[Hiring] Information Security Advisor @GTT

Role Description

This is a security advisory team that provides various security services across the enterprise, including:

• Assessing systems and their security posture
• Aligning technology into the network environment
• Supporting secure by design initiatives
• Providing guidance to business lines on best practices and adhering to the bank's security standards

The successful candidate must have an understanding of regional and US regulatory requirements and will have the opportunity to work for a global legacy Canadian bank with a strong multi-regional US presence that is undergoing significant transformations, including Cloud.

Reporting to the Senior Manager of Security Advisory (US Advisory), the Information Security Advisor provides guidance to business lines to ensure design, development, and implementation of complex projects and initiatives are in accordance with the Bank's Information Security Standards and in compliance with industry regulations. In this role, you will be supporting various business lines while assisting them in making informed decisions to protect information assets deployed in various environments.

Qualifications

• Strong understanding of US regulatory regulations and practices
• Strong communicator capable of creating clear documentation and communicating ideas to others
• Advanced communication (verbal/written/presentation) skills in English

Requirements

• 5 years of hands-on technical working experience in performing security assessments on various platforms, network infrastructure, and complex applications
• 3 years of experience with Threat Risk Assessments and Threat Modelling for applications hosted on premise, cloud, hybrid cloud, and SaaS
• 2 years of experience in security solution architecture, software development, and/or hands-on experience with implementations to various environments, knowledge of application security controls, including compensating controls and cloud-based security solutions
• 3 years of experience reviewing and interpreting vulnerability reporting, server hardening requirements, and validating presence of controls through evidence

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund