IT Security Specialist

Position Summary

The IT Security Specialist is responsible for assuring the delivery of cybersecurity services provided by internal teams and third-party providers that support carrier-grade telecommunications services and critical communications infrastructure.

This role serves as an IT Security coordinator, working closely with the IT Senior Director, CIT & CNT teams, as well as external service providers to ensure security services are delivered consistently, effectively, and in alignment with business objectives, regulatory obligations, and risk tolerance in a 24×7 telecom environment.

Key Responsibilities

Network & Infrastructure Security Oversight

• Provide strategic oversight of security controls protecting carrier-grade networks, including core, access, and edge infrastructure
• Review and validate security architectures, designs, and changes delivered by third-party providers to ensure alignment with availability, resilience, and security standards
• Oversee the implementation and ongoing operation of network security controls (firewalls, IDS/IPS, DDoS protection, VPNs) delivered by managed service providers
• Ensure third-party providers maintain appropriate standards for VPN security, cryptographic controls, and secure deployment of enterprise services (e.g., Office 365, OpenVPN, and other critical platforms)
• Act as a security governance authority for IP/MPLS, VoIP, SIP, SS7/Diameter, LTE/5G, and fiber-based networks, ensuring risks are identified and addressed

Security Operations & Incident Response Governance

• Provide oversight of security operations and incident response activities delivered by SOCs, MSSPs, and other third-party providers
• Ensure clear incident response processes, escalation paths, and decision authority are defined and followed
• Coordinate incident response efforts across internal teams (IT, CNT, NOC) and external providers during significant security events
• Review post-incident reports, validate root-cause analysis, and ensure corrective actions are implemented
• Drive continuous improvement in detection coverage, response quality, and operational effectiveness

Risk Management & Compliance

• Oversee enterprise and network risk assessments conducted by third-party providers, including vulnerability management and penetration testing activities
• Ensure compliance with approved regulatory and industry frameworks within the organization.
• Validate that third-party providers meet telecom-specific security, privacy, and regional regulatory obligations
• Review and collaborate on approval of security policies, standards, and audit evidence
• Lead third-party cybersecurity risk management, including supplier assessments and ongoing assurance
• Support internal and external audits related to information security and regulatory compliance

Systems, Cloud & Platform Security Oversight

• Ensure deliverables and quality assurance regarding vulnerability management, CVE assessments, and related remediation activities performed by internal teams and external providers
• Ensure security controls are appropriately applied to OSS/BSS platforms, billing systems, and customer-facing portals
• Maintain and control security architecture and design for cloud, hybrid, and virtualized environments (NFV, SDN)
• Ensure providers follow secure configuration, patching, and lifecycle management practices

Identity, Access & Data Protection Governance

• Maintain identity and access management controls for network devices, platforms, and privileged accounts
• Ensure protection of sensitive customer and operational data, including CPNI and call data records
• Validate encryption, logging, and monitoring practices implemented by service providers to protect data in transit and at rest

Threat Intelligence & Continuous Improvement

• Maintain relevant telecom-focused threat intelligence with third party providers and proactively adjust controls
• Oversee vulnerability scanning, penetration testing, and remediation programs
• Evaluate and recommend security capabilities and service improvements suitable for high-availability telecom environments

Advisory & Collaboration Role

• Act as an advisor to IT, network engineering, and operations teams
• Provide security governance input for new service launches, technology upgrades, and vendor selection
• Promote consistent security standards and best practices across internal teams and external providers

Reporting & Communication

• Provide reporting on security posture, risks, incidents, and remediation status to IT team
• Define and review security metrics and dashboards focused on availability, resilience, and risk reduction
• Translate technical security risks into clear business and service-impact terms for IT, network engineering, and operations teams

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience)
• 5+ years of experience in cybersecurity, security governance, or security operations within telecommunications or critical infrastructure environments
• Demonstrated experience overseeing third-party security providers, SOCs, MSSPs, or managed services
• Experience supporting 24×7, high-availability operational environments

Preferred Qualifications

• Security certifications such as CISSP, CISM, or CCSP
• Experience working with telecom operators, managed network providers, or large-scale service environments
• Familiarity with DDoS mitigation, signaling security, and telecom threat landscapes
• Experience with cloud and virtualized infrastructure security governance

Pay: $80,000.00-$90,000.00 per year

Experience:

• overseeing 3rd party security providers, SOCs, MSSPs: 2 years (required)
• cybersecurity, governance or security operations: 4 years (required)

Work Location: Hybrid remote in Pointe-Claire, QC H9R 5C7