[Hiring] Security Engineer @Zensurance

Role Description

We are looking for a Security Engineer to join our IT Team! Reporting to the Associate Director, IT, you will support our company-wide information security management program to ensure information assets are adequately protected.

• Proactively work with Zensurance's business units to implement practices that comply with defined information security policies and standards.
• Assist with a variety of IT-related risk management activities.
• Provide day-to-day support for information security programs and initiatives.
• Collaborate closely with the Associate Director of IT to coach and mentor colleagues across the organization.
• Support the Technology Leadership Team with employee training and development initiatives.

Responsibilities

• Support and maintain the company-wide information security program, including policies, standards, and guidelines.
• Facilitate IT risk assessments with business units and help define acceptable levels of residual risk.
• Monitor the external threat environment and advise stakeholders on emerging risks.
• Manage day-to-day threat and vulnerability management, including detection, response, and remediation.
• Coordinate incident management and support disaster recovery and business continuity planning.
• Liaise with engineering, IT, and enterprise architecture teams to embed security into system design and selection.
• Produce regular reporting and metrics on program effectiveness for leadership and stakeholders.
• Oversee security testing procedures and manage remediation of identified risks.
• Ensure audit trails and system logs comply with policy and audit requirements.
• Lead security awareness training across the organization.

Qualifications

• 5+ years of experience in Information Security.
• Hands-on experience with information security frameworks: CIS Controls v8, NIST, ISO 27001, SOC 2, PIPEDA, or PCI.
• Experience writing cybersecurity policies and conducting security gap analyses.
• Experience translating business stakeholder needs into technical security requirements.
• Experience with cloud security controls (AWS or equivalent).
• Familiarity with security platforms such as CrowdStrike and Mimecast.
• Experience working alongside legal, audit, and compliance teams.
• Strong written and verbal communication skills — able to engage technical and non-technical audiences.
• University degree or college diploma in Information Security, Cybersecurity, or a related field (or equivalent experience).

Nice to have

• Bachelor's in Information Systems; MBA or MS in Information Security preferred.
• Security certifications: CISSP, CISA, CISM, GIAC, CBCP, MBCI, or similar.
• Experience in an agile, fast-paced environment.

Salary

The salary range for this role is $110,000 to $150,000, not including the annual discretionary bonus and any additional performance-based incentives.

Benefits

• Flexible, people-first work environment designed to support well-being, growth, and success.
• Remote-first setup for added flexibility.
• Home office allowance to create a comfortable workspace.
• Top-tier tech: "Office in a box" with all necessary tech equipment.
• Half days before public holidays: Enjoy half days before long weekends.
• Flexible health and dental plans for families, including mental health support.
• Health & personal spending accounts to invest in wellness your way.
• Parental leave top-up, because family comes first.
• Education assistance reimbursement for courses, conferences, books, and memberships.
• Opportunities to learn from industry experts and grow your career.
• Weekly Friday huddles to share updates and connect across teams.
• Virtual & in-person team-building events to strengthen our culture.