OneVest Looking for Security Specialist at Calgary, Alberta, Canada Full Time

OneVest is a financial technology company on a mission to power the world’s wealth. We offer a comprehensive Wealth Management Technology Platform platform that enables enterprises to expand their product capabilities, enhance distribution, streamline front, middle, and back office operations – all while extending innovative investor and advisor experiences. OneVest offers a first of its kind Wealth API, white-label apps, an advisor and portfolio manager platform, and asset management services. OneVest is backed by notable investors, including: OMERS Ventures, Fin Capital, Deloitte Ventures, Pivot Investment Partners, FJ Labs and many more.

About The Role

We are looking for a full-time Senior Security Specialist to join our team in Calgary, Alberta; however, this role can be remote from other locations in Canada. The successful candidate has deep technical experience across different IT& Cybersecurity domains, and has experience in using cutting-edge software and tools. Moreover, the candidate wants to take their knowledge and experience to the next level, which includes assisting in and providing input to the overall Cybersecurity strategy and its delivery. Working closely with the CISO, CTO, and COO, the candidate will have exposure to senior leadership and will help improve the cybersecurity posture of both the enterprise and our products.

What You’ll Be Doing

• Work closely with the Product team ensuring that all products are aligned with the enterprise controls and requirements
• Partner with developers and provide them with security best practices
• Act as a Cybersecurity Subject Matter Expert (SME) and provide input to other IT processes. For example, the candidate will be the cybersecurity representative in the Change Management process and will ensure that all changes meet security standards& requirements
• Assist in enhancing the current Enterprise security controls and requirements
• Conduct periodic risk assessment across the enterprise and products
• Support in the development of cybersecurity documents such as policies, standards, guidelines, and/or technical procedures
• Be a key resource in DevSecOps practices. You will be working along the DevOps team in developing and maintaining security automation in the CI/CD pipeline
• Upon being hired in the role, be able to enhance the knowledge and experience in the following domains: Incident Response, Identity& Access Management, Threat Intelligence, Crisis Management, Data Security, Vendor Risk Management
• Support client side team on completing RFPs or security due diligence documents
• IT responsibilities such as access/role management and remote device monitoring

Qualifications

• 7+ years of demonstrable working experience in one or more Cybersecurity domains
• Hands-on experience and knowledge in the following domains: Application Security, Logging& Monitoring, Vulnerability Management, Enterprise Security.
• Hands-on experience in using enterprise-tools used for SAST, DAST, and SCA.
• Knowledge of practices and frameworks such as: Agile, DevOps, OWASP ASVS, OWASP Top 10, OWASP API, NIST CSF, ISO 27001/27002, SOAR, SOC

Bonus

• Have experience working as a Software Developer and/or be familiar with development practices
• Fintech or Financial Services experience is preferred but not required
• Relevant cybersecurity certifications are a bonus but not required as long as the candidate can demonstrate their skills and experience.

What It’s Like To Work With Us

• Culture: It’s fun, rewarding, face-paced – and we build cool stuff, too! Learn more here:https://www.onevest.com/company/culture
• Vacation: 5 weeks of vacation
• Flexibility: A flexible, dog-friendly, hybrid working environment
• Health& Wellness: Comprehensive Group Health, Dental and Vision Benefit Plan right from the start
• Equity: Employee Stock Option Purchase Plan
• Opportunity: An environment where you are recognized and growth opportunities are available

Sound like a good fit? Apply today!

Don’t meet every single requirement? We encourage you to apply anyways. At OneVest, we’re dedicated to building a diverse, inclusive, and authentic workplace. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we would still like to review your resume. You may be just the right candidate for this or other roles.