IT Security, Risk and Compliance Manager - EZRA
Toronto, Canada 申し込むJob Role: IT Security, Risk and Compliance Manager - EZRA
Location: Toronto, Canada or London, UK – Hybrid (3 days per week in office)
Who we are
Imagine what even the world’s finest organizations could achieve if all of their employees were coached to be their absolute best.
At Ezra, we’re on a mission to do just that. We believe, through coaching, people get to know themselves. Their goals weaknesses. Hang-ups And once they know all that, they can build on the good stuff and work on the rest.
This mindset applies not only to our clients, but is manifested in our own Ezra family. We believe we are changing people’s lives. We believe a happy team is a productive team. We want our people to care and be proud of what they do. We also practice what we preach – every member of our teams gets to experience the superpower that is coaching for themselves, amongst some other pretty incredible perks.
Ezra is the fastest-growing global virtual coaching company, supporting some of the world’s leading companies. If all of this resonates, Ezra just might be the place for you.
About the role
The primary purpose of the role is to support the Head of IT Security Risk and Compliance to ensure the Confidentiality, Integrity and Availability, of the EZRA business Information Assets. This will be achieved by implementing and continuously improving an effective and efficient Information Security Management System in line with Group IT Security Strategy, Architecture and Standards within EZRA. The job holder will also be responsible for publicizing the Adecco IT Policy Framework throughout the EZRA business to ensure that all projects are delivered in accordance with Group Standards. They will act as an expert advisor to IT colleagues, including relating to security controls for AI technologies.
An important component of this role will be to respond to client questionnaires and contract reviews relating to IT Security, Risk and Compliance, and conduct IT Security reviews for proposed IT vendors. The successful candidate will manage communication with clients and colleagues relating to this work and be responsible for achieving and reporting against Service Level Agreements They will maintain a library of resources to ensure that responses to common questions are managed efficiently. As part of the process, remediation requirements will be recorded and tracked.
This role will act as an advisor and be responsible for IT security oversight of EZRA’s IT operations and applications, with particular emphasis on the use of AI.
The successful candidate will also support and co-ordinate activities to maintain ISO 27001 certification as part of the Group’s program, and initiate and maintain System and Organization Controls (SOC reporting) as required.
The job holder will monitor and manage all security incidents for EZRA, lead investigations on behalf of IT Leaders and co-ordinate remedial actions to prevent recurrence wherever possible.
What you’ll do
- Be the recognized expert in the field of Information Security within the EZRA organization.
- Provide oversight and guidance for appropriate security controls of AI technologies in EZRA.
- Act as the main point of contact and coordination for all client IT Security questionnaires, contract reviews and IT vendor reviews for EZRA.
- Complete responses to client questionnaires in a timely manner and ensure that service level agreements are achieved.
- Review and mark-up IT security components of client contracts in a timely manner to ensure that service level agreements are achieved.
- Join discussions with clients to explain EZRA’s security posture and support client audits.
- Review and document outcomes for IT Security reviews of vendors in a timely manner and ensure that service level agreements are achieved.
- Considering feedback from stakeholders, maintain and develop the processes to receive, prioritize, complete and communicate responses to client IT Security questionnaires, IT Security reviews of client contracts and proposed IT vendor reviews.
- Maintain records of client remediation requirements and progress towards resolution.
- Prioritize incoming questionnaires and vendor reviews based on business value, reputational importance and project deliverables.
- Continuously improve the library of resources containing common responses to standard questions and supporting evidence for client questionnaires.
- Prepare reports and analyses documenting progress and adverse trends, make appropriate recommendations and draw conclusions when needed.
- Liaise with other Assurance functions (Internal and External Auditor), coordinate security audits and ensure that remediation plans are defined and implemented in line with agreed dates.
- Participate in discussions around new/existing initiatives, assessing and consulting from Security, Compliance and Risk perspectives.
- Provide support as required for all other security related matters as reasonably requested by the Line Manager.
About you
Education and certifications/training:
- University degree preferably in a technical subject or comparable education
- CISSP, CISA, CISM or similar certification preferred
Professional & Leadership experience:
- 3-5 years’ experience in a similar role within a Global Organization
- Demonstrable knowledge of Risk Management frameworks and Information Security standards (such as NIST 2, ISO 27001, SOC2, COBIT).
- Demonstrated experience and exposure in the international Security, Risk and Compliance arena.
- Ability to communicate technical issues in simple terms to support a variety of technical and non-technical business roles.
Personal attributes:
- Strong collaborator, ability to build pro-active, co-operative working relationships with customers, peers and key stakeholders based on respect and teamwork.
- Able to share feedback in a constructive manner to cultivate a continuous improvement culture.
- Ability to deliver successful outcomes under pressure and to manage crisis situations effectively.
- Able to evaluate information, identify key issues and formulate conclusions based on sound, practical judgment, experience and common sense.
- Experience with, and sensitivity for, diverse cultures.
Language requirements:
- Ability to conduct both written and verbal business communication effectively in English is essential.
