How you’ll make an impact:

• Develop and maintain the overarching strategy for Geotab’s cybersecurity program, ensuring it aligns with organizational goals.
• Take full ownership of cybersecurity incidents from identification through resolution, including conducting post-incident reviews to identify areas for improvement.
• Employ advanced analytic techniques to predict future security threats and vulnerabilities, and take proactive measures to mitigate risk.
• Regularly review and update Geotab’s security policies, procedures, and frameworks to reflect both current and emerging threats.
• Serve as the senior liaison between the security operations team and other departments, ensuring seamless communication and collaboration on security initiatives.
• Participate and be an SME in internal and external security audits, ensuring compliance with industry standards and regulations.
• Spearhead the development and maintenance of critical documentation, including but not limited to, Standard Operating Procedures (SOPs), Incident Response Plans, and Disaster Recovery Plans.
• Deliver high-level, technical briefings to stakeholders on the state of the cybersecurity landscape, ensuring they are apprised of risks, incidents, and preventive measures.
• Identify gaps in current security tools, systems, and processes, and work to source or develop solutions.
• Conduct and oversee risk assessments for existing and new technologies, systems, and business processes, providing strategic recommendations for improvement.
• Lead or participate in special projects related to cybersecurity, including but not limited to, the evaluation and deployment of new security technologies.
• Provide technical mentorship and guidance to junior analysts, developing their capabilities and overseeing their day-to-day responsibilities.

What you’ll bring to this role:

• 5-8 years experience in security operations/analysis, within a technology-focused industry.
• Post-Secondary Diploma/Degree specialization in Computer Science, Engineering or a related field.
• Professional certification in Information Security from a reputable institution highly valued. Example: CISSP, GSEC, OSCP, GCIA, CCSP, GCFA, GCIH, GCP, AWS
• Experience and understanding in use of various security tools, such as EDR and SIEM technologies. 
• Experience in Python, Javascript, or other programming languages is a benefit (but not required).
• Experience using Bigquery, SQL, and regex is highly valued.
• Experience with cloud computing platforms such as AWS and GCP is a benefit.
• High accuracy and meticulous attention to detail.
• Able to work well under pressure and respond to fast changing priorities and deadlines.
• Highly organized and able to manage multiple tasks and projects simultaneously.
• Excellent verbal and written communication skills.
• Strong analytical skills with the ability to problem-solve to well-judged decisions.
• A strong team-player with the ability to engage with all levels of the organization.
• Technical competence using software programs, including, but not limited to, Google Suite for business (Sheets, Docs, Slides).
• Entrepreneurial mindset and comfortable in a flat organization.