Senior Information Security Specialist (ACSO)

Summary

We are seeking a Senior Information Security Specialist (ACSO) to join our Professional Services team. In this role, you will develop, maintain, and implement security processes and practices that reduce risk and strengthen the secure operations of the managed services we deliver to our clients.As an ACSO, you will support Senior Security Officers while providing security governance to Bell business clients. You will also play a key role in our internal Governance, Risk, and Compliance (GRC) programs, working closely with cross-functional teams across network, security, and business domains to ensure alignment and operational excellence.

A Government of Canada PSPC security clearance at level SECRET (Level II) is required.

Key Responsibilities

• Act as a spokesperson and subject matter expert in information security governance, risk management and compliance for the BBM Managed Services teams and clients.
• Maintain the organizations compliance with the security requirements of the Government of Canada PSPC Contract Security Program.
• Develop and implement safeguards and metrics in collaboration with operational and business teams to support client security requirements.  
• Review and maintain IT system security controls to ensure compliance with industry standards, Government of Canada ITSG, contract requirements and clauses. 
• Review and analyze IT systems identifying risk and security exposures.
• Review and analyze physical security requirements identifying risk and security exposures.
• Coordinate audits and IT inspections, managing remediation activities, documentation and reporting.
• Produce and maintain business risk registry, risk reports and impact analysis, developing action plans to minimize risk to the business.
• Evaluate and monitor risk assessment and gap remediation processes and provide recommendations for process improvement.
• Measure effectiveness of security processes and controls through development of metrics, dashboards, and reporting mechanisms.
• Work closely with security and business leaders / stakeholders to drive security compliance and build a culture of security awareness.
• Implementation of Bell’s privacy program and maintaining compliance obligations imposed by privacy regulations. 

Critical Qualifications

• Degree/Diploma in Computer Science/Information Technology or equivalent that is security related. 
• Experience in information and physical security and an understanding of the concepts and principles of information handling and protection
• Demonstrated knowledge of information technology security, trends, leading practices, regulatory and industry standard compliance issues (ISO 27001, SOC 2, PCI-DSS and others) is an asset.
• Experience in designing and developing procedures, and processes for Information Security best practices
• Experience  in facilitating and performing security audits
• Experience performing risk assessment and management, developing mitigation strategies
• Excellent communication skills. 

Preferred Qualifications

• One or more of the following certifications: CISSP, CISA and/or CISM would be considered an asset    
• Experience working in the telecommunications industry, with knowledge of network security and operations.
• Bilingualism (French/English) would be considered an asset.