This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Information Security Specialist in Canada.
In this role, you will play a critical part in safeguarding information assets and strengthening the organization’s overall security posture across a fully remote, global environment. You will work closely with technical, operational, and leadership teams to translate regulatory and security requirements into practical, effective controls. Your expertise will directly contribute to compliance, risk management, and continuous security improvement initiatives. Operating in a dynamic, fast-paced, and international setting, you will help shape security governance, incident response, and AI security practices. This position offers high autonomy, strong ownership, and meaningful impact. It is an excellent opportunity to grow your career while protecting modern, distributed systems at scale.
Accountabilities:
- Manage and continuously improve the Information Security Management System, ensuring alignment with global security standards
- Maintain compliance with key frameworks and certifications, including SOC 2 Type II, ISO 27001, and NIS2
- Translate regulatory and policy requirements into actionable technical and operational security controls
- Conduct risk assessments, manage security risks, and support ongoing compliance and audit initiatives
- Provide security expertise and support for customer due diligence processes and assessments
- Participate in incident management, response planning, and post-incident analysis
- Contribute to AI security governance and emerging security initiatives
- Collaborate closely with cross-functional teams to embed security best practices across operations
Requirements:
- Proven professional experience in information security, compliance, or risk management roles
- Strong familiarity with security frameworks and certifications such as SOC 2, ISO 27001, NIS2, PCI-DSS, or similar
- Hands-on experience preparing organizations for audits and maintaining certification programs
- Ability to translate regulatory requirements into technical controls and operational processes
- Solid understanding of risk management methodologies and security control frameworks
- Excellent communication, collaboration, and stakeholder management skills
- Experience in incident response and management is a strong plus
- Relevant certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer are a plus
- Comfort working in a remote, asynchronous, and globally distributed environment
Benefits:
- Competitive salary based on role, experience, and location, with performance-based incentives
- Fully remote work model with flexible working hours
- Flexible paid time off and strong work-life balance culture
- 16 weeks of paid parental leave
- Mental health and wellness support services
- Equity or stock option programs
- Learning and professional development budget
- Home office setup budget and IT equipment
- Budget for co-working spaces or local team events
