What you’ll do:

The Senior Information Security Specialist, Governance and Compliance will lead the charge in maintaining cyber security policies and standards, responding to regulator and auditor inquiries, and providing an advisory function to the business surrounding cyber security governance.

• Provide senior level advisory services to cybersecurity, technology teams, and business team members, as required

• Create and maintain cyber security policies and standards

• Manage the cyber security policy exemption management processes by assessing policy exception requests, maintaining the exception workflows, and updating and keeping current the exception database

• Respond to external inquires regarding cyber security (e.g. ESG, regulators, etc.)

• Analyze and assess cyber security related business scenarios and prepares/presents position papers providing risk-based recommendations to assist the leadership team in making informed decisions

• Oversee and provide guidance on the cyber security configuration compliance management program for both on prem and cloud environments

• Oversee and provide guidance on the cyber security vulnerability, configuration & patch remediation management programs

• Oversee and provide guidance on the Cloud security compliance management program

• Design and perform annual reviews of configuration benchmarks for teams to follow for new and existing systems

• Keep current with ongoing trends and changes within the cyber security community

What you bring:

• University degree preferably in an IT related discipline

• CISSP, and/or CISM, and/or CISA, and/or CRISC designations would be an asset

• 8-10+ years experience in information security, and/or IT Audit/Compliance, and/or external audit

• Extensive experience with governance and risk policy review, creation, and implementation, particularly concerning Azure cloud

• Strong understanding of IT, cloud and cyber security concepts and best practices

• Strong technical writing skills for the creation of new security polices and controls

• Understands cyber security risks and control frameworks including NIST CSF, CIS, COBIT 5, PCI DSS, accepted CIS benchmark, MS Azure security benchmark and ISO 270001

• Extensive experience with Microsoft Azure Portal/Security Center to monitor and manage vulnerabilities, security policy compliance and all outstanding Microsoft recommendation

• Understanding of Agile concepts and practices

• Ability to communicate and influence effectively at all levels from technical staff to company leadership team

• Proven ability to weigh business needs with information security priorities and make sound risk-based judgement calls

• Experienced with analyzing and assessing cyber security related business scenarios, performing risk assessments, and preparing position papers outlining sound, risk-based recommendations

• Experienced with analyzing and assessing cyber security policy exception requests and providing risk-based recommendations

• Experience overseeing cyber security configuration compliance programs

• Experience overseeing cyber security vulnerability & patch management programs

• Experience overseeing Cloud security compliance management programs

• Experience with developing security baselines based on industry accepted CIS benchmark, MS Azure security benchmark, PCI DSS benchmark, etc. and conduct regular reviews to update existing custom baselines

• Experience with security assessment tools such as Tripwire, Nexpose, MS Defender, McAfee EPO, Kenna, etc.

• Technical knowledge including Linux, Windows, AIX, databases, network and security appliances and firewalls/IDS/IPS, web and cloud-based applications, secure coding practices, and cloud security

• Highly proficient with MS Office suite of products

Hybrid

We value flexibility. We have adopted a hybrid work model whereby employees use a combination of working in office and virtually in service of outcomes. Each leader is empowered to decide what work is best achieved in person based on the unique needs of their team.

• Deliver exceptional customer service
• Complete all training, learning products and sharing knowledge
• Participate in general store upkeep including restocking, seasonal changeover, inventory, pricing and signing
• Handle cash & credit transactions

What you’ll do

The Personalization Pod team at Canadian Tire is an agile, customer-focused team that relies on data for marketing efforts in order reach out to customers on a more personal level. We are seeking a Marketing Specialist to join our team. Reporting to the Manager, Personalization Lifecycle, the Marketing Specialist will primarily be responsible for planning, executing, and reporting on customer focused campaigns. This position is key to supporting efforts to increase loyalty engagement across Canadian Tire.

• Draft detailed marketing plans with clear objectives and requirements

• Work closely with data analysts on the team to identify target audience segments and establish communication strategies to effectively reach them

• Liaise with cross-functional teams for campaign planning, creation of assets, and execution of key marketing campaigns

• Build out app campaigns such as push notifications, popups, and content cards, monitor campaign metrics and modify as necessary

• Measure the success of marketing campaigns by analyzing metrics, identifying trends, and opportunities for improvements

• Ensure generated insights meet standards of analytical and statistical rigour, highlighting gaps where necessary

• Build and communicate reports on marketing efforts and campaigns providing data-driven insights, key learnings and next steps

• Identify and troubleshoot issues as they arise with an entrepreneurial mindset, and provide scalable resolution with follow-through

• Work on ad-hoc projects that leverage multiple internal and external sources of data such as sales, digital analytics, loyalty, etc.

What you bring

• B.S. in Marketing, Business, or a related field

• 2+ years of relevant work experience

• Proven experience in marketing campaign planning, design and execution

• Knowledge of customer segmentation and targeting strategies

• Proficiency with Braze or similar customer engagement platforms

• Strong analytical skills with the ability to interpret data and generate actionable insights

• Excellent communication skills for effective collaboration with design teams and stakeholders.

• Detail-oriented with strong organizational skills to manage multiple projects simultaneously.

• Familiarity with digital marketing metrics and analytics tools, and ability to create compelling reports and presentations on campaign performance

• Experience working with cross-functional teams in a fast-paced environment.

• Strong ability to adapt to rapid changes in project requirements and priorities

• Experience with visualization platforms such as Looker or Google Data Studio is a plus

• Knowledge of SQL and Python is a plus

Hybrid   

We value flexibility. We have adopted a hybrid work model whereby employees use a combination of working in office and virtually in service of outcomes. Each leader is empowered to decide what work is best achieved in person based on the unique needs of their team.