Job Title:

Information Security Specialist

Pay:

$90,000 - $130,000 CAD

Location:

Toronto, Ontario

Summary:

We are seeking a proactive and experienced Information Security Specialist to lead security risk assessments across cloud environments, third-party vendor solutions, and AI/ML-enabled products. This role is vital in ensuring the confidentiality, integrity, and availability of organizational information assets and infrastructure. The successful candidate will collaborate with technical teams, project managers, and security leadership to embed security best practices throughout various projects, providing essential risk analysis and guidance to support organizational security objectives.

Requirements:

- Proven ability to independently lead security risk assessments across diverse technologies.
- Experience with third-party security risk management platforms and processes.
- Strong knowledge of security domains including Authentication, Authorization, Encryption, Application & Network security, DLP, Endpoint protection, CSPM, CASB, PAM, ZTNA, Logging, Monitoring, Vulnerability Management, and Incident Response.
- Minimum of 5 years of related experience.
- Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty preferred.
- Familiarity with regulatory and compliance frameworks like ISO27001, SOC 2, GDPR, HIPAA,



and AI-specific risk frameworks.
- Exposure to AWS cloud security controls is advantageous.
- Experience in healthcare or manufacturing environments is a plus.

Responsibilities:

- Lead security risk assessments for cloud-native and hybrid deployments, including architecture reviews and controls evaluations.
- Evaluate and ensure security compliance of third-party products during onboarding and integration.
- Conduct security reviews of AI/ML-based products focusing on secure design and risk mitigation.
- Collaborate with cross-functional teams to integrate security throughout the software development lifecycle.
- Clearly communicate security risks and mitigation strategies to technical and business stakeholders.
- Produce detailed security documentation, including risk assessments and remediation plans.
- Track risks and controls using GRC tools, ensuring accountability.
- Stay informed on emerging security threats, technologies, and industry best practices.
- Contribute to ongoing improvement of security policies and frameworks.

Benefits:

- Join a stable, leading organization in the medical solutions industry.
- Prospect to work with cutting-edge technologies in a dynamic environment.
- Collaborative and supportive team culture.
- Competitive salary package with growth potential.

📌 Information Security Specialist (Toronto)
🏢 Prestige Staffing
📍 Toronto