Senior Specialist, Cyber Security

The Senior Specialist, Cyber Security, reporting to the Senior Manager, IT Security is responsible for managing security controls, delivering security consultation, and providing security best practices for Northwestel. Drawing on both technical and business integration acumen, Senior Specialist, Cyber Security will be prime for leading the planning, design, and implementation of Northwestel's IT Security Infrastructure. This role requires the technical knowledge, design, and deployment of security objectives with project teams. In addition, the candidate will be responsible for developing and maintaining the security best practice for the company.

The Senior Specialist, Cyber Security must understand the diverse security infrastructure that supports Northwestel's business and be able to differentiate and respond to the unique security requirements. Have a comprehensive knowledge of both technical and operational network security best practices and significant experience in a wide variety of technology platforms and security services that Northwestel supports. The Senior Specialist, Cyber Security must identify and compare technological capabilities that are required to support a particular security service and identify technological gaps where more development is needed.

Employment Equity

Northwestel values diversity in the workplace and is committed to the goals of Employment Equity. We strive to achieve a skilled workforce that is representative of the population we serve, and as a Northern company, we are committed to the employment and career development of our Indigenous peoples. Please clearly indicate on your application if you are an Indigenous person, a woman, a person with a disability, or a visible minority if you wish to receive hiring preference.

Specific Accountabilities

• Review and advise on information technology system security controls to ensure compliance with industry and corporate standards
• Work closely with security and business leaders / stakeholders to drive security compliance and build a culture of security awareness
• Lead meetings, chair conference calls, action follow-ups, and proactively interact with the various Business Units to move projects forward to ultimate completion within required timeframes
• Lead and perform risk assessment and gap remediation processes and provide recommendations for process improvement
• Lead follow-ups and inspections, advising and providing oversight on remediation activities, documentation and reporting
• Monitors, reviews and interprets security alerts and notifications and provides initial response, analysis and incident management
• Assesses and establishes mitigation steps to ensure appropriate incident treatment and informs both customer and management as appropriate
• Manages a variety of security devices such as VPN, firewall, host intrusion prevention systems, identify and access programs, data loss prevention systems, anti-virus and anti-spam systems
• Provide 2nd level support for technical escalations and more advanced inquiries
• Configures and maintains security devices and appliances as well as provide general knowledge and recommendations for security best practices to clients, as required
• Adheres to strict security and authentication protocols associated when dealing with all levels of client requests
• Participates in the design of the security architecture
• Respond to cyber security events, incidents, and participates in security investigations
• Participates in the development of security policies, procedures, exercises, response plans, and maintains documentation
• Configure and maintain Security Incident and Event Management (SIEM), Vulnerability Assessment, and Network Behavior Analysis tools to monitor, alert, and report on the network security status
• Lead cyber security operations team to establish and continuously improve cyber security
• controls such as proactive threat hunting
• Available for call outs after normal business hours in the event of a security incident.

Knowledge And Skills Required

• Degree in IT Security or Information Technology, or related field
• Professional certifications: GIAC, CISSP, CISM would be considered an asset
• 5+ years of cyber/information security experience
• Strong understanding of networking concepts
• Experience in risk and vulnerability management
• Knowledge of information security concepts, including Risk Assessments, Vulnerability Scanning, Penetration Testing, Systems hardening, Physical security, Data encryption, File integrity monitoring, and log and monitoring
• Experience in leading cybersecurity projects or initiatives.

Nature And Scope:

The Senior Specialist, Cyber Security, will serve as an expert on matters related to security design and implementation within the company. This individual will be responsible for determining enterprise security requirements; design, planning, implementing, and testing security systems; preparing operational security standards, policies, and procedures and mentoring team members.

This position will oversee the availability, confidentiality and integrity of corporate data assets, wherever they may reside. This position will also monitor, and support procedures and technical controls as directed within the area of Vulnerability Management, Intrusion Prevention and Detection Systems, and Security Incident Response.

What We Offer You

• Health & Wellness Benefits, Pension Plan, Discounts
• Team Incentive Bonus
• Paid Vacation with a Vacation Travel Allowance
• Work-Life Balance
• Community Involvement

Closing

Applications will be reviewed as they are submitted. Posting will remain active until September 26, 2024.

As a safety conscious COR™ Certified organization, we have an established and comprehensive safety program. We expect all employees to participate in our organizational health and safety programs, adhering to all safe work procedures focused on continuous improvement.

Northwestel values diversity in the workplace and is committed to the goals of Employment Equity. We strive to achieve a skilled workforce that is representative of the population we serve, and as a Northern company, we are committed to the employment and career development of our Indigenous peoples. Candidates must clearly indicate on their application if they are an Indigenous person, a woman, a person with a disability, or a visible minority if they wish to receive hiring preference.