecurity threats throughout the enterprise. <ul> <li>The role will have to stand up and manage a mixed team of staff and vendor partners with a view to ATB retaining strong control over direction and execution of work, while gaining efficiency and value from vendor partners. </li> <li>Develop, manage, allocate and govern the Security Operations and Threat Assurance teams to constantly improve the organization’s capacity to address cybersecurity threats, vulnerabilities and remediation efforts for all ATB environments - on premise and cloud. </li> <li>Oversee Security Incident management monitoring and processes to support effective Security breach investigations and resolution.</li> <li>Work with other CISO Leadership team members to establish baseline accountabilities, objectives and responsibilities on behalf of the CISO office. </li> <li>Maintain an effective and objective separation of accountabilities in directing “Red Team” Threat Assurance activities and “Blue Team” Security Operations responsibilities.</li> <li>Define job roles, recruit candidates, and then manage (directly or indirectly) a team of cybersecurity operations and security development and threat assurance professionals assigned to cross guild initiatives across ATB and risk initiatives within TIE.</li> <li>Collaborate regularly with peers in Architecture to design and develop security controls, as well as peers across other technology and business groups.</li> <li>Lead the development, publishing and maintenance of the organization’s security operations plan, as well as a roadmap for its future development, ensuring that it matches and supports business needs and risks and is in alignment with architecture direction.</li> <li>Oversee the organization’s data loss prevention strategy and operations in collaboration with Data Governance.</li> <li>Develop and communicate organizational objectives; inspire and motivate team members to achieve results.</li> <li>Build organizational talent by creating a learning environment that ensures employees realize their highest potential.</li> <li>Actively work to streamline processes with the goal of effective and scalable delivery to the customer while balancing enterprise cybersecurity risk management objectives.</li> <li>Manage and steward budget for this team.</li> </ul>RequirementsEducation<ul><li>A bachelor’s or master’s degree in science, computer science, engineering or related field, or equivalent work experience. Academic qualification or professional training or experience in legal and regulatory areas are also desirable. </li></ul>Experience<ul> <li>Fifteen or more years of IT experience in cybersecurity or risk management — recently at or near the director/managing director level.</li> <li>Demonstrate significant depth of technical, business and financial expertise in technology solutions, as well as deep understanding of security operations, and related cybersecurity threat intelligence and red teaming within the financial services industry.</li> <li>Financial services industry experience preferred. Broad business experience is desired.</li> <li>Strong cloud security experience required along with cloud security control knowledge and experience. Google Cloud security experience preferred.</li> <li>CISSP, OSCE, CISM or industry relevant certifications.</li> <li>Experience in recruiting and developing leading cyber operations and/or threat intelligence teams with demonstrable results.</li> <li>Five or more years of progressive leadership experience in leading cross-functional teams and enterprise wide programs, operating and influencing effectively across the organization.</li> <li>Experience in integrating complex, cross-corporate processes and information strategies.</li> <li>Strategy and management consulting experience desirable.</li> </ul>Knowledge/Skills<ul> <li>Excellent business acumen and interpersonal skills; able to work across business lines at a senior level to influence and effect change to achieve common goals.</li> <li>Demonstrated leadership; proven track record of leading complex, multidisciplinary talent teams in new endeavors and delivering solutions.</li> <li>Proven Computing and Security literacy — The ability to not only understand but the ability to describe business use cases/outcomes, management concepts, and analytical approaches/options to differing Peer groups. The ability to effectively translate IT and Security concepts to executives, business, and IT stakeholders. </li> <li>Information security and risk strategy experience — Experience in strategic technology planning and execution, and policy development and maintenance.</li> <li>Analytical skills — Outstanding analytical and problem-solving abilities.