Information Security Lead
Location: Multimatic IT, Markham, Ontario, Canada
Multimatic is a privately held, global enterprise supplying engineered components, systems, and services to the automotive industry. Multimatic IT is responsible for supporting a complex and global IT landscape covering multiple divisions and countries.
The Information Security Lead plays a critical role in safeguarding Multimatic information resources. The Information Security Lead manages three key programs, Threat and Vulnerability Management, Cyber Threat Intelligence, and Governance, Risk and Compliance.
Job Responsibilities
- Threat and Vulnerability Management (TVM)
- Configure vulnerability scans, research the latest threats, drive remediation efforts, and reporting on compliance levels and opportunities for improvement across the enterprise.
- Develop a roadmap for maturing the vulnerability management and threat intelligence capabilities.
- Cyber Threat Intelligence
- Assess the existing Security Incident and Event Management SIEM to esnure data sources are sufficient and complete.
- Leverage the MITRE ATT&CK framework, monitor the cyber threat landscape, and evaluate existing data sources to identify opportunities for new SIEM content development.
- Develop SIEM detection uses cases and review with relevant stakeholders.
- Governance, Risk and Compliance (GRC)
- Perform assessments and gap analyses of Multimatic’s control environment against industry and regulatory frameworks (i.e. TISAX, ISO 27001).
- Develop an effective vendor management program.
- Maintain IT Risk Register and follow-up on risk remediation activities.
- Define, maintain and implement corporate Cybersecurity documents including policies, standards, guidelines, workflows, and procedures.
Job Qualifications
- 6 to 8 years of relevant experience culminating in a proven background in technology design, implementation, and delivery.
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Computer or Electrical Engineering (or similar field).
- Experience with Rapid7 a plus.
- Experience evaluating security controls and conducting risks assessments.
- Strong analytical, problem solving, and writing skills, including the ability to work with technical and non-technical business owners.
- High level of interest in information security.
To know more about Multimatic Career - please watch the video - https://youtu.be/wO3GpzmOSiU
Closing date for applications is April 1st 2022
If you are interested in this position, apply by sending us your cover letter and resume.
We thank all interested candidates in advance; however, only individuals selected for interviews will be contacted.
As part of our commitment to ensuring our employment practices are fair, accessible, and inclusive of persons with disabilities, recruitment-related accommodations for disabilities, are available upon request throughout the recruitment and assessment process for applicants with disabilities.