Security Engineer (Remote First)
Job Summary
We are looking for a Security Engineer to join our IT Team! Reporting to the Associate Director IT you will support our company-wide information security management program to ensure information assets are adequately protected.
You will proactively work with Zensurances business units to implement practices that comply with defined information security policies and standards. The role also assists with a variety of IT-related risk management activities and provides day-to-day support for information security programs and initiatives.
As a senior individual contributor you will collaborate closely with the Associate Director of IT to coach and mentor colleagues across the organization. Youll play a key role in supporting the Technology Leadership Team with employee training and development initiatives aiming to continuously improve the teams technical capabilities and delivery excellence.
Responsibilities:
Support and maintain the company-wide information security program including policies standards and guidelines.
Facilitate IT risk assessments with business units and help define acceptable levels of residual risk.
Monitor the external threat environment and advise stakeholders on emerging risks.
Manage day-to-day threat and vulnerability management including detection response and remediation.
Coordinate incident management and support disaster recovery and business continuity planning.
Liaise with engineering IT and enterprise architecture teams to embed security into system design and selection.
Produce regular reporting and metrics on program effectiveness for leadership and stakeholders.
Oversee security testing procedures and manage remediation of identified risks.
Ensure audit trails and system logs comply with policy and audit requirements.
Lead security awareness training across the organization.
Requirements:
5 years of experience in Information Security.
Hands-on experience with information security frameworks: CIS Controls v8 NIST ISO 27001 SOC 2 PIPEDA or PCI.
Experience writing cybersecurity policies and conducting security gap analyses.
Experience translating business stakeholder needs into technical security requirements.
Experience with cloud security controls (AWS or equivalent).
Familiarity with security platforms such as CrowdStrike and Mimecast.
Experience working alongside legal audit and compliance teams.
Strong written and verbal communication skills able to engage technical and non-technical audiences.
University degree or college diploma in Information Security Cybersecurity or a related field (or equivalent experience).
Nice to have:
Bachelors in Information Systems; MBA or MS in Information Security preferred.
Security certifications: CISSP CISA CISM GIAC CBCP MBCI or similar.
Experience in an agile fast-paced environment.
The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors including the scope complexity and location of the role; the skills education training credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program employees may also be eligible for performance-based case incentive awards.
Required Experience:
IC
About Company
At Zensurance we simplify the process of getting commercial insurance for your business. Get a free online quote!