5 days in Richmond

Fulltime permanent

A leading North American grocery retailer is seeking an experienced Information Security Engineer t to join its dynamic IT team. The Information Security Engineer is responsible for overseeing the implementation of security procedures and policy, safeguarding computer systems, networks and information, and promoting security best practices and awareness.

Day to Day:

• Implement, maintain, and enhance security policies, standards, and controls.

• Monitor, detect, and respond to security threats, vulnerabilities, and incidents.

• Conduct risk assessments before system deployments and perform periodic security audits on live systems.

• Manage security tools, including SIEM, intrusion detection and prevention systems (IDS/IPS), and data loss prevention (DLP) solutions.

• Remediate and patch vulnerable systems to mitigate security risks.

• Investigate security breaches and provide detailed reports and remediation strategies.

• Promote security best practices and awareness across the organization.

• Stay current with industry standards, emerging threats, and regulatory updates.

• Ensure compliance with regulatory frameworks such as PCI, PII, CASL, and other security mandates.

• Provide off-hours support and participate in shift rotations as required.

Perform other duties as assigned by senior management.

Must have

• A bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).

- 7-10 years of IT experience total

• Minimum of 3 years of experience in information security or a related field.

• Experience in designing secure networks, systems, and application architectures.

• Proven expertise and practical experience working with a diverse range of infrastructure hardware.

• Strong knowledge of MS Windows and Linux-based system programming and architecture.

• Familiarity with risk management methodologies and best practices.

• Hands-on experience with security management tools such as IPS, IDS, DLP, and SIEM.

• Possession of security-related certifications (e.g., CISSP) is an asset.

• Strong analytical and problem-solving skills with keen attention to detail.

• Excellent interpersonal and communication skills with a service-oriented mindset.

• Ability to work in a dynamic environment with flexibility and responsiveness to evolving security challenges.

• Fluency in written and spoken English

Able to communicate in Chinese (Mandarin and/or Cantonese) is an asset.