Information Security Engineer
- Vaughan, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- Minimum of 3 years of experience in information security or a related field.
- Posting language
- English
- Posted
Original job description
The Opportunity
Reporting to the Senior IT Manager – Business Engagement, the Information Security Engineer is responsible for overseeing the implementation of security procedures and policy, safeguarding computer systems, networks and information, and promoting security best practices and awareness.
You Will
Benefits
Safety continues to be T&T Supermarket's top priority. We've established health and safety policies and measures to ensure our Stores, Food Processing & Production Centres and Warehouse & Distribution are as safe as possible.
T&T Supermarket is an Equal Opportunity Employer. We do not discriminate based on race, religion, color, national origin, gender, gender identity, age, veteran status, non-disqualifying physical or mental disability, or any other applicable characteristics protected by law.
Reporting to the Senior IT Manager – Business Engagement, the Information Security Engineer is responsible for overseeing the implementation of security procedures and policy, safeguarding computer systems, networks and information, and promoting security best practices and awareness.
You Will
- Implement, maintain, and enhance security policies, standards, and controls.
- Monitor, detect, and respond to security threats, vulnerabilities, and incidents.
- Conduct risk assessments before system deployments and perform periodic security audits on live systems.
- Manage security tools, including SIEM, intrusion detection and prevention systems (IDS/IPS), and data loss prevention (DLP) solutions.
- Remediate and patch vulnerable systems to mitigate security risks.
- Investigate security breaches and provide detailed reports and remediation strategies.
- Promote security best practices and awareness across the organization.
- Stay current with industry standards, emerging threats, and regulatory updates.
- Ensure compliance with regulatory frameworks such as PCI, PII, CASL, and other security mandates.
- Provide off-hours support and participate in shift rotations as required.
- Perform other duties as assigned by senior management.
- A bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).
- Minimum of 3 years of experience in information security or a related field.
- Experience in designing secure networks, systems, and application architectures.
- Proven expertise and practical experience working with a diverse range of infrastructure hardware.
- Strong knowledge of MS Windows and Linux-based system programming and architecture.
- Familiarity with risk management methodologies and best practices.
- Hands-on experience with security management tools such as IPS, IDS, DLP, and SIEM.
- Possession of security-related certifications (e.g., CISSP) is an asset.
- Strong analytical and problem-solving skills with keen attention to detail.
- Excellent interpersonal and communication skills with a service-oriented mindset.
- Ability to work in a dynamic environment with flexibility and responsiveness to evolving security challenges.
- Fluency in written and spoken English
- Able to communicate in Chinese (Mandarin and/or Cantonese) is an asset.
- This is an active job posting for a currently vacant position. We are recruiting to fill this role as part of our ongoing operational needs.
Benefits
- Performance bonus
- Comprehensive extended health, dental and vision care
- Retirement protection benefits
- Life / AD&D insurance
- Paid vacation, sick, marriage, bereavement leaves
- 10% in-store staff purchase discount
- Subsidized staff meal
Safety continues to be T&T Supermarket's top priority. We've established health and safety policies and measures to ensure our Stores, Food Processing & Production Centres and Warehouse & Distribution are as safe as possible.
T&T Supermarket is an Equal Opportunity Employer. We do not discriminate based on race, religion, color, national origin, gender, gender identity, age, veteran status, non-disqualifying physical or mental disability, or any other applicable characteristics protected by law.
More about this job
Responsibilities
Implement and maintain security policies and controls, monitor and respond to threats and incidents, assess risks, audit systems, and manage security tools such as SIEM, IDS/IPS, and DLP. Investigate breaches, remediate vulnerabilities, support regulatory compliance, and promote security awareness across the organization.
Requirements
Requires a bachelor's degree in computer science, information security, cybersecurity, or a related field, or equivalent experience, and at least three years of relevant experience. Candidates should have experience with secure architecture, infrastructure hardware, Windows and Linux, risk management, and security tools; CISSP or similar certification is an asset.
Skills
- Security Policy Implementation
- Threat Detection and Response
- Risk Assessment
- Security Auditing
- SIEM
- Intrusion Detection and Prevention Systems
- Data Loss Prevention
- Vulnerability Remediation and Patching
- Incident Investigation
- Secure Network and Systems Architecture
- Windows
- Linux
- Risk Management
- Regulatory Compliance
- Analytical and Problem-Solving Skills
- Security Awareness
Benefits
- Performance Bonus
- Extended Health Insurance
- Dental Insurance
- Vision Care
- Retirement Benefits
- Life and Accidental Death and Dismemberment Insurance
- Paid Vacation Leave
- Paid Sick Leave
- Paid Marriage Leave
- Paid Bereavement Leave
- Employee Purchase Discount
- Subsidized Staff Meals
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Retail
Keywords
- Information Security
- Security Policies
- Security Standards
- Security Controls
- SIEM
- Intrusion Detection Systems
- Intrusion Prevention Systems
- Data Loss Prevention
- Risk Assessment
- Security Audits
- Vulnerability Management
- Security Incident Response
- Secure Network Architecture
- Systems Architecture
- Application Architecture
- Infrastructure Hardware
- Microsoft Windows
- Linux
- Risk Management
- PCI
- Personally Identifiable Information
- CASL
- CISSP
- Regulatory Compliance
- Security Awareness