16 Oct
|
TELUS Health
|
Winnipeg
16 Oct
TELUS Health
Winnipeg
Join the Retirement and Benefits Solutions team at TELUS Health. This role leads a transformational compliance program, guiding a large‑scale pension and advantages administration platform through NIST 800‑53 Moderate compliance to enable federal agencies and secure government contracts.ResponsibilitiesOwn the NIST 800‑53 Moderate program from gap assessment through remediation, continuous monitoring and implementation.Coordinate cross‑functional teams—Engineering, DevSecOps, Security, and Compliance—to implement NIST 800‑53 controls.Create and maintain System Security Plans (SSPs) and Plans of Actions & Milestones (POA&Ms;) and related documentation.Act as primary liaison with Third‑Party Assessment Organizations (3PAOs) and federal sponsor agencies, managing remediation and continuous monitoring practices.Lead project planning, execution, and reporting across multiple cybersecurity frameworks, ensuring documentation, testing, and evidence are produced per the relevant standards.Partner with Engineering to align technical architecture and security control implementations with NIST 800‑53 baselines, including identity management, data flows, and API integrations.Champion vulnerability management and incident response frameworks, ensuring alignment of data protection mechanisms across the technology stack.Communicate progress, risks, and dependencies to executive leadership and stakeholder groups, preparing status reports, dashboards, and presentations.Facilitate executive steering committees and governance forums, liaising with external auditors, cloud service providers,
and regulatory bodies.Provide technical mentorship and leadership for compliance best practices across the organization.Qualifications10+ years in IT project management or solution architecture for enterprise or government platforms.Hands‑on experience managing cybersecurity compliance or equivalent regulatory/assurance programs (DoD SRG, ISO 27001, SOC2, GxP).In‑depth knowledge of NIST800‑53 documentation, continuous monitoring, 3PAO engagement, SSP and POA&M; development.Project management certification (PMP or equivalent).Deep working knowledge of cloud environments (AWS, Azure, GCP) and security control implementation, including network, identity & access management, encryption, and logging.Excellent communication skills and ability to simplify complex technical and compliance concepts for technical teams and executive stakeholders.Strategic and hands‑on leadership ability, comfortable setting direction and rolling up sleeves.Collaborative and adaptable style, thriving in cross‑functional environments and navigating competing priorities.Nice‑to‑haveMaster’s degree in Computer Science, Information Systems, or Engineering.Cloud certification such as Azure Solutions Architect Expert, CISSP, CISM, CISA, or NIST CSF certification.Experience with CSASTAR, the Cloud Security Alliance’s CCM, or other related trust & assurance cloud frameworks.Familiarity with security/privacy/regulatory requirements in pensions, benefits administration, or financial services (PIPEDA, HIPAA, GLBA,
state data breach laws, US federal or state agency standards).Background in pension administration, benefits management, or financial services technology.Experience with GRC tools and conformity reporting.Salary Range$120,000 – $160,000, with total compensation based on knowledge, skills, performance and experience.BenefitsCompetitive salary and bonus structures.Minimum 3 weeks of vacation and flexible benefits plan.Flexible work location—office, virtual, or hybrid.Company‑matched pension.Opportunities for career growth, learning, and development.Access to company benefits packages that may vary by job function.Job TypeFull‑time, current vacancy.EEO StatementWe are committed to fair employment practices and all qualified applicants will receive consideration for employment.We offer accommodation for applicants with disabilities during the recruitment process.Disclaimer and LegalIn accordance with the TELUS Health Solutions Data Center Security Policy, all team members whose job functions require them to work at a Data Center or have access to detailed technology knowledge are subject to a Personnel Security Screening conducted through the Government of Canada.Note for Quebec candidates: if knowledge of English is required for this position, the team member will be asked, on a regular basis, to interact in English with external or internal parties or to use English applications or software as part of their tasks.By applying to this role you understand and agree that your information will be shared with the TELUS Group of Companies Talent Acquisition team(s) and/or any leader(s) who will be part of the selection process.#J-18808-Ljbffr
📌 Senior Technical Project Manager - Cybersecurity (Toronto) - C$120,000 - C$160,000 A Year (Winnipeg)
🏢 TELUS Health
📍 Winnipeg