DevSecOps Engineer
Apply NowCompany: Diverse Lynx LLC
Location: Toronto, ON M4E 3Y1
Description:
DevSecOps Engineer
Location - Toronto, ON
Work Model- Hybrid (2-3 days from office)
Business Skills
Technical Skills
Soft Skills
Good communication (verbal and written) skills to manage communication with cross functional senior management and executive leadership
Strong appreciation of relationship management
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.
Location - Toronto, ON
Work Model- Hybrid (2-3 days from office)
Business Skills
- Knowledge / experience working in cybersecurity and/or IT risk management spaces
- Knowledge / experience working in project Management (waterfall and agile) managing required activities, timelines, ownership. Liaison with cross functional stakeholders eg. Enterprise IT teams (DevOps, DBAs, Win Support etc.) Infosec, Business partners, and Vendors contacts (account manager, IT teams etc.)
- Knowledge / experience in requirement gathering, process documentation, stakeholder management for approvals etc.
- Advanced Ability to support technology related regulatory requests / assessments / reporting
- Advanced Ability to translate technical control issues into non-technical explanation such that the non-technical report reader can easily grasp the risk and controls
- Leadership for execution and completion of security exemption and acceptance workflow process from start to finish
Technical Skills
- Risk identification, assessment and treatment recommendations for IT & Operational risks
- Perform risk identification, risk assessment (application controls assessment, 3rd party supplier risk assessment etc.) and risk treatment recommendations for IT & Operational risks,
- Review of Client IT policies & standards and identify impact on HR and ICM applications and processes
- Review enterprise technology and risk reports and liaise with application team to develop remediation action plan
- Working knowledge of various IT risk frameworks, methodologies, leading industry/assurance standards and regulations, as well as attestation reporting frameworks, such as NIST, COBIT, SOC2 reporting framework
- Experience in developing and supporting infrastructure and technology operations in areas such as DevOps, architecture, disaster recovery, operational resilience, IT Asset Management, incident and problem management
- Good Technical knowledge and experience covering all layers of IT Infrastructure and systems, the operating systems (e.g. Unix, Windows, zOS) and database systems (e.g. Oracle, SQL Server, IBM DB2) and middleware (e.g. Tomcat, IIS)
- DevOps SME with responsible to own end to end onboarding of Github Helios onboarding and deployment pipeline
- Strong knowledge on modern enterprise tech and methodologies, (Cloud, APIs, DevOps, Helios )
- CISA, CISM, CRISC or CISSP Certification (any of the list)
Soft Skills
Good communication (verbal and written) skills to manage communication with cross functional senior management and executive leadership
Strong appreciation of relationship management
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.