Security Engineer (Remote First)

Support and maintain the company-wide information security program, including policies, standards, and guidelines.

Facilitate IT risk assessments with business units and help define acceptable levels of residual risk.

Monitor the external threat environment and advise stakeholders on emerging risks.

Manage day-to-day threat and vulnerability management, including detection, response, and remediation.

Coordinate incident management and support disaster recovery and business continuity planning.

Liaise with engineering, IT, and enterprise architecture teams to embed security into system design and selection.

Produce regular reporting and metrics on program effectiveness for leadership and stakeholders.

Oversee security testing procedures and manage remediation of identified risks.

Ensure audit trails and system logs comply with policy and audit requirements.

Lead security awareness training across the organization.

5+ years of experience in Information Security.

Hands-on experience with information security frameworks: CIS Controls v8, NIST, ISO 27001, SOC 2, PIPEDA, or PCI.

Experience writing cybersecurity policies and conducting security gap analyses.

Experience translating business stakeholder needs into technical security requirements.

Experience with cloud security controls (AWS or equivalent).

Familiarity with security platforms such as CrowdStrike and Mimecast.

Experience working alongside legal, audit, and compliance teams.

Strong written and verbal communication skills — able to engage technical and non-technical audiences.

University degree or college diploma in Information Security, Cybersecurity, or a related field (or equivalent experience).

Bachelor's in Information Systems; MBA or MS in Information Security preferred.

Security certifications: CISSP, CISA, CISM, GIAC, CBCP, MBCI, or similar.

Experience in an agile, fast-paced environment.