Data Security Specialist

EllisDon•Mississauga, ON

96d•$65,000 - $80,000

About The Position

As a Data Security Specialist Promote continuous improvement of data security processes, standards, and secure design practices. Implement and maintain data classification & labeling, protection controls, and access governance across systems. Monitor data security posture using DSPM tools to identify exposure, misconfigurations, and risks. Analyze data‑related findings and coordinate remediation with Cybersecurity, Digital & Data Engineering, and Data Owners. Support GRC and organization certification activities including data risk assessments, control validation, and evidence collection for audits. Investigate data incidents, unauthorized access events, leakage, and support forensic analysis when needed. Contribute to security reporting by preparing posture metrics and updates for leadership. Is this the right role for you? You have experience in systems administration, data architecture and protection, cybersecurity, incident response, or information security analysis. You understand data protection concepts (classification, DLP, access governance, encryption, DSPM). You are comfortable interpreting technical data security findings, formulating an execution plan, and collaborating across departments. You bring familiarity with frameworks such as ISO 27001, SOC 2, NIST (CSF, 800-171), or CMMC. You hold a degree / diploma in Cybersecurity, Computer Science, Information Systems, IT Administration or a related field, or have relevant direct job experience. You have or are pursuing certifications such as CISSP, CCSP, GIAC (GSEC, GCCC, GISP), Azure Information Protection, or CIPP. You thrive in roles that require ownership, accountability, and a drive for continuous learning. EllisDon is proud to provide this unique career opportunity that provides continuous learning, opportunity for growth, and a competitive compensation package within an environment that is committed to inclusion and respects diversity. Go ahead and be yourself. We'll pay you for it! We are an equal opportunity employer. We welcome people of any age, culture, subculture, gender identity or expression, sexual orientation, nationality, ethnicity, race, size, mental or physical status, veteran status, religion, language, political opinion, working-style preference, family status, education, and socio-economic status. The EllisDon core values of Integrity and Mutual Respect welcomes everyone, at work and in the community, and our value of Mutual Accountability, means that we all have a role to play. As an EllisDon employee, this will ultimately be your commitment to Inclusive Diversity. Accommodation for Applicants with disabilities will be made during the recruitment process when requested. We are committed to providing a positive candidate experience and ensuring timely updates are provided to all candidates.

Requirements

You have experience in systems administration, data architecture and protection, cybersecurity, incident response, or information security analysis.
You understand data protection concepts (classification, DLP, access governance, encryption, DSPM).
You are comfortable interpreting technical data security findings, formulating an execution plan, and collaborating across departments.
You bring familiarity with frameworks such as ISO 27001, SOC 2, NIST (CSF, 800-171), or CMMC.
You hold a degree / diploma in Cybersecurity, Computer Science, Information Systems, IT Administration or a related field, or have relevant direct job experience.
You have or are pursuing certifications such as CISSP, CCSP, GIAC (GSEC, GCCC, GISP), Azure Information Protection, or CIPP.
You thrive in roles that require ownership, accountability, and a drive for continuous learning.

Responsibilities

Promote continuous improvement of data security processes, standards, and secure design practices.
Implement and maintain data classification & labeling, protection controls, and access governance across systems.
Monitor data security posture using DSPM tools to identify exposure, misconfigurations, and risks.
Analyze data‑related findings and coordinate remediation with Cybersecurity, Digital & Data Engineering, and Data Owners.
Support GRC and organization certification activities including data risk assessments, control validation, and evidence collection for audits.
Investigate data incidents, unauthorized access events, leakage, and support forensic analysis when needed.
Contribute to security reporting by preparing posture metrics and updates for leadership.