StackAdapt is the leading technology company that empowers marketers to reach, engage, and convert audiences with precision. With 465 billion automated optimizations per second, the AI-powered StackAdapt Marketing Platform seamlessly connects brand and performance marketing to drive measurable results across the entire customer journey. The most forward-thinking marketers choose StackAdapt to orchestrate high-impact campaigns across programmatic advertising and marketing channels.
As Information Security Manager, you will play a vital role in keeping StackAdapt’s systems and information secure by detailing and implementing enterprise security processes and procedures with an approach of continual process improvement and scalability. You will be responsible for identifying and remediating gaps in StackAdapt’s security systems, solutions and programs, as well as recommending specific measures that can improve StackAdapt’s overall security posture.
You will undertake cyber security activities and contribute to the management of risks posed to StackAdapt’s systems and information, from both internal and external security threats. In addition, you will proactively engage with the Information Security community to identify and mitigate relevant cyber threats, investigate incidents and work with stakeholders to raise awareness of the importance of Information Security and ensure continued legal, contractual and regulatory compliance.
You will use your extensive knowledge of industry-standard frameworks, methodologies and good judgment to craft, implement, and coordinate systems that facilitate analysis of large sets of security data. In addition, you will collaborate across the Information Security department to identify, communicate, and remediate threats or vulnerabilities that may impact StackAdapt, our Team Members or our users and the community at large.
StackAdapt is a ‘Remote First’ company, therefore we are open to candidates located anywhere in North America for this position.
What you'll be doing:
- Supporting the delivery of strategic security initiatives, as well as driving tactical security enhancements.
- Providing security consultancy to individuals or projects led by the business, reviewing designs and following risk assessment/management procedures as required.
- Supporting the design and implementation of secure baselines for operating systems, databases and business applications.
- Overseeing vulnerability management procedures, including vulnerability scanning, reporting & analysis, validation, prioritisation and remediation.
- Preparing and delivering security awareness training material for StackAdapt staff.
- Supporting the facilitation of periodic attack & penetration testing exercises, including working alongside Engineering / Product Teams to remediate key findings.
- Managing / supporting incident response activities, including the collection of event data, detailed analysis of audit logs and reporting.
- Supporting the design and implementation of secure identity & access management policies across a wide range of IT solutions.
- Lead the security governance, risk assessment, and control implementation for the organisation’s Disaster Recovery and Business Continuity (IT Resilience) program, ensuring alignment with regulatory requirements and industry best practices.
- Supporting StackAdapt’s continuous efforts to meet compliance requirements, for example detailing and evidencing key security controls and mechanisms to external auditors.
What we're looking for:
- Experience in a wide range of cyber security domains, for example vulnerability management, security awareness, incident response, identity & access management, IT resilience, etc.
- Experience interpreting internal/external business challenges and the industry environment, resulting in an ability to provide key recommendations in order to improve products, processes or services.
- Strong communication skills, an ability to influence senior stakeholders and an ability to communicate information to audiences with varying backgrounds and domain knowledge.
- Knowledge of different cyber security solutions and toolsets is beneficial (e.g. SIEM, EDR, SOAR, vulnerability scanning, email security gateways, internet proxies / gateways, etc.).
- Experience with cloud computing services is beneficial (e.g. AWS, Azure, GCP, etc.).
We’ll be reaching out to applicants that have:
- 3+ years of work in a related field.
- Bachelor’s degree (or higher) in Computer Science or a related field; or a combination of relevant education, experience, and training.
- Knowledge of current hacking techniques, vulnerability disclosures, data breach incidents, and security analysis techniques.
- An ability to develop specific expertise, discern patterns of complex threat actor behaviour, and communicate an understanding of current and emerging cyber threats.
- Strong communication skills, both written and verbal.
- Strong organisational and time management skills, as well as an ability to meet deadlines.
- Strong analytical and evaluation skills.
- Ability to work comfortably in fast-paced environments, subject to frequent change and/or unpredictability.
- Security / IT Audit Certification is beneficial (e.g. CISSP, CISA, CISM, CompTIA Network+, GSEC, CEH, etc.).
- Experience with one or more scripting languages is beneficial (e.g. Python, PowerShell, Ruby, Perl, Bash, Javascript, Go, etc.).
StackAdapters Enjoy:
- Competitive salary
- RRSP matching
- 3 weeks vacation + 3 personal care days + 1 Culture & Belief day + birthdays off
- Access to a comprehensive mental health care platform
- Full benefits from day one of employment
- Work from home reimbursements
- Optional global WeWork membership for those who want a change from their home office
- Robust training and onboarding program
- Coverage and support of personal development initiatives (conferences, courses, etc)
- Access to StackAdapt programmatic courses and certifications to support continuous learning
- Mentorship opportunities with industry leaders
- An awesome parental leave policy
- A friendly, welcoming, and supportive culture
- Our social and team events!
