Information Security Consultant

Job Responsibility: Location: Calgary, AB, CA Vancouver, BC, CA Montréal, QC, CA Toronto, ON, CA Edmonton, AB, CA Ottawa, ON, CA Req ID: 37608 Jobs by Category: Security & Automation Job Function: Cybersecurity Status: Full Time Schedule: Regular

Description

We live in and work in a rapidly evolving digital world where cyber security is critical. Protecting information and ensuring the reliability of network and services is paramount. The TELUS Health CSO team strives to always be steps ahead, tackling the toughest cyber security challenges head-on with top talent and cutting-edge technology.

The TELUS Health CSO team is committed to providing excellence in securing our internal and customers' data and systems, ensuring world-class reliability of security networks and systems, and improving our overall cyber security posture. We manage our cyber risks and provide industry leading cyber governance, assurance and oversight to secure our data.

You'll partner with industry leaders to meet the cyber security needs of both TELUS Health and our customers to meet the demands of an increasingly complex and ever-changing cyber security landscape. We are passionate about learning and growing as individuals and as a team, all of which enables us to thrive in a dynamic, fast-paced environment.

Here's the impact you'll make and what we'll accomplish together As Information Security Consultant, you will support the Information Security Manager in the advancement of TELUS Health's Information Security Management System and help drive cyber security improvements in line with our cyber security strategy, aligned to our business goals. You'll play an integral role in the elevation of security policy and standards in an international context, and support enterprise-wide operational implementation of security initiatives in support of ensuring the confidentiality, integrity, and availability of sensitive data and information systems.

As a member of the TELUS Health Chief Security Office (CSO) Team, you'll help to build an innovative approach to delivering information security in a dynamic environment by collaborating with the broader security, IT, product and business units, and establishing risk-based, repeatable, and measurable security processes across the organization.

What you'll do

• Assist in the development and implementation of security policies, standards, procedures, and guidelines to ensure compliance with industry standards and international regulations
• Assist in the growth of the information security management system (ISMS), developing recommendations for evaluation and continual improvements in governance over time
• Design security controls and collaborate with system and product owners to implement effectively on a global scale, across diverse product offerings, and within the context of existing systems and processes
• Maintain in-depth knowledge of information security frameworks, global data protection and health-industry specific regulations, methodologies and standards and adapt security policy to meet changing threats and requirements
• [Monitor, investigate and assess security controls for compliance and effectiveness via technical and physical process, raising security risks and contributing to mitigation plans as necessary
• As an expert in information security, you'll provide advice and guidance concerning information security practices and requirements as a Subject Matter Expert across TELUS Health
• Perform security reviews of contracts and support response to security questionnaires, as required
• Participate in security risk identification and evaluations, develop risk mitigation strategies, and recommend security controls and measures to minimize risks
• Participate in/support internal security assessments and third-party audits and compliance assessments, ensuring adherence to regulatory requirements and industry standards
• Recommend and support administration and deployment of security technologies and tools to address security needs and support process improvements

Qualifications

You'll be a great fit for this role if…

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• You have 5+ years of experience in a similar capacity
• Intermediate understanding and experience in one or more information security domains (e.g. data protection and privacy, compliance, risk management, application and cloud security, and incident management)
• Intermediate experience with and knowledge of security frameworks, including ISO 27001 and ISO 27002, AICPA SOC 2 Trust Services Principles, NIST Cybersecurity Framework
• Familiarity with relevant data protection, privacy and health-related laws and regulations, such as GDPR, HIPAA
• Proficient communication and interpersonal skills, with the ability to communicate requirements effectively, develop consensus and build relationships with stakeholders at all levels of the organization
• A demonstrated ability to manage challenging situations and competing priorities in a fast-paced environment
• Comfortable with ambiguity, you are able to adapt, make adjustments and maintain focus and positivity through change
• Capable of defining an approach, seeking out resources and taking ownership for your objectives and responsibilities
• Experience supporting other independent contributors in growth and development, helping to build a strong and supportive team
• Effective analytical skills and attention to detail, with the ability to interpret and analyze security data and reports

Great-to-haves

• Certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO27K lead implementer are highly desirable.
• Experience in developing policy and implementing security control framework in the Health or related industry
• Fundamental/working knowledge of additional frameworks and standards, such as NIST 800-53, PCI-DSS, CIS Benchmarks, COBIT and/or ISF

Why TELUS?

At TELUS, you'll join a diverse team dedicated to learning, teaching, and impact; as individuals and as a team. As a workplace, we care about our team members and have a total rewards package that makes being a part of TELUS Health something to be proud of:

• 100% remote within Canada: so you can work where you feel most inspired (including in-person if YOU want to!)
• Stay healthy: flex benefits with options to customize coverage based on your lifestyle and needs, inclusively offering coverage for Gender Affirmation and Fertility treatments
• Virtual Care: premium access to digital healthcare for you and a loved one; avoid long waits at the clinic, just chat with a medical professional from your couch
• Work Life Integration: paid vacation and flexible well-being days
• Family leave: mothers, fathers and adoptive parents benefit from a top-up during part of their leave
• Pension plan: to help you save for the future with a generous company match (free money!)
• Employee Share Purchase Plan: you can invest in our shared success, company matched
• Wellness Spending Account: To support your whole person wellness
• Learning and development: Internal resources for business, leadership, and technical skills
• Savings: who doesn't love discounts? (on TELUS services and partner/supplier services and products)
• Employee and family assistance: LifeWorks provides free services to support you through life events
• Tools/Technology: We'll send you a work device enabling you to do your best work

By applying to this role, you understand and agree that your information will be shared with the TELUS Group of Companies' Talent Acquisition team(s) and/or any leader(s) who will be part of the selection process.

#LI-remote