Security & Compliance Lead

Job summary

The Security & Compliance Lead will own and manage the organization's security and compliance programs, including SOC2 and GDPR. They will also serve as the technical lead for security tooling, cloud security, monitoring, and automation initiatives.

Job details

Requisition Number: 77154 iBwave is the power behind great in-building wireless experience, enabling billions of end users and devices to connect inside a wide range of venues. As the global industry reference, our software solutions allow for smarter planning, design and deployment of any wireless network project regardless of size, complexity or technology. Along with innovative software, we are recognized for world-class support in 90 countries, providing the industry’s most comprehensive components database and a well-established certification program. We are seeking a Security & Compliance Lead to join our team at iBwave. We are a small but high-impact technology organization looking for a hands-on security professional who can lead our security and compliance program while actively designing, implementing, and operating the technologies that protect our environment. Role Purpose As the Security & Compliance Lead, you will own iBwave's security and compliance program, including SOC2 and GDPR, while serving as the technical lead for our security tooling, cloud security, monitoring, and automation initiatives. You will work closely with IT, Engineering, DevOps, and Legal to build scalable, secure, and automated solutions that strengthen our security posture across Azure, AWS, Microsoft 365, and our SaaS ecosystem. Key Responsibilities • Own and manage the security and compliance program (SOC2, GDPR)• Ensure policies, controls, and audit readiness through continuous monitoring and tooling (e.g., Drata)• Design and implement cloud security controls across Azure, AWS, and Microsoft 365 • Develop automation to improve security operations, evidence collection, and compliance monitoring • Configure and maintain SIEM, endpoint protection, identity protection, and cloud security platforms • Evaluate and integrate new security technologies and services • Support secure architecture reviews for infrastructure and SaaS implementations • Define security standards and technical baselines for enterprise systems• Lead vendor security due diligence and third-party risk assessments• Support customer security questionnaires and trust initiatives Location: Remote within Canada Language RequirementsProficiency in English is essential, as the role involves close collaboration with multidisciplinary teams and clients on a global scale, where English is the primary language of communication. Qualifications: • Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience• 5+ years in security, compliance, or related roles• Strong hands-on experience with cloud environments (Azure and/or AWS)• Experience configuring and operating security tools (e.g., Microsoft Defender, Entra ID, Azure/AWS Security, IAM, Microsoft Sentinel, etc.)• Experience with SOC2 and/or GDPR programs• Experience developing automation using PowerShell, Python, REST APIs, or workflow platforms (ex: n8n)• Strong understanding of cybersecurity principles (IAM, network security, monitoring, vulnerability management)• Strong communication skills and ability to work cross-functionally We are committed to supporting your health, financial, career development, and life goals as you grow professionally and personally to achieve your highest potential. All benefits begin as soon as you start your career at Corning. Our monetary peer-to-peer recognition program is tied to our Values and celebrates you and your colleagues’ contributions. Health and well-being benefits include medical, extended health care, dental and vision as from your first day of work. You are eligible to participate in the Corning Optical Communications LLC Retirement and Savings Plan on your first day of work. RRSP with 100% match, up to 5% of your earnings, The company will contribute 2.5% of your eligible pay each year to the DPSP account. Long-Team disability benefit Professional development programs help you grow and achieve your career goals. Corning is committed to providing equal employment opportunities and considers requests for reasonable accommodations in accordance with applicable laws. Individuals with disabilities or sincerely held religious beliefs may request reasonable accommodations to participate in the application or interview process, perform essential job functions, or access other benefits and privileges of employment. To submit a request for reasonable accommodation related to disability or religion, please contact us at accommodations@corning.com.

What you’ll do

The Security & Compliance Lead will own and manage the organization's security and compliance programs, including SOC2 and GDPR. They will also serve as the technical lead for security tooling, cloud security, monitoring, and automation initiatives.

Requirements

Candidates must have at least 5 years of experience in security or compliance roles and a bachelor's degree in a related field. Strong hands-on experience with cloud environments, security tools, and automation scripting is required.

Benefits

• Medical insurance • Extended health care • Dental insurance • Vision insurance • Retirement and savings plan • RRSP with 100% match • DPSP account contribution • Long-term disability benefit • Professional development programs • Monetary peer-to-peer recognition program

Listed skills

• Microsoft Azure · Preferred
• REST APIs · Preferred
• Amazon Web Services · Preferred
• Python · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security program management
• SOC2
• GDPR
• Cloud security
• Azure
• AWS
• Microsoft 365
• Automation
• SIEM
• Endpoint protection
• Identity protection
• Vulnerability management
• PowerShell
• Python
• REST APIs
• Network security
• Security Tools
• N8n
• Software Solutions
• General Data Protection Regulation (GDPR)
• Microsoft Sentinel
• Workflow Management
• Endpoint Security
• Evidence Collection
• Planning
• Microsoft Access
• Amazon Web Services
• Auditing
• Microsoft Azure
• Software As A Service (SaaS)
• Cloud Security
• Communication
• Computer Science
• Continuous Monitoring
• Cyber Security
• DevOps
• Due Diligence
• English Language
• Scalability
• Innovation
• Python (Programming Language)
• Network Security
• Windows Defender
• Optical Communication
• Windows PowerShell
• RESTful API
• Risk Analysis
• Security Information And Event Management (SIEM)
• Tooling
• Vulnerability Management

Job areas

• Security & Safety
• Technology
• Software
• Engineering
• Security Compliance Manager
• Cyber Security Manager / Administrator
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other