INFORMATION SECURITY SPECIALIST

Job Title: Information Security Specialist Reports to: Lead, Privacy & Compliance Officer & Director, Performance Excellence & Information Services Status: 9-12 month contract Direct Reports: None Travel Requirements: None Number of Vacancies: 1 Office Hours: 8:30AM – 4:30PM

Healthcare Insurance Reciprocal of Canada (HIROC) is a trusted healthcare safety advisor, committed to offering a full spectrum of insurance, risk and claims management products and support.

HIROC knows healthcare as it’s the largest not-for-profit healthcare liability insurer in the country, with over 700+ healthcare organizations part of the Reciprocal. Combined with sage counsel and risk management solutions, HIROC works with its partners to increase safety.

As a Reciprocal, HIROC is governed by its Subscribers and remains an innovative, agile, and proactive partner. Since its inception in 1987, the not-for-profit has returned over $260 million to the healthcare system. HIROC’s 35 years of data is combined with its extensive experience to advise and share learnings, all with the goal of scaling knowledge and increasing safety across Canada’s healthcare system.

One common thread running through HIROC’s culture is the feeling of being part of something unique: partnering to create the safest healthcare system – HIROC’s vision.

Each employee has the opportunity to find their calling and help build a stronger organization designed to meet the needs of its Subscribers. As a Top 100 GTA Employer ten years running, HIROC employees are empowered to find solutions and create amazing experiences in service to its Subscribers.

Join us and be part of the team working to make a difference.

SUMMARY: The Information Security Specialist is a vital member of HIROC’s within HIROC’s Performance Excellence and Information Services and Privacy and Compliance Team. The role is primarily responsible for providing a robust, reliable and secure foundation of technologies and systems to enable the company’s business operations and support its strategy.

KEY RESPONSIBILITIES: Work with HIROC's PEIS and Privacy Compliance Team to assess, prioritize, remediate vulnerabilities that have been identified through scans or zero-day vulnerabilities. Collaborate with PEIS team to remediate vulnerabilities across all operational aspects of server infrastructure, including physical servers, virtual servers, cloud servers and hyperconverged infrastructure. Collaborate with PEIS team to ensure the optimal function of key security applications and systems by working with HIROC’s Managed Security Service Provider(MSSP), including but not limited to endpoint security agents, antivirus software, Security Incident and Event Management (SIEM), and Vulnerability Management. Respond to emergencies in line with business continuity plans to ensure prompt cybersecurity incident response and disaster recovery, including in simulated tests. Collaborate with our cybersecurity MSSP to mitigate security risks by ensuring systems are patched in accordance with schedules and priorities. Support in reviewing Security Assessment for new tools and technology implementation for HIROC by completing Cloud Security Assessment and AI Assessment as needed. Potentially work with a third-party provider to undertake Threat & Risk Assessments (TRA). Support collecting and submitting evidence for compliance and audit related activities. Document security policies, procedures, and protocols, as required. Keep current with the industry and key trends in IT security products, services, technologies and standards in support of the company’s continued innovation. Contribute to the company’s knowledge base to strengthen troubleshooting and maintenance activities. Ensure established service level agreements are met or exceeded. Other duties as assigned.

KNOWLEDGE, SKILLS& ABILITIES In-depth understanding of IT infrastructure (servers, storage, routers, switches, firewalls, cloud and hyperconverged infrastructure) Experience working with and improving policies and procedures. Experience working with sensitive and protected data, including familiarity with data privacy and confidentiality standards. Good understanding of NIST CSF, SOC 2, ISO frameworks. Strong understanding and familiarity with networking concepts and technologies, including switches, ClearPass, firewalls and VPN tunnels. Exceptional organization and time management skills. Experience in implementing business continuity and disaster recovery methodologies. Knowledge of and familiarity with the following technologies: Fortinet suit of products, Veeam, Active Directory, Microsoft End Point Manager (SCCM), VMware vSphere, Windows Server, Nutanix HCI, HP ClearPass, OKTA, Patch management, What’s up Gold. Programming/scripting skills. E.g., PowerShell, would be an asset but are not required.

EDUCATION, TRAINING & EXPERIENCE: To be successful in this role, you will possess a College or University degree in the field of Computer Science or a related field. 8-10 years of technical combined work experience in managing IT infrastructure and cybersecurity. Minimum 8 years of experience supporting Data Centre infrastructure; LANs, WANs and Wireless. Minimum 8 years hands-on experience implementing, configuring, and troubleshooting complex networks. Certifications of the following are an asset: CISSP ITIL VMWare Administration Nutanix Hyperconverged Administration TIL 4 Foundation Cybersecurity Training HP ClearPass Administration Cloud Networking (Azure/AWS/Oracle) Most importantly, you are an enthusiastic and creative thinker, who is constantly driving performance improvement and are passionate about creating the safest healthcare system possible for Canadians.

WORKING CONDITIONS: Working at a computer for much of the day HIROC is committed to a hybrid work environment, which includes 2 days per week in office, with departments meeting in person at least two times per month, as per HIROC’s Hybrid Work Policy. HIROC’s hybrid model provides opportunities for team building, education, leadership development and cross departmental relationship building.

SALARY RANGE: $100,000.00-$120,000.00

The salary range offered for this position will be determined by a variety of factors including the candidate’s skills, competencies, qualifications and relevant experience, in accordance with HIROC’s Compensation Policy.

TO APPLY: Please submit your résumé to HR@hiroc.com

In order to be considered for this position, please include a current résumé or detailed qualifications summary with your application. Only those selected for an interview will be contacted.

At HIROC we do not use AI (Artificial Intelligence) or automated screening tools at any stage of our hiring process. Every application is reviewed by our hiring team. If you have any questions regarding our recruitment process, please reach out to our Human Resources Department at HR@hiroc.com

HIROC is committed to fostering a climate of equity, diversity, inclusion, and accessibility. HIROC respects the diversity of all members of its community and welcomes applications from those who have demonstrated a commitment to the values of equity, diversity and inclusion. Applications from members of groups that have been historically disadvantaged and marginalized, including First Nations, Métis and Inuit peoples, racialized persons, persons with disabilities, those who identify as women, 2SLGBTQ+, individuals who self-identify on the basis of any of the protected grounds under the Human Rights Code and/or others who may contribute to the further diversification of ideas within its community are encouraged. HIROC is committed to fair assessment of a candidate’s abilities, and consideration for diversity of thought, method, and experience, including non-traditional career paths.

HIROC is committed to providing a barrier-free environment for all stakeholders, including its participants, employees, job applicants, suppliers, the public and any visitors who may enter its premises, access its information, or use its services. As an organization, HIROC respects and upholds the requirements set forth under the Accessibility for Ontarians with Disabilities Act (AODA) and its associated standards and regulations and will ensure that HIROC offers a safe and welcoming environment that is respectful of each person's dignity and independence.