Security Lead, Horizon ERP

WSP•Mississauga, ON

6d•CA$122,100 - CA$179,100•Hybrid

About The Position

Join a transformative enterprise initiative where security, compliance, and business resilience are at the forefront. As Security Lead, Horizon ERP; you will help shape and safeguard the future of WSP's ERP environment, ensuring robust governance, protection of critical business data, and alignment with the highest regulatory and cybersecurity standards. This role plays a key part in enabling secure operations across a global organization while fostering a culture of security, collaboration, and continuous improvement.

Requirements

In-depth knowledge of IT security principles, best practices, and industry standards.
Strong leadership and management skills, with the ability to motivate and inspire a global team.
Excellent problem-solving and analytical skills, with the ability to identify and mitigate compliance and security risks.
Strong communication and interpersonal skills, with the ability to effectively communicate complex concepts to both technical and non-technical stakeholders.
Proficiency in conducting risk assessments and vulnerability testing.
Experience with security incident response and management.
Familiarity with security tools and technologies, including firewalls, intrusion detection/prevention systems, encryption, and antivirus solutions.
Knowledge of network and system administration.
Understanding of cloud computing security principles and best practices.
Familiarity with regulatory requirements and industry standards related to IT security.
Bachelor's degree in Computer Science, Information Technology, or a related field.
Professional certifications such as CISSP, CISM, or CISA are highly desirable.
Proven experience in an IT security leadership role, with a track record of successfully implementing and managing security programs.
Strong knowledge of applicable regulations and standards including SOX (52-109), GDPR, HIPAA, and ISO 27001.
Experience with risk management methodologies and frameworks.
Familiarity with project management principles and practices.
Excellent written and verbal communication skills, with strong attention to detail and the ability to manage multiple priorities simultaneously.

Nice To Haves

Professional certifications such as CISSP, CISM, or CISA are highly desirable.

Responsibilities

Develop and implement the organization's ERP compliance and security strategy, policies, and procedures.
Analyse and uphold appropriate security access controls to enforce least privilege policies.
Oversee compliance with semi-annual access certification processes within the ERP system.
Collaborate with a team of compliance and security professionals, providing guidance, training, and support to ensure the effective execution of all initiatives.
Conduct regular risk assessments and vulnerability tests to identify potential compliance risks and security threats and develop strategies to mitigate them.
Work with release teams on successful implementation of security defects and enhancements from Non-Prod to Production environments.
Work with technical teams on fine tuning and enhancing the SailPoint integration into Oracle.
Monitor and analyse security incidents, investigating any breaches or security incidents and implementing corrective actions as necessary.
Stay up to date with the latest industry trends, threats, and technologies to ensure that the organization's IT security measures are current and effective.
Collaborate with other departments to ensure that security requirements are integrated into the design and implementation of new systems and technologies.
Develop and implement security awareness programs to educate employees about security best practices and promote a culture of security within the organization.
Manage relationships with external vendors and partners to ensure that security controls are effectively implemented and maintained.
Ensure compliance with relevant regulatory requirements and industry standards, such as GDPR, HIPAA, ISO 27001, SOX (52-109) and related frameworks.
Work hand in hand with management to prepare and present regular reports on the organization's ERP security posture, providing insights, recommendations, and metrics to support informed decision-making.