The scope of this position focuses on the Cybersecurity Oversight and Governance for CP Axtra Group. This position will provide the company's IT Risk Management program and associated processes and services. They will design, develop, execute and maintain all aspects of the company’s IT Risk Management program including executing risk reviews of critical programs and technology solutions.

Responsibilities:

• Set and implement user access controls and identity and access management systems
• Perform regular audits to ensure security practices are compliant
• Deploy endpoint detection and prevention tools to thwart malicious hacks
• Work with IT operations to set up a shared disaster recovery/business continuity plan
• Contribute towards the execution of policies, standards and procedures specific set by enterprise standards and account specific standards as they apply to IT security governance, IT risk, and IT compliance requirements
• Perform IT security risk assessment activities, including third party evaluation and management, and related analysis, including ongoing compliance monitoring in coordination with governance lead and external team members
• Contribute towards the execution of IT security compliance reviews of master service agreements and advise business team regarding gaps and corresponding mitigation requirements
• Contribute to the design and implementation of technical IT security safeguard architecture
• Works with infrastructure teams to execute the vulnerability management program and application owners to validate secure coding best-practices
• Will operate in a close team of computer digital forensic, fraud, and other IT investigative experts
• Document and track all incidents to meet audit, compliance, and legal requirements
• Conduct root cause analysis to identify gaps and recommendations ultimately remediating risks to the firm
• Periodically reports progress to management, and assesses and measures results related to Information Security activities

Qualifications:

• Bachelor’s degree in Information Systems Risk Management, Computer Science, or related field, equivalent experience
• 7-10 Years of experience with a thorough understanding of information security principles and practices
• 3-5 years of experience in a Cyber Security or Risk Advisory role for regulated environments
• Proven ability to infuse innovation and creativity into tactical activity with a focus on exceptional customer service.
• Be inspirational, enthusiastic and a promoter of information security
• Must be reliable and adaptable
• Excellent written and verbal communication and organizational skills
• Outstanding work ethic
• Strong team player that collaborates well with others to solve problems and actively incorporate input from various sources
• Ability to think strategically, work with a sense of urgency and pay attention to detail
• Ability to present complex solutions and methods to a general community
• Independent thinking, willingness to "step outside the box" and take reasonable, calculated risks