About the position

Reporting to the Manager, IT/OT Security Operations, you will be responsible for assisting with day-to-day IT/OT security operations, including implementation of security projects, ensuring the success of day-to-day operations, and assisting other IT/OT teams and business units with security related tasks. In this role, you will be responsible for working closely with global teams and managed service partners to ensure the security of IT and OT assets. You will also be responsible for assisting with the implementation and/or administration of several technologies, including security orchestration, endpoint security, network security, vulnerability management, third-party risk management, security incident and event management system, security awareness and training platform, VPN, threat intelligence, privileged access management system, and more. This position will be based in our Toronto Head Office. Additionally, this role will be 4 days in office per week, with one flexible day available for employees to work from home.

Responsibilities

• Responsible for assisting with the implementation and monitoring the Global Cyber Security Program that governs all Northland entities, which includes both Information Technology and Operations Technology.
• Responsible for assisting with the evaluation, implementation, and documentation of security controls in support of the global cyber security program, including but not limited to those around intrusion detection, endpoint security, segmentation, email security, SIEM, security orchestration and automation, data loss prevention, authentication controls, web filtering, threat intelligence, and office 365.
• Responsible for assisting with the maintenance of security systems to ensure they remain up to date to identify and prevent threats
• Responsible for assisting with implementing procedures and technology changes to maintain and evolve Northland’s security maturity
• Responsible for assisting with monitoring and reporting on network security, system, and application security solutions to highlight areas of non-compliance and recommend the development of improved practices and processes
• Provides support for cybersecurity incident response processes
• Provides support for periodic penetration tests
• Participates and supports other teams as required in project pipeline activity to ensure IT/OT acquisitions and implementations are in line with Northland IT/OT Security requirements
• Build relationships and work closely with Managed Service Partners, IT/OT Infrastructure, and Project Management to provide organization direction and guidance on security best practices and compliance to policies
• Build relationships and work closely with our Managed Security Partners (SOC) to monitor and identify gaps in the current environment and implement necessary changes
• Establishes and maintain relationships as well as written and in-person communications with key stakeholders on IT Security matters, including other IT/OT employees, Human Resources, Risk Management, Engineering, and Operations
• Participates in ongoing IT/OT security audits for all Northland entities to ensure compliance to baseline requirements
• Provides backup support for other IT/OT Security and Compliance team members as required

Requirements

• Currently enrolled in an undergraduate degree or post-secondary diploma in Computer Science or related field.
• Working knowledge of IT Security tools, principles, and practices
• Courses in IT Security, network administration, server administration, data protection, or industrial control systems are highly desirable
• Good understanding of privacy laws as they relate to cyber security
• Strong analytical and problem-solving skills
• Sound knowledge of secure network design (LAN, WAN) for IT and OT/ICS environments, and network intrusion detection concepts
• Academic experience working with enterprise infrastructure technologies and security platforms such as firewalls, SIEM, vulnerability management solutions, privileged access management, intrusion detection systems, endpoint security, cloud solutions, and Office 365
• Understanding of IT security frameworks such as ISO 27000 series, NIST SP800-53, NIST CSF
• Strong analysis and attention to detail
• Strong verbal/written communication and presentation skills
• Good judgement, highly self-motivated, and self-directed
• Ability to effectively prioritize and execute tasks in a pressured situation
• Experience working in a team-oriented and collaborative environment
• Experience and willing to work “Hands on” and interested in a dynamic, fast paced environment
• Demonstrates a passion for cybersecurity and critical infrastructure protection

Nice-to-haves

• Methodical and organized: You naturally work in a methodical way and relish the opportunity to add structure and order to your work. This will help with the competing priorities you will be managing.
• Collaborative: You build relationships and enjoy working as a team player to get things done.
• Independent: You are an independent thinker and naturally set your own timescales and milestones to ensure you meet your objectives. You know when you need to ask for help and are comfortable doing so.
• Eager and adaptable: You are eager to learn and expand your skillset, and comfortable adapting to changing priorities in a fast-paced and deadline-driven environment.
• A strong communicator: You have exceptional oral and written communication skills.

Benefits

• A competitive RRSP matching scheme of 8%
• extended health, dental and vision benefits for yourself and your immediate family from day one
• paid parental leave
• Accident and Life Insurance
• disability benefits
• global Wellness Program
• Employee Assistance Program, including access to mental health resources
• Floating days
• Birthdays off
• three additional days off annually