Senior Cybersecurity Analyst

at  Deciem

WHAT ON EARTH IS DECIEM?

Known as “The Abnormal Beauty Company”, DECIEM is the parent company of The Ordinary, NIOD, and other beauty brands & is an industry disruptor with a science first approach to innovation. DECIEM was Co-Founded in 2013 by the late Brandon Truaxe, a visionary who set out to change the beauty industry through authenticity and transparency. He developed DECIEM to be a happy family (of people and beauty brands), rooted in kindness, creativity, diversity, and respect, alongside Co-Founder and CEO, Nicola Kilner.
We are growing rapidly and we’re looking for someone who shares this vision and wants to grow with us!

WHAT WE’RE LOOKING FOR

We are looking for a senior cybersecurity analyst to develop, design, and implement cybersecurity frameworks.
This is a hybrid role, based out of our Fraser office in Toronto.

SKILLS AND QUALIFICATIONS NEEDED TO GET THE JOB DONE

• Cybersecurity certifications such as CISSP, CISM, required
• Experience with Vendor, Incident, and Risk management preferred
• Experience with building Cybersecurity programs an asset
• Experience with audit compliance activities
• Knowledge of international legislation related to Cybersecurity responsibilities
• Ability to work well under pressure and manage workload in a fast-paced, agile environment
• Ability to collaborate and communicate effectively with various stakeholders and departments in order to achieve goals

• Develop, design, and implement cybersecurity frameworks
• Collaborate cross-functionally with business stakeholders to drive, track, and resolve cybersecurity readiness and procedures
• Perform risk and threat assessments in accordance with industry recognized standards
• Serve as Subject Matter Expert on cybersecurity legislation and trends
• Participating in the vendor management process and perform analysis of current vendors by using tools such as questionnaires to ensure compliance
• Lead incident management protocols related to cybersecurity
• Assist in the creation and maintenance of Information, Privacy, and data security policies, standards, and guidelines
• Interface with internal and external parties to facilitate audits
• Develop internal training programs including creating and facilitating cybersecurity best practices, awareness programs, and guidelines
• Monitor for emerging threats and recommended relevant mitigation strategies