Who We AreEmterra Group is a dynamic, growth-oriented, and safety-focused group of companies. Our organization have been deemed to be an "essential service" by providing collection and processing for recycling, organics, and waste that keep our communities clean and safe. With customer service and safety as our focus, we are looking for an energetic and driven employee to support our growing company and play a crucial role in waste diversion and the circular economy. Emterra is proud to be recognized as one of Canada's Greenest Employers, a certified diverse supplier of the Canadian Aboriginal and Minority Supplier Council (CAMSC) and the Canadian Women Business Enterprise National Council (WBE).Job SummaryEmterra Group is seeking a Security and Compliance Lead to own and advance our cybersecurity posture and regulatory compliance program across our Microsoft 365 and Azure cloud environments. This is a hands‐on leadership role responsible for designing, implementing, and maintaining security controls while ensuring alignment with applicable frameworks and standards.Position DescriptionSecurity Operations & ArchitectureDesign and maintain security architecture across Microsoft Azure, Microsoft 365, and on‐premises infrastructureManage and optimize (Endpoint, Identity, Cloud Apps, Office 365), SIEM, and Entra ID (Azure AD)Lead vulnerability management, threat detection, and incident response activitiesConfigure and maintain Conditional Access policies, Zero Trust network access, and Privileged Identity Management (PIM)Oversee Azure Security Center / Defender for Cloud recommendations and remediationCompliance & GovernanceDevelop and maintain the organization's information security policies, standards, and proceduresLead compliance efforts across applicable frameworks (NIST, PIPEDA, or industry-specific regulations)Manage Microsoft Purview for data classification, DLP policies, information protection labels, and eDiscoveryConduct and coordinate internal audits, risk assessments,



and third‐party security reviewsMaintain compliance posture within the Microsoft 365 Compliance Center and Secure Score benchmarksIdentity & Access ManagementAdminister and mature Entra ID (Azure AD) including RBAC, MFA, SSO, and lifecycle managementManage privileged access through PIM and Just‐in‐Time (JIT) provisioningOversee identity governance and access reviewsRisk ManagementConduct regular risk assessments and maintain the organizational risk registerDevelop and test the Business Continuity Plan (BCP) and Disaster Recovery (DR) proceduresEvaluate and manage vendor and third‐party security riskTraining & AwarenessDesign and deliver security awareness training programs across the organizationAct as internal subject matter expert and advisor on security matters for all departmentsReport security metrics and compliance status to IT leadership and stakeholdersSkills & QualificationsRequired Qualifications5+ years of progressive experience in information security or cybersecurity roles3+ years of hands‐on experience with Microsoft Azure and Microsoft 365 security toolingDeep expertise with Microsoft security products: Sentinel, Purview, Entra ID,Working knowledge of Azure networking, Azure Policy, and cloud governance frameworksExperience with at least one compliance framework (SOC 2, ISO 27001, NIST CSF, CIS Controls)Strong understanding of identity and access management principlesExcellent written and verbal communication skills; ability to present riskclearly to non‐technical stakeholdersPreferred QualificationsRelevant certifications:



MS-500 (Microsoft Security Administrator), SC-200 (Microsoft Security Operations Analyst), SC-300 (Identity and Access Administrator), AZ-500 (Azure Security Engineer), CISSP, CISM, or CompTIA Security+Experience in a regulated or multi‐site operations environmentFamiliarity with PIPEDA and Canadian privacy legislationExperience with Microsoft Copilot for SecurityWhat We OfferCompetitive salary and benefits packageHybrid work flexibilityCollaborative and mission‐driven team environmentOpportunity to shape and build a modern security program from the ground upReasons to Apply, Stay and Grow with Emterra GroupOpportunity to be part of one of Canada's Greenest Employers!Competitive wages!Comprehensive health benefits (health, dental, and more depending on what you choose)!Employee Assistance Program, paid for by the company!Tuition reimbursement program and professional development support!Be part of an entrepreneurial organization that wants to continue to learn and grow!Ability to have an impact and make change!Are you ready to jumpstart your career by joining one of Canada's Greenest Employers and become part of the environmental solution? If so, apply now! We appreciate all applicants who apply however only those who are qualified, will be contacted.EmterraGroup is committed tomaintainingan equitable, fair, and diverse setting. Any applicants who have a disability or require reasonable accommodation may speak directly with our Human Resources Department. Reasonable accommodations will be assessed on a case‐by‐case basis.All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, age, national origin, disability, or veteran status.Please note that AI may be used to support the application review process; however, all applications are reviewed by our Human Resources Team. #J-18808-Ljbffr

📌 Security And Compliance Lead (Surrey)
🏢 Emterra Group
📍 Surrey