Principal Investigator, Cybersecurity

Principal Investigator Cybersecurity
COMPETITION NO. ADP23-03

AboutDurham College:
Durham College (DC) is a leading post-secondary institution thatsupports students to develop career-ready skills for the ever-changing jobmarket. With a focus on experiential learning through field placements appliedresearch co-ops and other hands-on opportunities DC grads are known forhaving the skills and knowledge they need to adapt to the ever-changingworkforce.

A leader in innovative teaching and learning Durham College offers awide range of market-driven programs across multiple disciplines includingculinary management farming and horticulture business IT construction andtrades science and technology health care engineering social and communityservices media art and design.

Our modern campuses in Oshawa and Whitby offer 145 programs includingsix bachelors degrees and 11 apprenticeship programs to more than 11000full-time post-secondary and nearly 3000 apprenticeship additionwe have more than 16000 student registrations in professional and part-timelearning. More than 120000 alumni represent the college both locally andaround the world.

DC has an estimated annual economic impact of more than $913 million onDurham Region and is proud to be an active and engaged member of thecommunities we serve by contributing resources and expertise to enhance socialand economic well-being through partnerships investments and collaboration.

Durham College is seeking experiencedand motivated professionals who share our commitment to quality and studentsuccess. The Office of Research Services Innovation and Entrepreneurship iscurrently seeking applications from qualified individuals who are interested injoining the Centre for Cybersecurity Innovation on a part-time project-basedcontract to oversee the development of real-world solutions for industrypartners through applied research and knowledge transfer projects.

Teams of expert faculty students andrecent graduates collaborate with industry partners and their staff to deliverinnovative cybersecurity-based solutions to pressing business problems andopportunities. Projects can include producing and testing prototypesevaluating new technologies and developing new or improved products orprocesses for small- and medium-sized businesses (SMEs). All projects arefunded by provincial or federal government grants.

The Centre for Cybersecurity Innovationis located at the Oshawa Campus and provides SMEs access to facilities equipmenttechnical expertise and project services to assist them in productdevelopment technology adoption expansion into new markets andcommercialization of new products services and processes.

Position Information:
Hourly Rate: $57.41
Hours: Up to 24 hours per week Monday to Friday.
Reporting To:Director Applied Research
Vacancy Status: This posting is part of an ongoing recruitment process to maintain an applicant pool. Recruitment is continuous and dependent on project needs; candidates may be contacted as new projects arise

Duties and Responsibilities:

The responsibilities of a Principal Investigatorinclude but are not limited to:

• Develop review and update security policies procedures and governance documentation to meet compliance standards.
• Conduct comprehensive gap assessments against relevant frameworks identify areas of non-compliance and recommend actionable remediation steps.
• Lead the implementation maintenance and continuous improvement of SOC 2 Type 2 ISO 27001 and NIST SP 800-53/800-171 compliance programs.
• Design implement and document security controls across cloud and on-premises environments ensuring alignment with framework requirements.
• Develop and manage remediation plans conduct internal audits and readiness assessments and track progress toward compliance objectives.
• Perform risk assessments maintain risk registers and support third-party/vendor risk management processes.
  Assess and enhance the security of cloud infrastructure ensuring compliance with SOC 2 ISO 27001 and NIST requirements.
• Coordinate and support external audits manage evidence collection and serve as the primary liaison with auditors.

Qualifications:

The ideal candidate will meet or exceed thefollowing qualifications:

• An undergraduate degree in Cybersecurity Information Technology Business or a related field preferably a masters degree.
• Three to five years of relevant industry experience and demonstrated ability in fields and technologies relevant to project opportunities
• 3 years of experience in GRC information security or compliance roles.
• In-depth knowledge of SOC 2 Type 2 ISO 27001 and NIST frameworks.
• Experience with gap analysis internal audits and remediation planning.
• Strong understanding of cloud security principles and cloud infrastructure (AWS Azure GCP etc.).
• Familiarity with GRC and audit management tools (e.g. Secureframe Drata Vanta Sprinto).
• Excellent written and verbal communication skills; ability to communicate complex compliance requirements to technical and non-technical audiences.
• Strong organizational and project management abilities.
• Experience developing and maintaining security policies and governance documentation.
• Ability to work independently and collaboratively in a fast-paced environment.

The ideal candidate will possess the following qualifications:

• ISO/IEC 27001 Lead Auditor/Implementer CISA CRISC CGRCor similar certifications.
• Experience supporting SOC 2 Type 2 ISO 27001 or NISTcertification and audit processes.
• Knowledge of vulnerability management SIEM and cloudsecurity assessment tools.
• Experience in SaaS or cloud-native environments.

Please apply belowby submitting your cover letter and resume to the online portal. Competition number ADP23-03.

Contact Us T:905.721.3073
C Wing Second Floor - 2000 Simcoe St. N. Oshawa ON

Durham College invites applications from all qualified individuals. Durham is committed to fostering workplace diversity and provides accommodations to applicants with disabilities throughout our hiring process. If you require this information in alternate format; require communication supports; an accommodation in applying for a posting and/or if you are selected for an interview please contact our Human Resources (HR) department and an HR assistant will work with you to meet your needs.

We thank you for your interest in employment with Durham College however only those candidates selected for an interview will be contacted.

Land Acknowledgement
Durham College is situated on the traditional lands of the First Peoples of the Mississaugas of Scugog Island First Nation. These lands are covered under the Williams Treaties and rest within the traditional territory of the Anishinaabeg. We offer our gratitude to the Indigenous Peoples who care for and through the treaty process share the lands on which we live learn teach and prosper today.

Required Experience:

Staff IC