- Any additional language is a plus especially French, Spanish, German or Italian.
What we offer
We want all candidates to know they are valued. We pushpositivity. We are an environment of innovation, collaboration, and growth. Drive impact with your ideas by being a part of the greater discussion in a safe, supported place. Be accountable, ambitious, owning your work and goals. When everyone takes responsibility for their success, we all succeed. Finally, keep itsimple! Enjoy the ride and the perks with your own world class coach, weekly well-being hour and learning and development fund.
We are an equal opportunity employer dedicated to having a thriving, diverse team where everyone has a voice and feels able to be themselves. We believe that through valuing our uniqueness and respecting our differences, we can achieve more and that diversity adds to our culture. Attracting and developing a diverse workforce that reflects the communities in which we serve is essential to us.
Posting date: 11-12-2024
私たちを知ってください
私たちのさまざまなブランドの補完的な強みを集めて、私たちのチームは強力な使命を通じて結束します-正しい才能を正しい機会にマッチングさせること。 私たちは、お客様のニーズに合ったシナジーを作り出し、彼らの旅のどこにいても、テクノロジーによって可能にされた人間主導の体験で提供します。 LHHでは、組織やキャリアを将来の変化から守り、労働力の変革を可能にすることが私たちの目的です。
LHHのダイバーシティとインクルージョン
私たちはすべての人に未来を機能させることを約束します。 私たちは、才能の解決策とアドバイザリーサービスに焦点を当てた企業として、誰もが労働世界に参加する機会がある世界を想像しています。 私たちの目標は、各同僚の貢献、スキル、経験、および潜在能力を評価する包括的な意思決定プロセスを奨励し、様々な視点を認識し、尊重することです。 私たちは、所属、信頼、参加の文化と作業環境をサポートする条件を積極的に作り出すために取り組んでいます。 私たちのダイバーシティとインクルージョンへのアプローチは、構造的で意識的なインクルージョン、リーダーシップ、および説明責任を含む、私たちの仕事を支える複数の支柱に基づいて構築されています。
文化
私たちは世界中から集まった、多様性を持つ高いパフォーマンスを誇るチームで、未来がすべての人にとって実を結ぶものとなるよう協力し合います。私たちの成功の鍵を握るのは社員であり、私たちの企業文化を形成しています。世界的規模で変化していく仕事環境に対して、現地の状況への理解と経験に基づくソリューションを提供し、影響を与えることができるのは、私たちの社員のおかげです。力を合わせることで、私たちは候補者にエキサイティングなキャリアパスを、そしてお客様に最高の人材を提供することができます。これを可能にするためには、人材への投資、話しやすい文化、また、個々の能力開発の機会が不可欠です。周りにはチャンスがあふれています。
LHHについて詳しく見る
私たちはアデコグループのタレントソリューション事業を担い、エンドツーエンドのソリューションパートナーとして、お客様の成長を促進するためのスキルと変革のニーズに対応しています。私たちの使命は適切な人材と適切な機会をマッチングさせることであり、アデコグループの多様なブランドが持つ相補的な強みを活かし、お客様が変革のどの過程にあってもニーズを満たすシナジーを生み出します。あなたはチームの一員として、適切な能力を身につけ、人材変革を可能にすることで、将来性のある組織とキャリアという私たちの目的を達成する権限を与えられ、その意欲を燃やすでしょう。私たちは、私たちの仕事が変化をもたらすことを知っています。だからこそ、高い目標を目指し実現に向けて努力します。
成功プロファイル
私たちはお互いに適していますか？ 私たちが探している特性を見てみましょう。 (1 Beginner – 10 Expert)
-
目的を持って成長する 意義のある仕事に情熱を持って取り組み、世界を変える心構えを持つ10
-
共に勝利する 信頼や透明性、コラボレーションを通して関係性を築くことで、共に成功できる8
-
自分のものにする 意思決定する権限を持ち、結果に対して責任を負う10
-
高みを目指す 臨機応変 - 迅速な行動 - 将来の顧客や候補者のニーズを予測する力9
-
楽しむ 同僚と共に楽しみながら、私たちの目的を達成し、やる気を起こし刺激を受け続ける8
Traits are on a scale of
0 to
10
報酬
タレントコミュニティに参加する
チャンスが訪れたら、ぜひ確認してください！ 詳細を入力してタレントコミュニティに参加し、自動求人通知を登録してください。
当社の利用規約、クッキーポリシー、およびプライバシーポリシーは、お客様に関する情報の収集方法と使用方法、お客様の権利について説明しています。 情報を送信することにより、お客様はこれらの文書を読んだことを確認し、アデコグループからのコミュニケーションおよび電子メールによる求人アラートの受信に同意したことになります。
当社の利用規約、クッキーポリシー、およびプライバシーポリシーは、お客様に関する情報の収集方法と使用方法、お客様の権利について説明しています。 情報を送信することにより、お客様はこれらの文書を読んだことを確認し、アデコグループからのコミュニケーションおよび電子メールによる求人アラートの受信に同意したことになります。