ABOUT US

Wittington Investments, Limited, a private Canadian company, is the holding company of the Weston group of companies, which includes George Weston Limited, Loblaw Companies Limited and Choice Properties REIT.
George Weston Limited is a Canadian public company, founded in 1882. George Weston has two operating segments: Loblaw Companies Limited, Canada’s largest food and drug retailer and a provider of financial services, and Choice Properties Real Estate Investment Trust, Canada’s largest and preeminent diversified REIT. With over 200,000 employees working at George Weston and its operating segments, the group of companies represent one of Canada’s largest private sector employers.

REQUIRED SKILLS, QUALIFICATIONS AND BEHAVIORAL ATTRIBUTES

• Intermediate knowledge and experience in Cybersecurity / Information Security industry.
• Previous experience working in Security Operations role is a plus.
• Knowledge and experience in creating Cyber Incident Response Plan and playbooks.
• Understanding of computer systems and networking.
• Familiarity with setting up SIEM is a plus.
• 5+ years of experience in Cybersecurity.
• Previous working experience with Information Security tools.
• Previous experience in detection, response, and resolution of cyber incidents.
• Previous experience in setting up mobile policies in Intune.
• Previous experience conducting security assessments.
• Nice to have: Experience with Apple products.
• Nice to have: Experience in penetration testing.
• Bachelor’s degree in Information technology, Cybersecurity, Computer Science, or related field required.
• Cybersecurity certification (CompTIA Security+, CISSP, CCSP, CGRC, etc.)
• Relevant certifications (e.g., CompTIA A+, Network+, Microsoft Certified: Modern Desktop Administrator Associate) are a plus.
• Cybersecurity Frameworks (NIST, COBIT, ISF, etc.)
  Wittington Investments, Limited is an equal opportunity employer committed to promoting a diverse and inclusive workplace. We know our success depends on the perspectives and contributions of all our employees. Diverse backgrounds and experiences make our business stronger.
  If you are contacted for a job opportunity and require accommodation, please email people.culture@wittington.ca so we can ensure you have an accessible candidate experience throughout the recruitment process. All requests are confidential and used only to meet candidate needs.

ROLE OVERVIEW

Wittington Information Security is responsible for protecting the information assets of the organization. This is achieved through various programs including security monitoring, security awareness training, risk management, and incident response. In addition, Wittington Information Security provides recommendations and mitigation strategies to enable the business to operate securely in pursuit of its goals.

DUTIES & RESPONSIBILITIES

• Actively monitor, review, and respond to alerts from various information security platforms and tools.
• Monitor systems for threats and vulnerabilities and provide prioritization and guidance for remediation.
• Develop and update Information Security related documentation, which includes policies, standards, and procedures.
• Assist with the Information Security Awareness program, including the development of phishing campaigns, report creation, and end-user training.
• Monitor and assess phishing threats, including those reported by users.
• Assist with risk management activities, including risk assessments, control assessments, risk remediation and tracking.
• Engage with vendors and IT partners to assess third-party security and supply chain risk.
• Support the maintenance of cybersecurity incident readiness plan and related playbooks. Assist the Information Security and IT teams in any cyber-related incident remediation action.
• Support Information Security improvement plan, along with other IT-related projects.