CAA North & East Ontario

About CAA North & East Ontario

POSITION: IT Security Specialist LOCATION: 2151 Thurston Drive, Ottawa, Ontario Summary CAA North & East Ontario values the privacy and security of its Members. We are looking for an IT Security Specialist to assist the Club stay compliant with a variety of information security protocols; to ensure we meet Canadian Automobile Association & American Automobile Association requirements and those of the Credit Card Payment Data Security Standard. Under the direction of the Director, IT and working with the IT Manager, the IT Security Specialist will partner with all business unit stakeholders and the Director, Enterprise Systems to understand the requirements the Club must adhere to and project manage the achievement of security program goals throughout the organization. The IT Security Specialist will be responsible to develop and maintain key programs required to support data classification and file management within the context of IT Security and Compliance, The management of the programs will follow a Continuous Service Improvement Process (CSIP) that includes improvements to productivity, maximizing efficiency through various process enhancements, project implementation, business analysis along with being a technical liaison between the Technical Team and Business. The successful candidate will work with the IT staff to support other projects including IT business case development and Request for Proposal (RFP) processes. Duties/Responsibilities IT Security and Compliance A key aspect of this position is the ability to act as a conduit between technical staff and the Business to translate complex technical-speak into the terms understood by the business; work with the team to develop conceptual and process model designs and system solutions to satisfy security/business/system/architectural requirements and ensure efficiency and effectiveness in relation to operational costs, usability and maintainability; Facilitate the improvement and maintenance of security policies/controls/artifacts/evidence; Coordinate with internal and external resources on audits, assessments, tabletop exercises, regular PCI scans and reporting, and annual attestation and questionnaire; Produce and maintain monthly security status report for Senior Management, update the Security Audit Matrix, Action List and Work Plan, and collect/build artifacts and supporting materials for audits as required; Promotes and participates in the Information Security Awareness Program; Assist with the processes and procedures that ensure we are in regulatory compliance with PCI, ISQS#1 and Privacy; Admin for the internal security compliance tool, and support the training and on-boarding processes; Participate and/or lead in cross-functional meetings to understand issues, identify concerns and to develop and implement proactive solutions; Ensure all initiatives align with the corporate strategy. Information Management Implement and support the Data Classification requirements to meet the ISQS1 security standards; Support business and end users on SharePoint projects by requirement analysis and continuous improvement and maintenance; Project Management Work with IT Management to establish a central repository of projects that have an IT component; As required participate in ongoing communication of project status, build and maintain project roadmap, logs and progress, produce monthly and ad-hoc reports for Directors and Senior Management. Build and maintain strong relationships with vendors and third-party partners of IT projects, facilitate communication, contract review and renewals; Coordinate RFP processes for IT projects; work close with internal resources on RFI/proposal review and evaluation, assist with final close-out Qualifications/Skills The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 3-5 years of security standards and compliance regulation Project management or business analysis experience preferred Post-secondary education in IT related field or equivalent work experience; Experience in building reports for business areas using the following tools: SQL Server Reporting Services (SSRS), MS Access, Excel, Visio and other Office Applications; Strong time management and organizational skills with a proven track record of managing multiple projects; Ability to work under pressure to meet deadlines and adapt to changing priorities; Team player who can interact and present to all levels at the organization; Proven skills in the following areas: Professional oral and written communications; self-starter; highly motivated change agent who has strong analytical, conceptual, organizational and problem-solving skills; Proven ability to prepare and deliver professional documents and presentations including project dashboards to all levels of the organization; Collaborative work ethic with a willingness to work with others within the organization to accomplish organizational goals; PMP accreditations would be an asset but not required; Excellent written and verbal communication skills (English). Work Conditions Travel may be required Manual dexterity required to use desktop computer and peripherals Overtime as required Employment is contingent on a successful Criminal Background Check, driving record and references. Job applicants who have disabilities shall be provided with reasonable accommodation throughout the recruiting process. Job Types: Full-time, Permanent Salary: $52,000.00 to $77,000.00 /year Experience: Cyber Security: 3 years (Required) Project Management or Business Analysis: 1 year (Preferred) Location: Ottawa, ON (Preferred)

Synonyms

Technologies (from Job Ads)

Hiring Locations

Headquarters

Loading map...

Company Info

Company Type: Private

Company Size: 51 - 250

Revenue: 25 - 50 million (USD)

Job Ad Metrics

Job Ads found: 150

Job Ads per Month: 3.8

Hiring Locations: 5

Data Info