Job Description
HOOPP The Healthcare of Ontario Pension Plan (HOOPP) provides a lifetime pension plan at retirement. We’re one of the largest defined benefit pension plans in Canada. View company page high-performance, people-focused cultureour commitment that equity, diversity, and inclusion are fundamental to our work environment and business success, which helps employees feel valued and empowered to be their authentic selveslearning and development initiatives, including workshops, Speaker Series events and access to LinkedIn Learning, that support employees’ career growthmembership in HOOPP’s world class defined benefit pensionplan, which can serve as an important part of your retirement securitycompetitive, 100% company-paid extended health and dental benefits for permanent employees, including coverage supporting our teams diversity and mental health (e.g., gender affirmation, fertility and drug treatment, psychological support benefits of $2,500 per year, and newly extended maternity/parental leave top of 26 weeks)optional post-retirement health and dental benefits subsidized at 50%yoga classes, meditation workshops, nutritional consultations, and wellness seminarsaccess to an annual wellness reimbursement program for health and wellness-related expensesfor permanent and temporary employeesthe opportunity to make a difference and help take care of those who care for us, byproviding a financially secure retirement for Ontario healthcare workersJob Summary:Reporting to the Director, Enterprise Data Security, Cyber Awareness and Training the “Data Security Engineer - (Data Protection)” is responsible for the design, implementation, and day to day oversight of the data security program requirements and the ongoing maintenance of HOOPP’s data security tools.Together with the Director, and other Information Security team members, this role is accountable for the execution of the data security program deliverables at an enterprise level. These program deliverables are driven by the Information Security roadmap, ultimately ensuring that HOOPP effectively manages data security risks.The Data Security Engineer is crucial for advancing HOOPPs data security program, shaping policies, and enhancing security awareness. This role champions a culture that prioritizes data security and recognizes data as a strategic asset, integrating innovative technologies for data protection and ensuring employees are security aware.Additionally, the position is vital for promoting a company-wide culture of data security, managing both new and existing data protection tools, and confirming that employees understand and follow security policies, reflecting a robust security mindset.What you will do:Data Protection Measures:Design and maintain Data Loss Prevention (DLP) solutions to protect sensitive data, ensuring policy compliance.Develop and enforce data security policies, monitor DLP systems, and analyze incidents.Collaborate for DLP controls integration and incident response with the security teamCollaborate with the Disaster Recovery team as well as IT Teams on joint projects to protect data and advise on cyber recoveryData Security Awareness:Support data security culture and compliance initiatives.Develop and deliver training for security protocol adherence.Drive privacy initiatives with the privacy office to protect PII and confidential information.Technological Innovation and Maintenance:Stay updated on emerging technologies for data protection.Maintain and support existing DLP tools for effectiveness.Provide on-call support for security event reporting.Enforcement of Security Policies:Ensure adherence to established security policies and standards organization-wide.Conduct regular assessments to evaluate compliance with these policies.Perform audits to identify areas for improvement and ensure continuous enhancement of security measures.Perform security governance functions within data loss prevention and cloud security domains.Policy Development and Compliance Oversight:Policy Enhancement: Aid in the development and refinement of data protection policies, keeping abreast of industry standards and legal compliance.Use effective communication to clearly articulate complex data security issues and risks to a broad audience, fostering informed decision-making.Maintain industry awareness and stay informed about the latest security industry developments, including new solutions, processes, and emerging threats.Perform security governance functions within data loss prevention and cloud security domains.Who you are:Degree or diploma in the field of information security, information systems management, information technology and/or 7+ years of equivalent work experience.Demonstrated expertise in Data Loss Prevention implementation and data management configurations with a preferred minimum of five years experience.In-depth knowledge of data loss prevention and cloud access security broker technologies.Familiarity with security aspects of Azure and Office 365 solutions. AWS experience is also beneficial.Hands-on involvement with privacy applications in data protection and information classification standards.Strong knowledge of Information Security principles, including regulations, standards, and risk management.Comprehension of regulatory requirements for data systems controls.Successful track record in securing stakeholder buy-in for security controls and programs.Extensive background in leading security awareness campaigns and supporting security program delivery components.Acquaintance with Agile methodologies and their application principles.Capability to address issues related to privacy and data protection.History of cultivating security awareness among stakeholders.Explore more InfoSec / Cybersecurity career opportunitiesFind even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.