Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The Information Security Lead provides cybersecurity expertise across Security Awareness, Identity and Access Management (IAM), Cloud Security, Security Risk Assessments, and Security Projects. The role works closely with business and IT teams to identify and manage security risks, support the implementation of security controls, and ensure security requirements are considered in new technologies and projects. As a senior member of the Information Security team, the position serves as a trusted advisor, providing guidance and support to help protect the organization while enabling business objectives.

Responsibilities

Act as the security representative on business and technology initiatives, serving as a trusted advisor to protect the organization while enabling business objectives.
Lead and support cybersecurity projects from planning through implementation, ensuring security requirements are incorporated into project designs and deployments.
Coordinate with internal stakeholders, vendors, and consultants to deliver strategic security solutions.
Maintain an accurate and up-to-date inventory of critical information systems and data assets to support risk assessments, compliance audits, and continuous security monitoring.
Support the cybersecurity IT risk management framework by identifying, quantifying, and mitigating cybersecurity risks across corporate, retail, and e-commerce environments.
Maintain the IT risk register and facilitate data-driven risk decisions to prioritize remediation efforts.
Manage the enterprise security awareness and phishing simulation program.
Develop and deliver security awareness campaigns and communications.
Monitor training completion and phishing metrics.
Support security culture initiatives across the organization.
Support the design and implementation of Identity and Access Management controls.
Manage and improve processes related to user access, privileged access, and multi-factor authentication.
Lead IAM initiatives, including Azure PIM and Privileged Access Management (PAM) projects.
Collaborate with IT teams to strengthen identity governance and access controls.
Conduct periodic access reviews of access to critical information systems.
Participate in the development, testing, and execution of disaster recovery procedures and business continuity plans to ensure the resilience and availability of critical information assets and systems.
Facilitate cross-functional incident response and disaster recovery tabletop exercises to validate playbooks, evaluate organizational readiness, and identify actionable improvements.
Support the implementation and operation of cloud security controls across Azure and SaaS environments.
Review cloud solutions and provide security recommendations.
Participate in cloud security assessments and remediation activities.
Work with internal teams and service providers to improve cloud security posture.
Conduct security assessments for new technologies, applications, vendors, and business initiatives.
Identify security risks and recommend appropriate mitigating controls.
Review solution designs and architectures from a security perspective.
Support risk management activities for strategic business and IT projects.
Support investigation and remediation of security incidents.
Participate in incident response activities and lessons learned reviews.
Work with managed security providers and IT teams to address security issues.
Support continuous improvement of security monitoring and response processes.
Support PCI DSS compliance activities, audits, and assessments.
Assist with security documentation, evidence collection, and remediation efforts.
Collaborate with governance, risk, and compliance teams on security initiatives.
Participate in vendor security reviews and product evaluations.
Support RFPs and selection of security technologies and services.
Review vendor security documentation and recommend security requirements.
Supports the creation and maintenance of a talent succession plan
Collaborate with others to drive flexible and iterative solutions, quickly and easily
Share technical knowledge with others and actively seek to learn from those more knowledgeable than yourself
Help others see the impacts of their efforts and proactively engage other functions to get input
Encourage others to freely share their point of view and be open to feedback
Understand and follow Indigo's core HR process - staffing, performance management, rewards, and development
Has the ability to see the total organization with an integrated perspective
Develops positive and productive peer relationships
Model Indigo’s beliefs and convey a positive image in everything you do
Understands/demonstrates in a manner that promotes, and is aligned with, Indigo's Mission, Vision, Beliefs
As a leader, hold others accountable in maintaining the integrity of Indigo's culture
Celebrate diversity of thought and have an open mindset
Take an active role in fostering a culture of continual learning, taking risks without the fear of making mistakes
Embrace, champion, and influence change through your team and/or the organization

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field.
5+ years of progressive experience in Information Security, preferably in a
Strong experience supporting frameworks and regulations (specifically PCI DSS).
Proven experience working with cloud environments (Azure preferred) and IAM/PAM solutions.

Skills

Security Awareness
Identity and Access Management (IAM)
Cloud Security
Security Risk Assessments
Security Projects
Azure PIM
PAM
PCI DSS
Azure
SaaS
Analytical thinker
Problem-solving capabilities
Ability to influence
Translate complex technology risks into business terms
Excellent communicator
Coordinating with cross-functional stakeholders and vendors
Adaptable
Managing multiple priorities in a dynamic environment

Location

Remote

Work Type

Permanent
Full-Time

Experience Level

5+ years of progressive experience in Information Security

Education Level

Bachelor's degree in Computer Science, Information Security, or a related field.
Professional certification in the security field (CISSP, CISM, or relevant cloud security certifications like AZ-500) is considered an asset.

Salary/Compensations

CAD 100000 - CAD 120000 - yearly

About the Company

Indigo is a physical and digital place inspired by and filled with books, ideas, beautifully designed lifestyle products, and the creative people who help make it all happen.
We believe in real books, living life fully and generously, being kind to each other and to the environment, and that stories — big and little — connect us.
Indigo is our customer's happy place — for joyful moments of discovery and to connect with people who share their passion for reading, their belief in ideas, and their commitment to making the world a better and more beautiful place.