Our Technology team wakes up every day with one goal in mind - connecting Canadians to the people and things that matter most. Together, we are proud to support 30 million Canadians each month through managing a robust portfolio that champions leading-edge technology. We drive large-scale, complex, and high-visibility technology projects and programs that shape the future of technology in Canada and expand connectivity from coast to coast. If you are interested in being a part of this, consider applying for the following opportunity:


The Rogers Information and Cyber Security Unit is seeking a highly motivated Senior Security Specialist to join our Cyber Protection Centre. This role is responsible for maintaining and advancing our existing cloud security program through the continual review and development of Rogers Cyber Security strategy and processes.


Who we’re looking for:
Reporting to the Senior Manager of Cyber Vulnerability Management, the Senior Security Specialist is part of a team accountable for reducing the probability of security incidents through advanced technical assessment, misconfiguration reductions, code and runtime posture, security controls.


What you’ll do:

• Assess security configurations of cloud services within several cloud environments, including but not limited to Infrastructure-as-a-Service (Iaa S), Platform-as-a-Service (Paa S), Software-as-a-Service (Saa S), and marketplace offerings.
• Strengthen security posture of cloud infrastructure by conducting security assessments to identify misconfigurations and vulnerabilities within cloud environments. Assist team members with using tools and techniques to assess the security posture of cloud services, identify weaknesses or gaps, and recommend appropriate remediation actions.
• Review internal information security standards and recommend security compliance guidance for cloud service security capabilities. Issue recommendations for the development of new guardrails where necessary.
• Foster strong relationships with cross-functional teams. Additionally, work with architecture, application development, security teams, and other stakeholders to ensure that the provided guidance is comprehensive and practical.
• Stay up to date with the latest trends and developments in cloud security and provide recommendations for enhancing security configurations based on emerging threats and vulnerabilities.
• Mentor Security Specialists to foster a culture of continuous learning and improvement.

What you bring:

• 4+ years of proven experience as Cloud Security Specialist or in a similar role.
• Cloud Service Providers: Proficiency in platforms like AWS, Azure, and Google Cloud Platform (GCP) is essential.
• Cloud Security Architecture: Understanding of secure design and implementation practices for cloud architectures, including knowledge of security frameworks and best practices.
• Network Security: Strong understanding of networking concepts, including firewalls, VPNs, and intrusion detection/prevention systems.
• Identity and Access Management (IAM): Expertise in managing user roles, permissions, and policies in the context of secure access to cloud resources.
• Encryption and Data Protection: Knowledge of encryption techniques and data protection methods to secure data both at rest and in transit.
• Compliance and Governance: Strong understanding of regulatory controls related to security (e.g. SOX & PCI-DSS).
• Scripting and Automation: Proficiency in scripting languages like Python, Power Shell, or Bash to automate security tasks and responses.
• Incident Response: Skills in detecting, responding to, and mitigating security incidents in a cloud environment.
• Security Protocols and Procedures: Understanding of various security protocols and procedures to protect cloud infrastructure.
• Direct experience with developing reporting dashboards, security metrics, KRIs and KPIs for leadership.
• Understanding and practical application of security frameworks, standards, and best practices (e.g., CSA, CIS Benchmarks, NIST 800-53, ISO 27001)
• Understanding of SDLC (Agile methodology), Dev Sec Ops, Zero Trust principles.
• Proven record of accomplishment of staying on top of the latest trends and developments in cloud security and a passion for knowledge sharing and mentorship.
• Excellent problem-solving skills and determined to solve difficult problems.
• Tools - Power Bi, Microsoft Office, Developer tools, IDE, Containerization technologies, Modern cloud services, basic knowledge on AI (Artificial Intelligence) use cases in clouds.
• A bachelor’s or master’s degree in computer science, Information Systems Security, or in a related field.

Soft Skills

• Excellent research and strategic thinking skills, with a strong attention to detail and reporting capability.
• Effective communication and interpersonal skills, with the ability to effectively communicate complex security concepts and recommendations to a variety of stakeholders.
• Proven ability to manage multiple tasks and thrive in a fast-paced & dynamic environment.
• Works well under pressure and time constraints and can prioritize competing priorities appropriately. Communicates effectively with meaningful and articulate verbal discussions.
• Synthesizes information into succinct, concise, and logical summaries and reports.
• Ability to work with teams to achieve goals and meet deadlines in a fast-paced environment.
• Can work independently with minimal supervision and guidance.

Certifications:

• ISC2 CISSP (mandatory); CCSP (desired).
• Preferred - Security specialty in AWS, Azure or GCP
• SANS Cloud Certifications.

What’s in it for you?
We believe in investing in our people and helping them reach their potential as valuable members of our team. As part of our team, you’ll have access to a wide range of incredible resources, growth opportunities, discounts, and perks, including:

• Competitive salary & annual bonus
• Competitive & flexible health and dental benefits, pension plan, RRSP, TFSA, and Stock matching programs.
• Discounts: Enjoy up to 50% off Rogers Services and Blue Jays Tickets, 25% off
• TSC items, and a 20% discount on all wireless accessories sold in Rogers stores.
• Paid time off for volunteering
• Company matching contributions to charities you support
• Growth & Development Opportunities:
  • Self-driven career development programs (E.g. My Path program)
  • Rogers First: priority in applying to internal roles of interest
• Wellness Programs:
  • Homewood employee & family assistance program
  • Cognitive Behavioural Therapy (CBT) & Virtual therapy sessions
  • Low or no-cost fitness membership with access to virtual classes
• Our commitment to the environment and diversity:
  • Work for an organization committed to environmental protection
  • Strong commitment to diversity and inclusion with employee resource groups supporting equity-deserving groups including groups representing People of Colour, 2SLGBTQIA+, Indigenous Peoples, Persons with Disabilities and Women. We all bring something different, and we know what makes us different makes us great.

This is a hybrid work position and will require you to be in office three days per week. You can choose which days in office work best for you!


If you are selected to move forward in the recruitment process, here is what you can expect:

• 15-minute phone screen with your recruiter, 1-hour virtual interview with Hiring Manager, 30-minute final round virtual interview with Director of the team. Best of luck!

To protect our people, brand and assets, a pre-employment background check will be conducted. As part of our selection process, all candidates must clear a criminal background check. Additionally, a credit check and drivers abstract may be required depending on the role.


Schedule: Full time
Shift: Day
Length of Contract: Not Applicable (Regular Position)
Work Location: 8200 Dixie Road (101), Brampton, ON
Travel Requirements: None
Posting Category/Function: Technology & Information Technology
Requisition ID: 312947


At Rogers, we believe the key to a strong business, is a diverse workforce where equity and inclusion are core to making everyone feel like they belong. We do this by embracing our diversity, celebrating our different perspectives, and working towards creating environments that empower our people to bring their whole selves to work. Everyone who applies for a job will be considered. We recognize the business value in creating a workplace where each team member has the tools to reach their full potential by removing any barriers for equal participation. We work with our candidates who are experiencing a disability throughout the recruitment process to ensure that they have what they need to be at their best. Please reach out to our recruiters and hiring managers to begin a conversation about how we can ensure that you deliver your best work. You matter to us! For any questions, please visit the Recruitment Process FAQ.

Posting Notes: Technology


#LI-ED1