</li> <li>Familiarity with business information generation and analysis methods. Demonstrates deep domain expertise in emerging developments in tech including hardware, software, and the architectural domains of predictive analytics, natural language conversation, vision and intelligent automation. </li> <li>Ability to effectively drive business, culture and technology change in a dynamic and complex operating environment. Proven ability to deliver results and drive change in the organization. </li> <li>Excellent oral and written communication skills, including the ability to explain cybersecurity concepts and technologies to business leaders, and business concepts to technologists. The candidate should be able to “sell” ideas and processes internally at all levels, including the senior executives. Experience in presentation of cyber security topics to a variety of audiences from senior executives to front line staff.</li> <li>Proven record of effective leadership, including the ability to balance team and individual responsibilities, build teams and consensus, get things done through others not directly under his/her supervision, and work ethically and with integrity.</li> <li>Demonstrated knowledge of Banking/Fintech business processes as it relates to defining and addressing security based risks, standards, processes and regulatory compliance requirements. </li> <li>Demonstrated knowledge of the following: cybersecurity threat intelligence, penetration testing and offensive security methodologies and practices in a complex organizational environment. Possess deep technical expertise in cybersecurity operations and penetration testing methodologies, with the ability to apply acumen to ATB’s baseline current state landscape and to inform and shape target state operating models, vulnerability management programs, threat intelligence gathering, and architectural design.</li> <li>Broad experience desired, but not essential, in multiple competency areas of security platform and program delivery. Some examples are: Security Operations Center (SOC), SIEM integration, Security incident response teams, Cloud Security architecture and principles, data Loss prevention (DLP) implementation, data security and privacy, fIrewall and VPN platforms, end-point protection, vulnerability management platforms, and code scanning tooling. </li> <li>Sought after for cybersecurity expertise or capabilities. Seen as a valuable resource to senior leaders. Can perform skills on any project, tackle complex issues on the topic, teach others, and write articles.</li> </ul>At ATB, we know that highly talented people can readily transfer their skills. If you believe your skills and experience are transferable, please consider putting your name in the running. BenefitsBe great. Be you. Believe.We are dedicated to building a workforce reflective of the diversity within our communities and creating an environment where every team member has what they need to reach their potential. We encourage candidates from all equity-seeking groups to apply.What happens <a href="https://www.atb.com/company/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">next</a>?Thank you for applying online. If you are shortlisted for this opportunity, you will hear from us after the posting close date regarding next steps. We might ask you to participate in a <a href="https://resources.workable.com/tutorial/video-interview-tips-for-candidates" rel="noopener noreferrer nofollow ugc" target="_blank">digital interview</a> or phone interview. If you require any accommodations, please let us know.All ATB Financial team members are required to disclose their vaccination status and provide proof of vaccination as a condition of employment to help support client and team member safety.Stay in touch! ATB is excited to know you’re interested in a career with us! Follow us on <a href="https://www.linkedin.com/company/atb-financial/?viewAsMember=true" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>, <a href="https://www.facebook.com/ATBFinancial/" rel="noopener noreferrer nofollow ugc" target="_blank">Facebook</a> and <a href="https://www.instagram.com/atbfinancial/?hl=en" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> to get the inside scoop on what our team is up to.

Managing Director, Security Operations and Threat Assurance - Ottawa

Apply to Cyber Security Jobs in Ottawa in companies remotely and near you. New Cyber Security Jobs in Ottawa added daily.

Job Position and Company	Location	Tags	Posted
Senior Software Engineer, Security (Remote) at BenchSci	Remote Full Time Manager Application Security
Senior Information Security Engineer at Lightspeed Commerce	Remote Full Time Incident Response
Senior Application Security Specialist at Lightspeed Commerce	Application Security AWS Cloud Compliance Cryptography
Senior Cyber Security Analyst, CSSA - Ottawa at ATB Financial	Application Security CISM Cissp Cloud Cobit
Managing Director, Security Operations and Threat Assurance - Ottawa at ATB Financial	Analytics Automation Banking Blue Team CISM

Cyber Security Jobs in Ottawa

0 Cyber Security Jobs in Ottawa. Page 1 of 1

5 closed cyber security jobs in ottawa:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Ottawa

0 Cyber Security Jobs in Ottawa. Page 1 of 1

5 closed cyber security jobs in ottawa:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter