Want to join a Canadian leader? Love to work with experienced professionals? Eager to make a valued contribution with talented colleagues? Sounds like you’re ready for a job at TRSB, Canada’s number one translation provider.

TRSB is seeking an experienced Information Security Specialist to support our organization in building a strong security framework. You will take an active part in developing and implementing security policies, managing compliance requirements (notably SOC 2) and developing operational processes (procedures, controls, responses to security questionnaires).

Your Daily Routine

Threat monitoring

Proactively monitor and analyze security data to detect threats and advanced vulnerabilities Develop key indicators (risk and performance) and collect actionable intelligence to strengthen the organization’s security posture

Security incident response

Manage security incidents, from initial analysis to full resolution

Carry out post-incident assessments and recommend preventive measures

Risk and vulnerability assessment

Independently conduct in-depth security assessments to identify vulnerabilities and recommend remediation strategies Maintain the information security risk register, oversee audits, and assess suppliers’ security practices

Security awareness and coaching

Develop information security awareness materials

Provide specialized advice in support of cybersecurity program objectives and compliance initiatives

Policies and governance

Write, update and maintain information security policies, procedures and standards (access management, passwords, network security, PAP, etc.) Ensure documentation alignment with best practices (NIST, ISO 27001, etc.).

Compliance and audits (SOC 2)

Coordinate SOC 2 (types 1 and 2) compliance activities, including audit preparation Document and implement required security controls Ensure that evidence is gathered and requirements are met for external auditors

Security questionnaires

Respond to security questionnaires from clients or partners (cybersecurity, confidentiality, business continuity, etc.) Collaborate with internal teams to obtain relevant technical or organizational responses

Security control implementation

Assist in developing and implementing technical and organizational controls (access management, logging, backups, etc.) Collaborate with IT, operations, development, and product teams in integrating security into operations

Security procedures and processes

Develop security intervention procedures (incident response, vulnerability management, SIEM alert response, etc.)

Implement reproducible, well-documented processes

You Will Need

Good knowledge of SOC 2, ISO 27001, NIST, and CIS Benchmark standards

Experience in drafting security policies and documentation Ability to understand technical concepts and explain them to a non-technical audience Knowledge of AWS, Azure, and GCP cloud environments (an asset) CCSP, CISM, ISO 27001 Lead Implementer certification

This Position May Be Ideal For You If You

have a degree in information security, information technology, or a related field have at least three to five years’ experience in a similar role in IT security or governance are fluent in English and French, both written and spoken can successfully and independently handle multiple projects have experience with governance, risk, and compliance (GRC) tools have experience with the DRATA GRC tool (an asset)

We value our teams and offer working conditions to match

Competitive salary

Comprehensive group insurance Group RRSP Flexible work arrangements Fitness benefit Payment of dues to your professional order Referral program Public transit credit Paid vacation on your birthday