Infrastructure Security Specialist

JOB DESCRIPTION

Our employees are at the heart of what we do best : helping people, businesses and society prosper in good times and be resilient in bad times.

When you join our team, you’re bringing this purpose to life alongside a passionate community of experts.

Feel empowered to learn and grow while being valued for who you are here, diversity is a strength. You have our commitment to support you in reaching your goals with tools, opportunities, and flexibility.

It’s our employee promise.

Our hybrid work model provides the balance between working from home and enjoying meaningful in-person interactions.

Read on to see how you can shape the future, win as a team, and grow with us.

About the role

Job Description

Our growing team is looking for a Senior, Infrastructure Security Specialist.

In partnership with the IT Corporate Security team the Senior, Infrastructure Security specialist is responsible for developing, coordinating, and implementing security best practices and workload prioritization to secure the infrastructure and systems that run Intact Financial Corporation's (IFC) key processes and services.

What you will do here :

• Contribute to the improvement of IFC's cybersecurity posture.
• Support the hybrid cloud infrastructure security transformation and the various infrastructure teams.
• Help identify the threats and risks that the organization may face.
• Assist the infrastructure teams in implementing innovative and effective security controls.
• Measure the effectiveness of the implemented security controls and identify all impacts.
• Research and recommend innovative, secure, and automated solutions to improve risk management processes.
• Interpret the results of the various security technical assessments (code scanning, application intrusions, PenTests, Red Teams, etc.).
• Participate in the technical evaluation of security and new technologies.
• Support ongoing risk assessments and ensure that our security controls comply with relevant regulatory frameworks.
• Ensure adherence to industry standards, facilitate external and internal audits, and support the remediation of all findings.
• Monitor the latest industry trends and, where appropriate, proactively propose the introduction of new security practices and technologies.

What you bring to the table :

• Minimum 5 years of experience in information security.
• Bachelor's degree in computer science or equivalent combination of education and experience.
• Excellent knowledge of information security management principles and practices.
• Recognized certification in information security (CISSP, CISM, OSCP, CEH or other).
• Good understanding of common security gaps in data and cloud applications and of operating techniques from sources such as SANS, OWASP Top 10 and Cloud Security Alliance (CSA).
• Advanced knowledge of security capabilities, controls and standards : MFA, DAST, SAST, DLP, WAF, Bot Manager, NIST, CIS, PCI DSS etc
• Operating Systems such as MS, Unix and Linux
• Experience with cloud technologies, hybrid cloud environments and cloud security.
• Demonstrated commitment to training, self-study and maintaining technical cybersecurity skills.
• Bilingualism (French / English) Need to interact on a regular basis with colleagues across the country.
• No Canadian work experience required however must be eligible to work in Canada.

LI-Hybrid

What we offer

Working here means you'll be empowered to be and do your best every day. Here is some of what you can expect as a permanent member of our team :

A financial rewards program that recognizes your success

An industry leading Employee Share Purchase Plan; we match 50% of net shares purchased

An extensive flex pension and benefits package, with access to virtual healthcare

Flexible work arrangements

Possibility to purchase up to 5 extra days off per year

An annual wellness account that promotes an active and healthy lifestyle

Access to tools and resources to support physical and mental health, embracing change and connecting with colleagues

A dynamic workplace learning ecosystem complete with learning journeys, interactive online content, and inspiring programs

Inclusive employee-led networks to educate, inspire, amplify voices, build relationships and provide development opportunities

Inspiring leaders and colleagues who will lift you up and help you grow

A Community Impact program, because what you care about is a part of what makes you different. And how you contribute to your community should be just as unique.