Info Security Specialist

Info Security Specialist
Location:
Toronto, ONOnsite Flexibility
Hybrid — 3 days in office, 2 days work from homeContract Details
Position Type:
ContractContract Duration:
1 year (with possibility of extension based on business needs and performance;
conversion to permanentalso possible based on business needs and performance)Pay Rate:
C$90.00–C$106.00 / Hour (CAD)Shift / Schedule:
Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per dayTravel Requirements:
Not requiredJob Summary
We are seeking an experienced
Information Security Specialist
to provide security consulting, governance oversight, and technical expertise across complex technology and business initiatives. In this role, you will partner with Architecture, Infrastructure & Engineering, and Risk teams to assess security risks, develop security standards, and implement effective security controls that support modern technology solutions. You will play a key role in defining security requirements, establishing governance guardrails, and enabling the secure adoption of cloud, container, AI, and enterprise network technologies.Key Responsibilities
Provide security consulting and risk assessments for technology initiatives and projects.Review solution designs and provide risk-based security recommendations aligned with enterprise security standards.Develop and maintain security standards, technical requirements, STIGs, control mappings, and implementation guidance.Support governance and security reviews for cloud, hybrid, on-premises, containerized, B2B, and emerging technology environments.Assess and provide guidance on security controls for Kubernetes, cloud-native platforms, APIs, SaaS solutions, AI-enabled technologies, and partner connectivity solutions.Design and maintain governance controls supporting secure access, URL filtering, network segmentation, B2B connectivity, and Zero Trust initiatives.Partner with technology teams to establish security guardrails and governance controls that can be consistently applied across the enterprise.Contribute to governance modernization, automation, and process improvement initiatives.Support enterprise-wide security governance programs and strategic security initiatives.Build strong relationships with business, technology, engineering, and security stakeholders.Review network traffic flows and identify security vulnerabilities and gaps.Assess firewall rules, risky network ports, and access control lists (ACLs).Understand routers, switches, VLANs, network architecture, and network diagrams.Review URL filtering, website blocking, risk ratings, and security controls.Conduct network security consultations and identify overly permissive configurations.Prepare detailed process documentation and technical specifications for audit purposes.Perform governance reporting and reconcile network changes against approved change orders and firewall tickets.Investigate reporting anomalies and compliance gaps.Must-Have Requirements
10 years of Networking experienceStrong understanding of security governance, risk management, and security control frameworks.Experience conducting security assessments and evaluating technology risk.Strong knowledge of network security technologies, architectures, and enterprise security principles.Strong knowledge of enterprise network infrastructure, including routers, switches, load balancers, proxies, DNS, and related network technologies. Ability to understand network traffic flows and assess security implications across complex enterprise environmentsRequired Skills
Strong networking fundamentals and engineering/build backgroundPractical understanding of network security and traffic flowsKnowledge of high-risk ports and why certain ports should be blockedFirewall security and rule assessment experienceRouter, switch, VLAN, and ACL knowledgeNetwork vulnerability and security gap identificationURL filtering and web security controlsStrong technical writing and
process documentation
skillsExperience preparing Methods of Procedure (MOPs)Must be comfortable working with established corporate documentation templatesMust document security controls, approval steps, risk assessments, and implementation processesDocumentation must be suitable for regulatory and internal audit reviewsStrong communication skills (written and verbal)Strong documentation skills (writing processes)Strong collaboration skills, team player mindsetPreferred Skills
Industry certifications such as CISSP, CCSP, CISMKnowledge of Zero Trust architectures, secure access technologies, and network segmentation principlesAutomation skillsAutomation experience using Ansible and TufinBitbucket experienceAutomating firewall request reviews, approvals, or governance reportingExcel, macros, and reporting/reconciliation experiencePrior financial institution, highly regulated, or large enterprise environment experience (banking, insurance, etc.)Education Requirements
Post-secondary degree or equivalent practical experienceCISSP, CCSP, or CISM certification is a nice to haveRequired Experience
10 years of overall experience in information securityExperience in a large enterprise environment with formal change management and audit processesNice-to-Have Experience
Prior experience in financial institutions, highly regulated, or large enterprise environmentsWork Environment / Physical Requirements
Approximately 2 hours per day on average spent in meetingsSupports a team of approximately 12 peopleInternal-facing role;
no access to customer dataSupports the client's global network, including international teams3-day in-office commitment per week (Mississauga, Scarborough, or Downtown Toronto locations)Anchor days are flexibleOvertime: not likelyRotation: NoImportant Notes
This is a
network security governance
role, not a traditional network engineering or firewall operations position. The team acts as the governance and oversight function for the entire network, ensuring network changes and security controls comply with internal policies and audit requirements.Candidates whose experience is primarily infrastructure implementation without security governance expertise are not suitable for this role.Candidates who can perform technical work but cannot clearly document the process will not be successful in this role.Interview process: 2 steps — virtual and in-person, 1 hour, 1-on-1 and panel format.Training period: TD onboarding followed by 3–4 weeks of role-specific training.About the Client
This client is a leading
financial services and banking institution
operating across Canada and internationally, with a global network that includes teams across multiple regions. The organization employs tens of thousands of professionals and ranks among the largest banks in North America by assets. Teams here include network security specialists, IT governance professionals, solutions developers, engineers, and technology strategists who collaborate across large, complex enterprise environments with formal change management, audit, and regulatory compliance requirements.About GTT
GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska-based company and one of the largest Alaska Native-owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.Job Number: 26-18514#LI-Hybrid #LI-GTT #gttca
#J-18808-Ljbffr