Security Program Manager

Job Responsibility: TRADER Corporation is a trusted Canadian leader in online media, dealer and lender services. The company is comprised of AutoTrader.ca, AutoSync and Dealertrack Canada. AutoTrader.ca (AutoHebdo.net in Quebec) offers the largest inventory of new cars and used cars in Canada, receiving over 25 million monthly visits to its marketplace. With over 3,500 subscribers and counting, AutoSync is the largest and fastest growing dealer and OEM software provider in Canada. The platform's suite of connected automotive software solutions brings advertising, conversion and operational support together, synchronizing the entire retail process. AutoSync's diverse range of offerings includes: vAuto, EasyDeal, xtime, Motoinsight, Activix, TAdvantage and TRFFK. Dealertrack is Canada's largest automotive financing portal, enhancing efficiency and profitability for all major segments of the automotive, marine, recreational vehicle, motorcycle and powersport retail industries. Over 6.5 million credit applications are submitted via the Dealertrack Canada portal each year. Visit tradercorporation.com to learn more.. Summary As ai integral part of the team, the security program manager, you will be responsible for planning, executing, and monitoring security projects and initiatives across our organization. You will work closely with security engineers, analysts, and stakeholders to ensure that our security goals and objectives are met. You will also oversee the security risk management process, conduct security audits and assessments, and report on security metrics and performance. The ideal candidate is a collaborative team player who can influence and collaborate with a team of security and technology professionals to ensure organizational goals are met in budget and on time; a collaborating partner who is believes in teamwork. Responsibilities

• Manage the security project portfolio and ensure alignment with the security strategy and roadmap.
• Coordinate and communicate with security teams and stakeholders on project scope, deliverables, status, and issues.
• Track and report on security project progress, budget, resources, and risks.
• Facilitate the security risk management process, including identification, analysis, mitigation, and reporting of security risks.
• Conduct security audits and assessments to evaluate the effectiveness of security controls and compliance with security policies and standards.
• Perform and oversee static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) to identify and remediate security vulnerabilities in the software development lifecycle.
• Manage the pentest results and ensure that the findings are properly validated, prioritized, and resolved.
• Prepare and present security reports and dashboards to senior management and stakeholders.
• Provide guidance and support to security teams and stakeholders on security best practices, processes, and tools.
• Assist with the proof of concept and implementation of new security products and solutions.

Qualifications

• Bachelor's degree in computer science, information security, or related field, or equivalent work experience.
• At least 5 years of experience in security project management, security risk management, or security consulting.
• Strong knowledge of security frameworks, standards, and best practices, such as NIST, ISO, PCI, etc.
• Proficient in security project management tools and methodologies, such as Agile, Scrum, Kanban, etc.
• Excellent communication, collaboration, and problem-solving skills.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) certification is a plus.
• Project Management Professional (PMP), Certified Scrum Master (CSM), or Certified Project Management Practitioner (CPMP) certification is preferred.
• Experience with SAST, DAST, and SCA tools and techniques is highly desirable.
• Experience with pentest tools and methodologies is a plus.
• Experience with evaluating and implementing new security products and solutions is a plus.

What's in it for you…

• We understand that there is life at work and life outside of work. Here are a few benefits we all benefit from that support us to be our creative best.

Fitness and wellness

• We provide discounts to nation-wide gyms, onsite gyms (when we're in the office), an Employee and Family Assistance Program, as well as a virtual wellness program.

Benefits from Day 1

• Gym discounts
• Local in-office free gyms
• Employee and Family Assistance program
• Weekly virtual wellness events
• Conferences & training budget
• Regular internal training programs

Financial planning

• Let us help you invest in your future with 3% matching towards your pension and multiple forms of income protection.

Competitive salary

• Annual bonus structure
• 3% CPP matching