Facilities & Security Specialist - Canada - Rippling

Description

OneVest is a financial technology company on a mission to power the world's wealth.

We offer a comprehensive Wealth Management Technology Platform platform that enables enterprises to expand their product capabilities, enhance distribution, streamline front, middle, and back office operations - all while extending innovative investor and advisor experiences.

OneVest offers a first of its kind Wealth API, white-label apps, an advisor and portfolio manager platform, and asset management services.

OMERS Ventures, Fin Capital, Deloitte Ventures, Pivot Investment Partners, FJ Labs and many more.

We are looking for a full-time Senior Security Specialist to join our team in Calgary, Alberta; however, this role can be remote from other locations in Canada.

The successful candidate has deep technical experience across different application and enterprise security domains, and has hands-on experience using cutting-edge security applications.

They will help lead policy and governance activities.

The candidate will work horizontally and vertically throughout the company to plan and execute security initiatives, including policy and governance.

but on a day-to-day basis, this role requires hands-on ownership over all aspects of our security posture. This is a tremendous opportunity for a well-rounded professional to directly impact the growth of a high-velocity startup.
Work closely with the Product and Engineering teams to ensure that all products are aligned with application security, enterprise security and compliance best practices
Consult across departments to maintain our policy and governance requirements
For example, the candidate will be the cybersecurity representative in the Change Management process and will ensure that all changes meet security standards & requirements
Assist in enhancing the current Enterprise security controls and requirements
Conduct periodic risk assessment across the enterprise and products
Support in the development of revisions to cybersecurity documents such as policies, standards, guidelines, and/or technical procedures
You will be working along the DevOps team to develop and maintain security automation in the CI/CD pipeline and in testing environments
Incident Response, Identity & Access Management, Threat Intelligence, Crisis Management, Data Security, Vendor Risk Management
Support client side team on completing RFPs or security due diligence documents
IT responsibilities such as access/role management and remote device monitoring
7+ years of demonstrable working experience in cloud application security as well as enterprise security.
Logging & Monitoring, Vulnerability Management, Information Security, Penetration Testing, Digital Forensics, Network Security.
Agile, DevOps, OWASP ASVS, OWASP Top 10, OWASP API, NIST CSF, ISO 27001/27002, SOAR, SOC
Have experience working as a Software Developer and/or be familiar with modern agility-based development practices
A flexible, dog-friendly, hybrid working environment
Comprehensive Group Health, Dental and Vision Benefit Plan right from the start
At OneVest, we're dedicated to building a diverse, inclusive, and authentic workplace.