Information Security Specialist

$120K — $150K *
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 10+ years of cybersecurity experience, including 5+ years in an operational role.
  • Familiar with cybersecurity due diligence in acquisitions.
  • 3+ years working with business leaders on enterprise projects.
  • Hands-on experience with security technologies (e.g., Firewalls, IDS/IPS, VPN).
  • Experience in Cloud Security Operations (e.g., Azure, AWS).
  • Post-secondary education in IT, Business Administration, or a related field.
  • Current certification in cybersecurity or risk management (e.g., CISSP, CISM).

Responsibilities

  • Conduct security risk assessments and recommend measures to manage risks.
  • Develop and align information security policies with business needs and industry standards.
  • Recommend compliance and remediation initiatives to protect the business from threats.
  • Maintain awareness of industry best practices and trends in information security.
  • Develop and implement security strategies that align with business objectives.
  • Complete business cases focused on security solutions and risk assessments.
  • Serve as the primary contact for local security and advise business partners.

Benefits

  • Opportunities to learn from industry experts.
  • Extended health and dental benefits.
  • Retirement savings plan with company contributions.
  • Health & Wellness offerings.
  • Mental health support programs for employees and families.
  • Assistance for industry designation completion.
Full Job Description
We are hiring an Information Security Specialist to join our team in Toronto. In this role, you will assist with building and operating information initiatives for technology, processes, and services to ensure ongoing effectiveness of the information security program and protect the business from security threats. You will bring a combination of technical and business knowledge to improve information security and IT risk in all aspects of the business. You will foster relationships with business and IT stakeholders across the company and its diverse ecosystem of affiliates and partners.



The Information Security Specialist will:
  • Provide leadership and execute security activities that align with business objectives of information security program and the defined risk appetite.

  • Continually refine security platform and tool fit assessment practices to support merger, acquisition, and integration processes.

  • Evaluate and recommend new tools, capabilities, and enhancements to strengthen the security ecosystem.

  • Work closely with SOC, IT, and engineering teams to align platform capabilities with business and security objectives.

  • Perform platform configuration, hardening, and continuous improvement aligned with security best practices.

  • Implement and maintain integrations between security tools and enterprise systems.

  • Lead platform upgrades, patching, and lifecycle management activities.

  • Monitor platform health, capacity, and performance, ensuring scalability and resilience.

  • Troubleshoot and resolve platform-related incidents, collaborating with vendors and internal teams as needed.

  • Automate operational tasks to improve efficiency and reduce manual effort.

  • Maintain documentation, standards, and procedures for platform usage and administration.

  • Provide support to investigate security incidents to digital forensic investigations into security incidents, breaches, and suspicious activities

  • Leverage knowledge of attacker tactics, techniques, and procedures (TTPs) to reduce organizational risk and strengthen defenses.

  • Identify vulnerabilities through security testing, assessments, and continuous monitoring practices.

  • Apply active defense techniques and conduct network forensics to proactively identify suspicious activity.

  • Detect and investigate threats using packet analysis, logging, and digital forensic techniques.

  • Follow and contribute to a structured six-step incident response process for effective containment and recovery.

  • Analyze malware behavior and perform reverse engineering to understand and mitigate threats.

To be successful as an Information Security Specialistwith People Corporation, you will need:


Experience:

  • At least 5 to 8+ years cybersecurity experience, with at least 3-5+ years in security operations.

  • Hands-on experience with IT infrastructure and security technologies (e.g., Firewalls, IPS/IDS, WAF, VPN, SIEM, MXDR, EDR, CASB, SSO, MFA, DLP).

  • Working knowledge of intrusion prevention, virus detection, firewalls, VPN technologies, authentication, encryption, access controls, DLP, certificate services, protocol analysis, and database security.

  • Strong understanding of networking protocols, operating systems, and common vulnerabilities and remediation strategies.

  • Experience securing cloud environments, particularly Azure, M365, and/or GCP.

  • Excellent communication and cross-functional collaboration skills.

  • Strong analytical and problem-solving abilities.

  • Familiar with cybersecurity acquisition due diligence processes to assess regulatory compliance, security posture, and third-party risk.

  • Familiar with cybersecurity acquisition due diligence processes to assess regulatory compliance, security posture, and third-party risk.

Education:

  • Post-secondary education in Information Technology, Computer Science, Information Security, or equivalent.

  • Relevant senior certification such as CISSP, GCTI, GCIH

  • Knowledge of security principles, frameworks, and standards (e.g.MITRE ATT&CK framework and threat actor analysis, Incident Response lifecycle (NIST / SANS)

Whats in it for you:
  • Learn by working alongside our experts

  • Extended health care and dental benefits

  • A retirement savings plan with company contributions

  • A suite of Health & Wellness offerings

  • Mental Health programs and support for you and your family

  • Assistance for the completion of industry designations

  • Competitive compensation



Salary Range

The base salary for this position is between $120,000 - 150,000 annually.

This represents base salary only and does not represent other variable compensation components of our total compensation (i.e. annual bonus, commission etc). The actual base salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are selected to move forward in our recruitment process, the Talent Acquisition Specialist will be able to provide additional details of the total compensation for this role.

Similar Jobs

More Jobs at

More Information Technology Jobs

Find similar Information Security Specialist jobs: