Spécialiste de la sécurité des données, Services de technologies informatiques

Overview

The Data Security Specialist is responsible for implementing, managing, and maintaining security controls and measures to safeguard sensitive data.

The role involves identifying vulnerabilities, monitoring for breaches, and developing processes to ensure the confidentiality, integrity, and availability of data.

The Data Security Specialist ensures that Richter maintains compliance with privacy regulations and meets all data security legal obligations.

They collaborate with cross-functional teams to develop and implement security strategies that align with regulatory standards and industry best practices, including CIS Controls, NIST, and CISA frameworks.

A day in the life

• Design and implement security measures to protect sensitive data across systems, applications, and networks.
• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Develop and maintain data classification and encryption standards.
• Ensure compliance with relevant security standards and regulations (e.g., Law 25, GDPR, HIPAA, PCI-DSS).
• Manage data loss prevention (DLP) systems, encryption solutions, and security monitoring tools.
• Develop security policies and procedures, providing guidance on secure data handling practices.
• Perform regular audits and reviews of data access, security controls, and compliance metrics.
• Work with vendors and third-party services to assess and enhance data security.
• Interact and negotiate with management, vendors, outsourcers, and contractors to obtain protection services and products.
• Demonstrate a strong understanding of security frameworks (for example CIS Controls, NIST, and CISA frameworks)
• Participate in the IT Security on call routine (once every three weeks

About you

• Minimum of 5 years of experience in data security, cybersecurity, or a related field.
• Strong communication and documentation skills in both English and French
• Proven technical learning : CISSP, CISM, CISA, GIAC or other.
• Certification or experience with Microsoft Purview required
• Strong understanding of encryption, Data Loss Prevention, Identity and Access Management systems
• Strong team collaboration and interpersonal skills required
• Knowledge of applicable practices and laws relating to data privacy and protection for Canada (Ontario, Quebec), and how they are applied using modern security frameworks (CIS, GDPR, etc)
• Keep current on emerging products, services, protocols, and standards in support of security enhancements
• Intuition and keen instincts to pre-empt attacks.
• High level of analytical and problem-solving abilities.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Provide on-call security support once every three weeks.

What Richter offers you?

• Competitive group benefits which include group insurance, Health Spending Account, savings plans, and Employer Contribution Matching
• Employee and Family access to virtual healthcare network
• Employee and Family Assistance Programs, including consultations with mental health professionals
• Annual Health & Well-being Program
• Hybrid work Environment
• Competitive Performance Bonus
• Tuition Reimbursement
• Professional Dues Reimbursement
• CFE leave financial support
• Academic Incentives
• Talent referral bonus
• Client referral bonus
• Access to an on-demand concierge nannying, babysitting, and tutoring service
• Annual employee rewards and recognition
17 days ago