Senior Information Security Specialist

Summary

We are seeking a Senior Information Security Specialist to join our Cyber Risk & Secure Architecture team, a group that is transforming how cybersecurity risk is assessed, managed, and governed across the organization. As part of the Risk Operations team, you will contribute to the evolution of our security program from a traditional, manual assessment model to a modern, automated, and risk-based operating approach that enables the business to move faster while maintaining strong security outcomes.

In this role, you will leverage expertise in secure development, security architecture, risk assessment, DevSecOps, cloud security, governance, and process automation to design and operate scalable cyber risk processes. Working closely with teams across Threat Intelligence, Security Architecture, Application Security, Enterprise Risk, ServiceNow, and key business stakeholders, you will help build and mature a modern risk operating model that prioritizes security efforts toward the organization's highest-risk initiatives. This is an exciting opportunity for a security professional who can bridge the gap between technology and business risk, driving secure innovation through both strategic leadership and operational execution.

Key Responsibilities

• Lead the modernization of Cyber Risk Operations processes and workflows, designing scalable operating models that reduce manual security assessments and identifying opportunities to automate assessment intake, triage, routing, approvals, and related activities.
• Develop risk-based decision frameworks that enable self-service and delegated risk reviews while establishing governance processes that support distributed ownership of cyber risk across the organization.
• Partner with Threat Intelligence teams to understand evolving threat trends affecting Bell and translate threat intelligence into actionable risk prioritization criteria.
• Ensure risk assessment processes align with the organization's current threat landscape and develop mechanisms that increase scrutiny for projects exposed to emerging threats.
• Help define and enhance risk scoring models that incorporate threat intelligence data.
• Lead cross-functional initiatives and transformation projects focused on improving cyber risk management efficiency across security teams, business units, and technology stakeholders.
• Act as a business lead and subject matter expert for cyber risk workflow automation initiatives, collaborating with ServiceNow teams to design and implement automated solutions.
• Define requirements for risk intake automation, assessment routing, approval workflows, exception management, control validation, reporting, and dashboard capabilities.
• Support the migration of existing cyber risk processes into future-state ServiceNow capabilities and automated operating models.

Critical Qualifications

• 7+ years in cybersecurity, risk management, security governance, security architecture, or security program management. 
• Experience leading process transformation initiatives.
• Experience working across business and technology organizations.
• Demonstrated ability to influence stakeholders without direct authority.
• Experience implementing governance or risk management programs.

Preferred Qualifications

• Secure Development Lifecycle (SDLC)
• Security-by-Design principles
• Cloud security fundamentals
• Application security fundamentals
• Cyber risk management
• Threat modeling concepts
• Security controls and frameworks
• Security architecture review processes