IT Security & Operations Specialist

Riverside Natural Foods Ltd. • North York, ON

50d • $90,000 - $95,000 • Onsite

About The Position

As a family owned and led company, Riverside Natural Foods (“Riverside” or the “Company”) has the freedom to pursue our founders’ vision of being a values-based and purpose driven food company that puts people first – our employees, our consumers, our partners, and our communities. Our purpose of “inspiring a healthier and more compassionate world” starts within our four walls and extends well beyond them to include everyone we can positively impact through our products, our business, and our relationships.
Continued rapid growth, fueled by our focus on building a bigger, more capable, more productive, and more responsible business, has created the opportunity to add an IT Security & Operations Specialist role.
The IT Security & Operations Specialist supports Riverside’s cybersecurity operations and selected IT administration activities. This role is responsible for monitoring and responding to security events, administering key Microsoft security controls, supporting phishing and awareness programs, and helping maintain secure identity, endpoint, and collaboration environments. The role also provides hands-on support for selected IT operational processes, including user lifecycle management, endpoint administration, and coordination with Infrastructure and Helpdesk teams. Success in this role requires strong judgment, attention to detail, and the ability to balance security priorities with day-to-day operational support.

Requirements

• Post-secondary diploma or degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 3 to 5 years of combined experience across IT support, systems administration, and cybersecurity.
• At least 1 year of hands-on experience in security operations, security administration, or incident response.
• Experience working in a Microsoft-centric environment, including Microsoft 365, Intune, Windows Server, and identity/access management.
• Strong understanding of incident response processes and vulnerability management principles.
• Experience implementing security controls such as MFA, DLP, encryption, and endpoint protection.
• Strong problem-solving skills with attention to detail and accuracy.
• Demonstrates professionalism, sound judgment, and a service-oriented approach.
• Strong organizational skills with the ability to manage multiple priorities effectively.
• Strong verbal, written, and interpersonal communication skills.
• Demonstrated ability to work effectively with cross-functional teams to resolve complex issues.
• Able to work independently and collaboratively in a fast-paced environment.
• Takes initiative, follows through on commitments, adapts well to change, and contributes effectively in a hands-on environment.
• Able to regularly move throughout both office and production areas.
• Must have a valid driver’s license and reliable transportation.

Nice To Haves

• CompTIA Security+ certification strongly preferred.
• Microsoft Security Certification strongly preferred.
• TCM Security Certification is an asset.

Responsibilities

• Monitor SIEM, EDR, and other security tools for suspicious activity and security alerts.
• Investigate and respond to security incidents, including containment, eradication, and recovery efforts.
• Conduct root cause analysis and maintain detailed incident documentation.
• Track and manage Incident and Change Request SLAs.
• Coordinate and execute phishing simulation campaigns and report on outcomes.
• Ensure end users complete mandatory cybersecurity awareness training and track compliance metrics.
• Provide appropriate phishing response actions, including analysis of spam/phishing emails, reporting, and taking corrective action.
• Implement and maintain security controls, including MFA, encryption, Data Loss Prevention (DLP), and endpoint protection.
• Assist the Information Security Manager with cybersecurity projects and new security implementations or improvements.
• Maintain accurate documentation of policies, procedures, risk assessments, and incident reports.
• Administer and support the Microsoft 365 environment, including core security controls, user administration, Exchange Online, SharePoint, and Teams.
• Manage and maintain Windows Server environments, including Active Directory, Group Policy, DNS, DHCP, and user access management to ensure secure and reliable operations.
• Administer endpoint management solutions such as Microsoft Intune for device provisioning, patch management, software deployment, and security policy enforcement.
• Support identity and access management by configuring Microsoft 365, Microsoft Entra ID, MFA, and SSO integrations while ensuring compliance with IT security policies.
• Deliver the IT security components of the user onboarding and offboarding process, ensuring secure access provisioning and deprovisioning.
• Collaborate with IT Infrastructure and Helpdesk teams to strengthen cybersecurity operations and overall IT resilience.
• Support continuous improvement initiatives related to cybersecurity posture and compliance.
• Other duties as required.

Benefits

• RRSP matching or 401k matching for an empowered financial journey
• Eligibility to participate in Riverside's Profit Sharing Plan
• Join Employee-Led Resource Groups (ERGs) championing mental health, sustainability, diversity, women, and LGBTQ+ rights
• Develop your career further through our Riverside University program and with our Tuition Reimbursement Program
• An open concept work environment that embodies our Values

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree
• Number of Employees: 101-250 employees