IT Security Administrator

LocationMississauga, Ontario
DepartmentInformation Technology
Position Overview

The IT Security Administrator will be an integral team member who will oversee Greenfield Global’s information security program and will be responsible for leading information security projects and initiatives to ensure the program aligns with industry standards.  This role will involve monitoring, maintaining and tweaking our security platforms while evaluating new ones.  This position will act as a leader for IT’s Incident Response squad and will steer the group to identify / remediate issues.  Greenfield runs a 24/7 environment; some duties are required to be performed during off hours.

Duties & Responsibilities
  • Continuously identify risk/opportunities and work with IT Teams to improve the organization’s security posture
  • Monitor IT security controls including but not limited to:
    • Firewalls
    • Intrusion Detection/Prevention System
    • Malware Protection System
    • Endpoint Anti-Malware Management
    • Remote Access Systems and VPN
    • Security Incidents
    • Data Loss Prevention
    • Network Security (Wired & Wireless)
  • Perform vulnerability assessments and remediation plans
  • Lead third-party pen tests
  • Analyzing security requirements, recommend improvements and configure security platforms
  • Validate and lead roll-out of latest security patches
  • Work with the IT teams to cross-train and delegate various security related functions
  • Escalation point for Service Desk with security related questions / tickets
  • Consult with staff, managers and executives about the best security practices and providing technical advice
  • Establish security metrics and provide regular reporting
  • Create engaging and impactful presentations for executives and board meetings (PowerPoint, Vision and other software)
  • Work with the IT teams in their development of disaster recovery plans
  • Assist with yearly corporate IT policy revisions
  • Maintain strong relationships with External/Internal Audit Committees, Risk & Compliance, Privacy and Operational Business Units.
Skills & Qualifications
  • Completion of a related technical post-secondary diploma/degree
  • Holds industry recognized information security certification(s) (CISA, CISM, CISSP, GSEC) or actively working on certification
  • 3+ years working experience in an IT security-oriented role
  • 2+ years performing Information Security Risk Assessments on new applications and systems
  • 2+ years configuring and monitoring various security platforms
  • 2+ years assisting in external / internal audits
  • 1+ years managing security in Azure and O365
  • Previous experience in other IT roles (developer, system/network administration)
  • Keeps up to date on IT security trends, security technologies, policies and processes
  • Must be able to work on a team and inspire increased productivity from teammates
  • Must be able to think and adapt quickly to meet business needs
  • Ability to maintain composure and instill confidence while managing multiple aspects of core business processes­­
  • Strong analytical skills and organizational abilities
  • Excellent communication and presentation skills required
  • Must be willing to travel to meet business objectives, approx. 5%.
Qualities
  • Possesses Company values of honesty, integrity, respect, commitment and open to change while modelling the Company Core Principles in all activities
  • Ability to foster collaborative, cross department relationships to meet common objectives