Head of Information Security
Remote, Toronto, ON
Tucows (NASDAQ:TCX, TSX:TC) is possibly the biggest Internet company you’ve never heard of. We started as a simple shareware site in 1993 and have grown into a stable of businesses; mobile, internet and domains.
We embrace a people-first philosophy that is rooted in respect, trust, and flexibility. We believe that whatever works for our employees is what works best for us. It’s also why the majority of our roles are remote-first, meaning you can work from anywhere you can connect to the internet!
Today, over a thousand people work in 18 countries to help us make the Internet better. If this sounds exciting to you, join the herd!
About the opportunity:
We are looking for a dynamic, hands-on Information Security leader to spearhead the compliance and info-security practices for the entire Tucows portfolio.
In this role, you will be leading a cross-functional team and will partner with various groups across our organization, including infrastructure, customer experience, development, privacy and policy. You’ll also work alongside product owners to build, optimize, and maintain a highly available secure infrastructure.
An acute focus of this role will center on DNS, email abuse, network and application security that will support all Tucows services and business units. This is inclusive of vendor management, automation, and monitoring infrastructure security.
Any security and compliance subject matter experts that thrive in the happy intersection of “DevSecOps” and have experience with penetration testing, a thorough understanding of modern tools and solutions, and are strong peer collaborators are encouraged to apply.
Like many Tucows positions, this role is 100% remote-friendly. However, we’d like to meet in person at least twice a year and any hires have the ability to work from any of our established offices, and/or work from home.
At Tucows, our employee base is spread over four time zones (PST, EST, GMT, and CET), although we operate around EST as much as reasonably possible. Strong personal life balance is not a catchphrase here—vacations and flexible time are the norm. Your peers have operated large Internet Exchanges, worn hostmaster@ duties (when that was still a thing), RV’d across the States, built giant DnD dice, and contributed to FOSS projects.
If this role feels like a fit and gets you excited, we’d love to hear from you!
Core Proficiencies and Experience:
- Engaging, collaborative and results-oriented leader with extensive experience in network, application, DNS and cloud security.
- Expert in Info Security and Compliance with the ability to identify the smallest of details while also looking at issues from a macro, strategic perspective.
- Strong communicator and team player who will bridge the Information Security department with other areas of the organization.
- Thorough understanding of different network and security architectures and protocols, their strengths, weaknesses and proper use.
- Proven experience with breach mitigation and active breach management, including articulating the issue in a timely organized manner and implementing the necessary actions across the company.
- Strong relationship skills, both internally with stakeholders and externally with vendor management.
- Proficiency in monitoring tools such as Zabbix, Nagios, etc.
- Experience with info security, major cloud solutions, DNS, and infrastructure as a code.
- Experience with API security, WAF, AAA, and RBLs, and an understanding of cloud security platforms is an asset.
- Security Certification (CISSP, CSSLP, CCSP, CAP, ISO270001, CEH, CASE, CISM) is an asset.
Want to know more about what we stand for? At Tucows we care about protecting the open Internet, narrowing the digital divide, and supporting fairness and equality.
We also know that diversity drives innovation. We are committed to inclusion across race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability status. We celebrate multiple approaches and diverse points of view.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.
Learn more about Tucows, our culture and employee benefits on our site here.
Other jobs like this
Explore more Cyber Security career opportunities
Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cybersecurity in general, filtered by job title or popular skill, toolset and products used.
- Open Cyber Security Engineer jobs
- Open Staff Application Security Engineer jobs
- Open Penetration Tester jobs
- Open Senior DevSecOps Engineer jobs
- Open Application Security Engineer/Architect jobs
- Open Senior Security Operations Engineer jobs
- Open Cyber Threat Intelligence Analyst jobs
- Open Head of Information Security jobs
- Open Senior Information Security Engineer jobs
- Open Lead Security Engineer jobs
- Open Staff Security Engineer jobs
- Open SOC Analyst jobs
- Open Cyber Security Analyst jobs
- Open Information System Security Officer (ISSO) jobs
- Open Cybersecurity Engineer jobs
- Open Senior Penetration Tester jobs
- Open Sr. Security Engineer jobs
- Open Senior Threat Intelligence Analyst jobs
- Open Cloud Security Automation Specialist jobs
- Open Offensive Security Engineer jobs
- Open Information Security Officer jobs
- Open Azure Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cloud Security Operations Lead jobs
- Open Cybersecurity Analyst jobs
- Open DevOps-related jobs
- Open Application security-related jobs
- Open Analytics-related jobs
- Open Audits-related jobs
- Open PCI-related jobs
- Open OWASP-related jobs
- Open Threat intelligence-related jobs
- Open Clearance-related jobs
- Open Security assessments-related jobs
- Open IDS-related jobs
- Open Forensics-related jobs
- Open JavaScript-related jobs
- Open Splunk-related jobs
- Open Ruby-related jobs
- Open Encryption-related jobs
- Open CEH-related jobs
- Open CISM-related jobs
- Open GDPR-related jobs
- Open Agile-related jobs
- Open Threat detection-related jobs
- Open Open Source-related jobs
- Open OSCP-related jobs
- Open Intrusion detection-related jobs
- Open DevSecOps-related jobs
- Open Machine Learning-related jobs