Info Security Specialist

Info Security Specialist

Location

Toronto, ON

Onsite Flexibility

Hybrid — 3 days in office, 2 days work from home

Contract Details

• Position Type: Contract
• Contract Duration: 1 year (with possibility of extension and conversion based on business needs and performance)
• Pay Rate: C$90.00–C$106.00 / Hour (CAD)
• Shift / Schedule: Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

---

Job Summary

We are seeking an experienced Information Security Specialist to provide security consulting, governance oversight, and technical expertise across complex technology and business initiatives. In this role, you will partner with Architecture, Infrastructure & Engineering, and Risk teams to assess security risks, develop security standards, and implement effective security controls that support modern technology solutions. You will play a key role in defining security requirements, establishing governance guardrails, and enabling the secure adoption of cloud, container, AI, and enterprise network technologies.

---

Key Responsibilities

• Provide security consulting and risk assessments for technology initiatives and projects.
• Review solution designs and provide risk-based security recommendations aligned with enterprise security standards.
• Develop and maintain security standards, technical requirements, STIGs, control mappings, and implementation guidance.
• Support governance and security reviews for cloud, hybrid, on-premises, containerized, B2B, and emerging technology environments.
• Assess and provide guidance on security controls for Kubernetes, cloud-native platforms, APIs, SaaS solutions, AI-enabled technologies, and partner connectivity solutions.
• Design and maintain governance controls supporting secure access, URL filtering, network segmentation, B2B connectivity, and Zero Trust initiatives.
• Partner with technology teams to establish security guardrails and governance controls that can be consistently applied across the enterprise.
• Contribute to governance modernization, automation, and process improvement initiatives.
• Support enterprise-wide security governance programs and strategic security initiatives.
• Build strong relationships with business, technology, engineering, and security stakeholders.

---

Must-Have Requirements

• 10 years of Networking experience
• Strong understanding of security governance, risk management, and security control frameworks.
• Experience conducting security assessments and evaluating technology risk.
• Strong knowledge of network security technologies, architectures, and enterprise security principles.
• Strong knowledge of enterprise network infrastructure, including routers, switches, load balancers, proxies, DNS, and related network technologies. Ability to understand network traffic flows and assess security implications across complex enterprise environments

Required Skills

• Strong communication skills (written and verbal)
• Strong documentation skills (writing processes)
• Strong collaboration skills, team player mindset

---

Preferred Skills

• Industry certifications such as CISSP, CCSP, CISM
• Knowledge of Zero Trust architectures, secure access technologies, and network segmentation principles
• Automation skills
• Security knowledge/background
• Prior financial institution, highly regulated, or large enterprise environment experience

---

Education Requirements

• Post-secondary degree or equivalent practical experience
• CISSP, CCSP, or CISM certification (nice to have)

---

Required Experience

• 10 years of overall experience in an information security role

---

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

---

Important Notes

• Interview process: 2 steps — virtual and in-person, 1 hour, 1-on-1 and panel format
• Training period: TD onboarding followed by 3–4 weeks of role-specific training

---

About the Client

This client is a leading financial services and banking institution operating across Canada and internationally, employing tens of thousands of professionals across technology, risk, compliance, and operations functions. With a large enterprise footprint and a collaborative, supportive work culture that emphasizes work-life balance and growth, this organization engages security specialists, solutions developers, IT professionals, and release train strategists to support complex technology and regulatory environments at scale.

---

About GTT

GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska-based company and one of the largest Alaska Native-owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.

---

Job Number

26-18514

#LI-Hybrid