Specialist Information Security

Specialist Information Security

At CNeverydaybrings new and exciting expectan interestingenvironment whereyourepart of making sure ourbusiness isrunning optimallyandsafelyhelpingkeep the economy on provide the kind of paid training and opportunitiesthat long-term careers are built on and we recognize hard workers whostriveto make a will be able to thrive in ourclose-knit safety-focused cultureworking together as ONE careers we offer are meaningful because the work we do matters. Join us!

Job Summary

CN is looking for a Cybersecurity GRC (Governance Risk & Compliance) specialist to help sustain and grow our Cybersecurity Governance team.

Reporting to the Cybersecurity Governance Risk & Compliance Manager this role supports CNs cybersecurity governance objectives by translating security risk and compliance requirements into practical processes evidence reporting and guidance for I&T and business stakeholders with a primary focus on maintaining supporting and operating the CN IS Management System .

Key Responsibilities

• Maintain support and operate CNs Cybersecurity GRC framework including information security classification risk management processes security - related policies dissemination activities and ongoing improvements to reflect business needs .

• Communicate and support security recommendations that meet business objectives in a proactive and pragmatic manner leveraging ServiceNow workflows and maintaining appropriate engagement with clients to support successful outcomes.

• Support control testing documentation and maintenance activities to help ensure security controls remain adequate effective and aligned with regulatory and cybersecurity requirements .

• Collaborate with the compliance team to ensure controls and compliance metrics are properly integrated into dashboards and reports that support overall metrics and KPIs.

• Track c ybersecurity issues risks and remediation actions in the ServiceNow Integrated Risk Management (IRM) module including follow-up on risk assessments security testing outcomes and related business impacts .

• Provide guidance during the assessment or review of new IT solutions and new or existing technologies to maintain alignment with regulatory requirements such as Sarbanes - Oxley PCI and SWIFT and security requirements using the ServiceNow Third Party Risk Management workflow.

• Interact with other cybersecurity teams and I&T stakeholders to understand apply and support the enforcement of security requirements .

Requirements

Experience

• Knowledge of CN IT operations and business units is an asset.

• 3 years of experience in c ybersecurity compliance IT audit or a related role .

• Practical experience with KPIs/KRIs

• Previous experience in risk management is an asset

• Experience with a GRC tool is an asset.

Education/Certification/Designation

• B achelors degree in an IT discipline or a related field -or- equivalent work experience

• Cybersecurity certifications such as Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) or other related certifications are an asset.

Technical Skills/Knowledge

• Knowledge of c ybersecurity risk management practices

• Cybersecurity g overnance and c ompliance frameworks

• Knowledge of industry standards and frameworks including the ISO/IEC 27000 series ISF NIST Special Publications risk management methodologies and security evaluation methodologies .

• Understanding of security and privacy regulations and legislative compliance requirements such as the Sarbanes-Oxley Act PCI DSS and PIPEDA .

• Knowledge of ServiceNow including its landscape & workflows

General Skills and Competencies

• Integrity with a high ethical standard

• Client-focused mindset with the ability to provide practical guidance to business and I&T stakeholders.

• Effective communication and interaction with others

• Teamwork and collaboration to achieve common goals.

• Flexibility to manage multiple assignments effectively and adapt to changing priorities .

About CN
CN is a world-class transportation leader and trade-enabler. Essential to the economy to the customers and to the communities it serves CN safely transports more than 300 million tons of natural resources manufactured products and finished goods throughout North America every year. As the only railroad connecting Canadas Eastern and Western coasts with the Southern tip of the U.S. through a19500 milerail network CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN is committed to programs supporting social responsibility and environmental stewardship. At CN we work as ONE TEAM focused on safetysustainabilityand our customers providing operational and supply chain excellence to deliver results.

About CN

CN is a premium railroad that sustainably generates value for our customers shareholders employees and stakeholders with an unwavering commitment to safety and service. Essential to the economy to the customers and to the communities it serves CN safely transports more than 300 million tons of natural resources manufactured products and finished goods throughout North America every year. CNs network connects Canadas Eastern and Western coasts with the U.S. South through a 20000-mile rail and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN powers the North American economy and is committed to programs supporting social responsibility and environmental stewardship.

At CN we are dedicated to building North Americas safest most inclusive and sustainable railroad which includes reflecting the communities in which we operate. Research shows that candidates often dont apply unless they feel they fit the job posting at 100%. To all potential applicants even if you dont meet every job requirement listed in a posting we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials accessible meeting rooms or other accommodations) please get in touch with our team at .

As an equal opportunity employer qualified candidates will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability protected veteran status and other protected status as required by applicable law.

Please monitor your email on a regular basis as communication to applicants is done via email.

Required Experience:

IC