Position Summary The IT Security Specialist is responsible for assuring the delivery of cybersecurity services provided by internal teams and third-party providers that support carrier-grade telecommunications services and critical communications infrastructure.

This role serves as an IT Security coordinator, working closely with the IT Senior Director, CIT & CNT teams, as well as external service providers to ensure security services are delivered consistently, effectively, and in alignment with business objectives, regulatory obligations, and risk tolerance in a 24×7 telecom environment.

Key Responsibilities

Network & Infrastructure Security Oversight

- Provide strategic oversight of security controls protecting carrier-grade networks, including core, access, and edge infrastructure
- Review and validate security architectures, designs, and changes delivered by third-party providers to ensure alignment with availability, resilience, and security standards
- Oversee the implementation and ongoing operation of network security controls (firewalls, IDS/IPS, DDoS protection, VPNs) delivered by managed service providers
- Ensure third-party providers maintain appropriate standards for VPN security, cryptographic controls, and secure deployment of enterprise services (e.g., Office 365, OpenVPN, and other critical platforms)
- Act as a security governance authority for IP/MPLS, VoIP, SIP, SS7/Diameter, LTE/5G, and fiber-based networks, ensuring risks are identified and addressed

Security Operations & Incident Response Governance

- Provide oversight of security operations and incident response activities delivered by SOCs, MSSPs, and other third-party providers
- Ensure clear incident response processes, escalation paths, and decision authority are defined and followed
- Coordinate incident response efforts across internal teams (IT, CNT, NOC) and external providers during significant security events
- Review post-incident reports, validate root-cause analysis, and ensure corrective actions are implemented
- Drive continuous improvement in detection coverage, response quality, and operational effectiveness





Risk Management & Compliance

- Oversee enterprise and network risk assessments conducted by third-party providers, including vulnerability management and penetration testing activities
- Ensure compliance with approved regulatory and industry frameworks within the organization.
- Validate that third-party providers meet telecom-specific security, privacy, and regional regulatory obligations
- Review and collaborate on approval of security policies, standards, and audit evidence
- Lead third-party cybersecurity risk management, including supplier assessments and ongoing assurance
- Support internal and external audits related to information security and regulatory compliance

Systems, Cloud & Platform Security Oversight

- Ensure deliverables and quality assurance regarding vulnerability management, CVE assessments, and related remediation activities performed by internal teams and external providers
- Ensure security controls are appropriately applied to OSS/BSS platforms, billing systems, and customer-facing portals
- Maintain and control security architecture and design for cloud, hybrid, and virtualized environments (NFV, SDN)
- Ensure providers follow secure configuration, patching, and lifecycle management practices

Identity, Access & Data Protection Governance

- Maintain identity and access management controls for network devices, platforms, and privileged accounts
- Ensure protection of sensitive customer and operational data, including CPNI and call data records
- Validate encryption, logging, and monitoring practices implemented by service providers to protect data in transit and at rest

Threat Intelligence & Continuous Improvement





- Maintain relevant telecom-focused threat intelligence with third party providers and proactively adjust controls
- Oversee vulnerability scanning, penetration testing, and remediation programs
- Evaluate and recommend security capabilities and service improvements suitable for high-availability telecom environments

Advisory & Collaboration Role

- Act as an advisor to IT, network engineering, and operations teams
- Provide security governance input for new service launches, technology upgrades, and vendor selection
- Promote consistent security standards and best practices across internal teams and external providers

Reporting & Communication

- Provide reporting on security posture, risks, incidents, and remediation status to IT team
- Define and review security metrics and dashboards focused on availability, resilience, and risk reduction
- Translate technical security risks into explicit business and service-impact terms for IT, network engineering, and operations teams

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience)
- 5+ years of experience in cybersecurity, security governance, or security operations within telecommunications or critical infrastructure environments
- Demonstrated experience overseeing third-party security providers, SOCs, MSSPs, or managed services
- Experience supporting 24×7, high-availability operational environments

Preferred Qualifications

- Security certifications such as CISSP, CISM, or CCSP
- Experience working with telecom operators, managed network providers, or large-scale service environments
- Familiarity with DDoS mitigation, signaling security, and telecom threat landscapes
- Experience with cloud and virtualized infrastructure security governance

Pay: $80,000.00-$90,000.00 per year

Experience

- overseeing 3rd party security providers, SOCs, MSSPs: 2 years (required)
- cybersecurity, governance or security operations: 4 years (required)

Work Location: Hybrid remote in Pointe-Claire, QC H9R 5C7

📌 IT Security Specialist (Pointe-Claire)
🏢 Pure Strategic Marketing
📍 Pointe-Claire