Senior Specialist, Cloud Security Assessment Location: Toronto, Ontario | Employment Type: Permanent Full-Time, Monday to Friday, 35 hours work week | Salary: $135,000.00 Overview The Senior Specialist, Cloud Security Assessment will support the Chief Information Security Officer in executing the City’s cyber vision, strategy, and goals. The primary focus is advising and delivering technical expertise related to cloud security initiatives across the City’s divisions, agencies, and corporations. The role involves developing, implementing, and continuously improving cloud security measures, engaging with teams to enhance the cloud security posture of cloud environments. Major Responsibilities Assist with the secure design, implementation, and management of security cloud solutions for the City, ensuring the protection of critical data and systems in the cloud environment. Conduct security assessments, threat modelling, and architecture reviews of existing cloud architectures, identify cyber security gaps, and recommend solutions to enhance cloud security posture. Provide leadership and direction in researching, designing, planning, and executing cloud security initiatives to address emerging threats and trends related to generative/agentic AI, data usage, access governance, monitoring, and misuse, and advise stakeholders on secure and responsible adoption of AI technologies in cloud environments. Provide subject‑matter expertise in PCI‑DSS compliance within cloud environments, supporting PCI‑DSS scoping, control validation, evidence review, and remediation guidance for cloud‑hosted payment systems and integrated third‑party services. Collaborate with cross‑functional teams to ensure the secure adoption and operation of secure cloud services, while identifying areas of improvement for ongoing cloud security practices. Assist in developing, documenting, and enforcing cloud security policies, standards, and guidelines, aligning with industry best practices,



frameworks, and regulatory compliance requirements through comprehensive security assessments and team‑oriented discussions. Assist the technology team in implementing robust security controls in cloud environments, safeguarding against potential cloud‑specific vulnerabilities. Offer training and mentorship to internal teams, promoting the adoption of cloud security concepts and best practices, including network security and data protection in the cloud. Drive alignment between business and technical teams on cloud security priorities and initiatives, ensuring seamless execution of cloud security programs. Stay informed on the latest cloud security developments and trends to proactively recommend improvements and keep the organization ahead of potential threats. Qualifications / Certifications Post‑secondary degree in Business, Technology, or a related discipline. Extensive experience in cloud security assessments, threat modelling, and cloud architecture reviews. Strong understanding of cloud security frameworks, industry standards, and regulatory requirements (NIST, CSA CCM, CIS, ISO27001, PCI‑DSS, etc.). Hands‑on implementation experience with cloud data platforms. In‑depth knowledge of cloud platforms, security solutions, and services (AWS, Azure, Google Cloud, etc.). Solid understanding of Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platform (CNAPP) and Cloud Workload Protection Platform (CWPP) tools, and experience with cloud IAM and IaaS, PaaS,



and SaaS native security capabilities. Extensive experience with serverless, container hosting, and orchestration services. Known for strategic, innovative, systematic thinking and the ability to help others through change. Strong knowledge of effective security practices in a large, complex environment and awareness of general security‑related training requirements within this environment. Preferred certifications (at least two): CISSP, CCSP, CCSK, TOGAF, ISO27001 LA, or CRISC. Skills Ability to work in transformative programs. Ability to lead efficient communication between all project stakeholders, including internal teams and clients. Ability to achieve business objectives through influencing and effectively working with key stakeholders. Excellent written and verbal communication skills (comfortable communicating at all levels including business partners, leadership, and vendors). Excellent problem‑solving skills with capability to identify solutions to unusual and complex problems. Keen attention to detail and robust organizational skills. Highly organized, proactive, self‑motivated team player who takes initiative and works independently. Ability to work in a quick‑paced environment managing multiple priorities with proven time‑management skills. Strong analytical skills and ability to prioritise and multitask. Ability to prioritise and effectively manage competing priorities and projects. Ability to manage multiple initiatives while adhering to strict deadlines. Ability to work extremely well under pressure while maintaining a high level of professionalism. Self‑motivated and willing to go above and beyond tasks. Transferable communication and decision‑making skills. Ability to think on feet and demonstrate good judgement. Security professionals should always be ready to react to cyber‑related incidents quickly. #J-18808-Ljbffr

📌 Senior Specialist, Cloud Security Assessment (Toronto) - $135,000 A Year
🏢 City
📍 Toronto