IT Security Consultant

\r\n\r\nJob Description\r\n\r\n \r\n\r\nThe Opportunity:\r\n\r\nDo you live and breathe cyber security? Are you passionate about keeping your workplace, data and operations safe? If this sounds like you, we have an opportunity for you. Maple Leaf Foods is looking for an IT Security Consultant. In this role you will be responsible for:\r\n\r\n \r\n\r\n\r\n\tModern cyber security tools and solutions across the NIST phases (identify, protect, detect, respond, recover)\r\n\tLeading tools and systems in our modern infrastructure and data-driven culture in expanding automation and controls plants.\r\n\tLeading and participating in Network vulnerability evaluations and assessments, Digital forensics, Threat intelligence analysis Active cyber tasks, Malware identification and analysis\r\n\tParticipating and leading in cyber event mitigation and incident response programs including red teaming.\r\n\r\n\r\n \r\n\r\nAny MLF team member interested in being considered for this role are encouraged to apply online by October 19. Applications received beyond that date are not guaranteed consideration.\r\n\r\n\r\nReason for vacancy:  Existing Headcount \r\nCompensation:  $96,000 - $141,000 CAD base pay annually plus annual short-term incentive\r\n \r\n\r\nThe above compensation reflects the target compensation for the position at the time of posting. The base salary offered may vary based on a variety of factors including skills, experience, education, training, job- related knowledge, and other organizational requirements. For part-time roles, salaries are adjusted according to scheduled hours.  In addition to base salary, this role is eligible to participate in Maple Leaf’s annual short-term incentive plan. \r\n\r\n \r\n\r\nSnapshot of a Day-in-the-Life:\r\n\r\n\r\n\tStrong, collaborative team of energetic and experienced security experts\r\n\tSupport the identification, selection, design, and implementation of cutting-edge security technologies and solutions.\r\n\tDesign and implement security measures for the protection of computer systems, networks and information both on-premise and cloud-based.\r\n\tIdentify and define system security requirements.\r\n\tConduct security assessments and translate business and project requirements into documented, risk-based security requirements and recommendations.\r\n\tPresent security findings, solution options, remediation priorities, and residual risks clearly to technical and business stakeholders, and track recommendations through resolution.\r\n\tPerform threat modelling and security design reviews, and develop reusable security patterns, standards, reference architectures, and solution design documentation.\r\n\tDesign and assess identity and access management controls, including privileged access management, conditional access, identity governance, service accounts, workload identities, and secrets management.\r\n\tEmbed security into the software development lifecycle through application and API security reviews, CI/CD security controls, code and dependency scanning, infrastructure-as-code review, and container security.\r\n\tDesign and assess cloud security controls, including secure landing zones, cloud security posture management, workload protection, logging and monitoring, identity configuration, encryption, and native cloud security services.\r\n\tDefine and assess data security controls, including data classification, information protection, data loss prevention, encryption, key management, retention, and privacy-by-design requirements.\r\n\tCoordinate security testing, perform control and configuration reviews, validate remediation, and complete post-implementation security assurance activities.\r\n\tMaintain project status, security risk and control-effectiveness reporting, vulnerability trends, and concise executive-ready summaries.\r\n\tProvide guidance to teammates and colleagues across the organization on cybersecurity practices and engineering principles\r\n\tDevelop technical solutions and security tools to help mitigate security vulnerabilities and support efficient operations.\r\n\tPrepare and document standard operating procedures and protocols.\r\n\tTechnical hands-on experience implementing Cloud security solutions and controls on Azure, AWS, or similar cloud service provider.\r\n\tCollaborate with internal cyber teams including architecture, GRC and Operations from discovery, scoping & design to the post implementation handover.\r\n\tCollaborate with the project stakeholders throughout the project cycle to minimize impact to integrated systems and service ensuring a smooth delivery.\r\n\tCollaborate with all functions of the business to constantly improve and evolve our Cyber Security posture.\r\n\r\n\r\n \r\n\r\nWhat You’ll Bring:\r\n\r\n\r\n\tUndergraduate degree in computer science, engineering, or a related discipline.\r\n\t5+ years' experience in information security or engineering\r\n\t3+ years of industry experience working in Cyber Security, with focus on technical, hands-on delivery of Cyber Security projects.\r\n\tExcellent written and verbal communication, interpersonal, intercultural skills, and the proven ability to influence and communicate effectively at all levels\r\n\tKnowledge across diverse IT systems, networking, load balancers, firewalls, and security components, Server, hypervisor, security applications, and operating systems.\r\n\tExpertise in network security technologies that will aid network projects: e.g., load balancers, Certificates, IDAM, IDS/IPS, VPN, NextGen firewalls, SIEM, Endpoint etc.\r\n\tRepresent cybersecurity within Enterprise Architecture and Platform Engineering forums to ensure projects and designs are based on internal and industry best security practices.\r\n\tTechnical experience in designing and implementing infrastructure components required for Cyber-related projects.\r\n\tExpertise in the hands-on delivery of advanced, diverse security tools and systems in modern infrastructure.\r\n\tExperienced working with the industry recognized frameworks and standards including NIST\r\n\tExcellent communication skills, analytical thinking skills and ability to work in a fast-paced environment.\r\n\tExpertise in working with SIEM, MDR and managed services and incident response programs and ongoing operating optimization tasks.\r\n\r\n\r\nNice to have:\r\n\r\n\r\n\tIndustry recognized professional security certifications such as MS Certified Azure Security Engineer, CISSP, CCSK, CCSP, are desired\r\n\tBilingual English/French written language would be an asset\r\n\r\n\r\n \r\n\r\nOther Desired Skills:\r\nKnowledge of design, implementation, and maintenance of following security domains & technologies:\r\n\r\n\r\n\tCloud Security\r\n\tDevSecOps\r\n\tZero Trust\r\n\tSIEM\r\n\tEDR\r\n\tMalware defense\r\n\tEncryption\r\n\tCertificate and Key Management\r\n\tLocal area networks and firewalls\r\n\tScripting\r\n\tVulnerability management\r\n\tIDS/IPS\r\n\tWeb filtering\r\n\tDirectory service\r\n\tMulti-factor authentication systems\r\n\tExploits and hacking techniques\r\n\tNetwork and operating system security principles\r\n\r\n\r\n \r\n\r\nWhat We Offer at Maple Leaf Foods:\r\n\r\n\r\n\tBeing part of a high-performance, people-focused company that has an inspiring and unique vision to become the most sustainable protein company on earth, and a deep commitment to sustainable protein across North America.\r\n\tAn inclusive company culture and a work environment that keeps our people safe, rewards excellence, and empowers everyone to learn and contribute their best. \r\n\tCompetitive Health and Wellness benefits that offer flexibility to meet your individual or family needs, including programs focused on improving mental health and wellbeing. These benefits start on your first day of employment.\r\n\tDefined Contribution Pension Plan with company matching that starts on your first day of employment.\r\n\tLearning and development opportunities, including workshops, ‘speaker series’ events, and resources that allow you to develop your skills and progress your career.\r\n\tComprehensive tuition reimbursement program that supports continuous learning and development of our team members through investment in eligible degrees, diplomas, professional certification, or trades programs.\r\n\tSupporting our deep commitment to community impact, we offer up to two paid days annually to volunteer at a cause of your choice.\r\n\r\n\r\n \r\n