Senior Information Security Specialist II

Summary

We are seeking a Bilingual Security Officer-GRC to join Bell’s Cyber team, which enables the digital transformation of businesses and governments across Canada through solutions spanning networks, communications, security, cloud, and data centre services. As a key member of this team, the Security Officer acts as a cybersecurity leader responsible for maintaining solid client relationships and ensuring a high level of customer satisfaction.

• Subject matter expert in information security governance, risk management and compliance (GRC) for the customers and Bell Cyber Managed Services teams.
• Validate compliance of contractual security requirements of customers (managed and non‑managed).
• Act as the cyber security spokesperson regarding security governance, risk management and compliance.
• Review and agree upon the security metrics that will measure compliance of the Services.
• Manage audit, IT inspection and compliance programs (support, planning, coordination, scoping, third‑party management, remediation activities, documentation and reporting).
• Review and maintain IT system security controls to ensure compliance with industry standards, contract requirements and clauses.
• Produce and maintain business risk registry, risk reports and impact analysis, developing action plans to minimize risk to the business.
• Evaluate and monitor risk assessment and gap remediation processes and provide recommendations for process improvement.
• Measure effectiveness of security processes and controls through development of metrics, dashboards, and reporting mechanisms.
• Support Bell’s privacy program and maintain compliance obligations imposed by privacy regulations.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (Master’s a plus).
• 8 years of combined experience in information security, security governance, risk and compliance, designing and developing procedures and processes for Information Security.
• Proven ability in working with security framework and standards (ISO 27001, NIST, COBIT, PCI‑DSS and others).
• Experience in facilitating and performing security audits.
• Experience performing risk assessment and management, developing mitigation strategies.
• Adequate knowledge of French is required for positions in Quebec.

• Certifications such as CISSP, CISA, CRISC, CISM or similar.
• Experience in regulated industries (Government, Banking, Transportation, Pharmaceutics, Military).