Cyber Security Specialist (SOC 2 & Privacy) - On Site

About the role

IO Solutions is looking for an on-site Cyber Security Specialist to strengthen its cybersecurity and data protection programs, with a focus on SOC 2 and Privacy. Reporting to the Director of IT, the role works closely with cross-functional teams to assess, implement and improve technical security controls. The position suits a technically skilled and proactive professional who can run vulnerability assessments, analyse risks and help protect systems and data.

Key responsibilities

• Vulnerability management: coordinate penetration testing and remediation, run internal and external tests with tools such as Fortinet products and vulnerability scanners, and track remediation plans with stakeholders
• Security operations: operate and monitor IDS, EDR, firewalls, DNS filtering, SIEM and audit logging; review patch management and coordinate testing and deployment with IT teams
• SOC 2 and privacy: support SOC 2 and privacy controls with Governance and Privacy teams, and carry out risk assessments and third-party vendor/software evaluations
• Incident detection and response: identify and respond to incidents, investigate threats and misconfigurations, perform root cause analysis, document incidents and monitor DLP tools
• Security awareness and documentation: develop and deliver training, maintain policies, playbooks and audit materials, and contribute to SOC 2 compliance and audits
• Business continuity and disaster recovery planning

Required profile

• Bachelor's degree in Cybersecurity, Information Technology or a related field, or equivalent practical experience
• At least 4 years of hands-on experience in information security or cybersecurity
• Experience with vulnerability management, network security and/or application security
• Familiarity with SOC 2, NIST and ISO 27001 frameworks
• CompTIA Security+, CEH, GSEC, CYSA+, Network+, A+ or equivalent certification

Required skills

• Strong understanding of networking, system hardening and common attack vectors
• Experience with Azure and Microsoft 365 security tools (Microsoft Defender, DLP)
• Knowledge of cloud and on-premise data protection
• Scripting or automation tools are an asset

What we offer

• Competitive salary plus employment stability
• Dynamic and challenging work environment
• Career advancement program