Info Security Specialist

Location: Toronto, ON

Hybrid — 3 days in office, 2 days work from home

• Position Type: Contract
• Contract Duration: 1 year (with possibility of extension based on business needs and performance; conversion to permanent also possible based on business needs and performance)
• Pay Rate: C$90.00–C$106.00 / Hour (CAD)
• Shift / Schedule: Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

We are seeking an experienced Information Security Specialist to provide security consulting, governance oversight, and technical expertise across complex technology and business initiatives. In this role, you will partner with Architecture, Infrastructure & Engineering, and Risk teams to assess security risks, develop security standards, and implement effective security controls that support modern technology solutions. You will play a key role in defining security requirements, establishing governance guardrails, and enabling the secure adoption of cloud, container, AI, and enterprise network technologies.

• Provide security consulting and risk assessments for technology initiatives and projects.
• Review solution designs and provide risk-based security recommendations aligned with enterprise security standards.
• Develop and maintain security standards, technical requirements, STIGs, control mappings, and implementation guidance.
• Support governance and security reviews for cloud, hybrid, on-premises, containerized, B2B, and emerging technology environments.
• Assess and provide guidance on security controls for Kubernetes, cloud-native platforms, APIs, SaaS solutions, AI-enabled technologies, and partner connectivity solutions.
• Design and maintain governance controls supporting secure access, URL filtering, network segmentation, B2B connectivity, and Zero Trust initiatives.
• Partner with technology teams to establish security guardrails and governance controls that can be consistently applied across the enterprise.
• Contribute to governance modernization, automation, and process improvement initiatives.
• Support enterprise-wide security governance programs and strategic security initiatives.
• Build strong relationships with business, technology, engineering, and security stakeholders.
• Review network traffic flows and identify security vulnerabilities and gaps.
• Assess firewall rules, risky network ports, and access control lists (ACLs).
• Understand routers, switches, VLANs, network architecture, and network diagrams.
• Review URL filtering, website blocking, risk ratings, and security controls.
• Conduct network security consultations and identify overly permissive configurations.
• Prepare detailed process documentation and technical specifications for audit purposes.
• Perform governance reporting and reconcile network changes against approved change orders and firewall tickets.
• Investigate reporting anomalies and compliance gaps.

• 10 years of Networking experience
• Strong understanding of security governance, risk management, and security control frameworks.
• Experience conducting security assessments and evaluating technology risk.
• Strong knowledge of network security technologies, architectures, and enterprise security principles.
• Strong knowledge of enterprise network infrastructure, including routers, switches, load balancers, proxies, DNS, and related network technologies. Ability to understand network traffic flows and assess security implications across complex enterprise environments

• Strong networking fundamentals and engineering/build background
• Practical understanding of network security and traffic flows
• Knowledge of high-risk ports and why certain ports should be blocked
• Firewall security and rule assessment experience
• Router, switch, VLAN, and ACL knowledge
• Network vulnerability and security gap identification
• URL filtering and web security controls
• Strong technical writing and process documentation skills
• Experience preparing Methods of Procedure (MOPs)
• Must be comfortable working with established corporate documentation templates
• Must document security controls, approval steps, risk assessments, and implementation processes
• Documentation must be suitable for regulatory and internal audit reviews
• Strong communication skills (written and verbal)
• Strong documentation skills (writing processes)
• Strong collaboration skills, team player mindset

• Industry certifications such as CISSP, CCSP, CISM
• Knowledge of Zero Trust architectures, secure access technologies, and network segmentation principles
• Automation skills
• Automation experience using Ansible and Tufin
• Bitbucket experience
• Automating firewall request reviews, approvals, or governance reporting
• Excel, macros, and reporting/reconciliation experience
• Prior financial institution, highly regulated, or large enterprise environment experience (banking, insurance, etc.)

• Post-secondary degree or equivalent practical experience
• CISSP, CCSP, or CISM certification is a nice to have

• 10 years of overall experience in information security
• Experience in a large enterprise environment with formal change management and audit processes

• Prior experience in financial institutions, highly regulated, or large enterprise environments

• Approximately 2 hours per day on average spent in meetings
• Supports a team of approximately 12 people
• Internal-facing role; no access to customer data
• Supports the client's global network, including international teams
• 3-day in-office commitment per week (Mississauga, Scarborough, or Downtown Toronto locations)
• Anchor days are flexible
• Overtime: not likely
• Rotation: No

• This is a network security governance role, not a traditional network engineering or firewall operations position. The team acts as the governance and oversight function for the entire network, ensuring network changes and security controls comply with internal policies and audit requirements.
• Candidates whose experience is primarily infrastructure implementation without security governance expertise are not suitable for this role.
• Candidates who can perform technical work but cannot clearly document the process will not be successful in this role.
• Interview process: 2 steps — virtual and in-person, 1 hour, 1-on-1 and panel format.
• Training period: TD onboarding followed by 3–4 weeks of role-specific training.

This client is a leading financial services and banking institution operating across Canada and internationally, with a global network that includes teams across multiple regions. The organization employs tens of thousands of professionals and ranks among the largest banks in North America by assets. Teams here include network security specialists, IT governance professionals, solutions developers, engineers, and technology strategists who collaborate across large, complex enterprise environments with formal change management, audit, and regulatory compliance requirements.

GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska-based company and one of the largest Alaska Native-owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.

Job Number: 26-18514