Security Officer

Develop, implement and monitor a strategic, comprehensive and cost-effective enterprise information security and risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization; maintain this corporate wide information security program to ensure that information assets and data are adequately protected and compliance is upheld.

My client is a multinational company

We are currently looking for a security officer.

Develop, implement and monitor a strategic, comprehensive and cost-effective enterprise information security and risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization; maintain this corporate wide information security program to ensure that information assets and data are adequately protected and compliance is upheld

Utilize security experts and technology to support a secure infrastructure and data security; lead strategic security planning with IT management, Risk Management and users across the company footprint

Create and manage information security and risk management awareness training programs for employees, contractors and approved system users.

Work directly with business units to facilitate IT risk analysis and risk management processes; identify acceptable levels of risk, and establish roles and responsibilities with regard to information classification and protection

Provide subject matter expertise to executive management on a broad range of information security standards and best practices, such as ISO 17799, CobiT and ITIL

Coordinate the performance of internal and external network and systems vulnerability assessments

Validate the completion of the annual information security risk assessments. Implement a process for regularly validating the code for internally developed applications

Work with Legal & Compliance pertaining to Data Privacy to ensure security programs are in compliance with applicable laws, regulations and policies, to minimize or eliminate risk and audit findings.

Collaborates with Information Systems management to develop and implement security standards and procedures for information system platforms and system environments.

Serves as a contact point for information and technical security engagements to ensure the company's compliance with internal regulatory requirements.

Enhance incident response and crisis management related to security issues.

Coordinate use of external resources involved in the information security program including, but not limited to, interviewing, negotiating contracts and fees, and managing external resources related to security.

Develop or maintain business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program.

Architect & Implement the DAM Identity and Access manager system.
Provide functional leadership in all aspects of IAM from early phase through design, code, and test, deploy and maintain.
Participate to document business and application requirements review.
Implement Single Sign-On and related access policies to meet the organizational requirements
Review Designs and follow implementation of identity governance processes to meet and enforce security policies and standards.
Maintains technical documentation such as installation and configuration manuals and systems administration guides
Review the integration of IAM system components with IT systems.

REQUIRED KNOWLEDGE:

Bachelor's degree or equivalent experience in an information technology discipline with more than 10 years of experience in the information security field, which must include experience managing a staff of security personnel
Certifications as Information Security Manager or as certified Information Systems Security Professional will be considered as an asset.
Experience with current IT security technologies
Broad financial industry understanding and knowledge of security approaches that support the operational processes
Comprehensive knowledge of government and regulatory agencies policies/procedures from a security and audit perspective
Knowledge of technological trends and developments in the area of information security and risk management.
Past job experience in the financial sector

LANGUAGES REQUIRED:

- Fluently English and French

We offer a nice job in a nice company