{"id":1672310,"url":"https://alion.io/job/perseus-group-cit-information-security-grc-lead","title":"CIT Information Security & GRC, Lead","company":{"id":58344,"name":"Perseus Group","domain":"perseusgroup.com","url":"https://alion.io/company/perseus-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Markham, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":103500,"max":126500,"currency":"CAD","period":"year","gross":null,"usd_annual":89504},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PCI DSS","optional":false},{"name":"Microsoft Defender for Cloud","optional":true}],"status":"live","first_seen_at":"2026-08-11T00:00:00Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-28T15:40:46Z","board_verified":true,"closed_at":null,"days_open":79,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":79},"description":"CIT Information Security Lead\nAbout the Role\nConstellation Software’s rapidly expanding Perseus Operating Group (CSI) is seeking an experienced Information Security Lead to drive the design, development, and secure deployment of complex information systems. This role requires translating security frameworks into practical, scalable governance across a diverse portfolio of global businesses, operating environments, and cultures.\nThe ideal candidate brings a strong foundation in risk management, with the ability to assess and balance threats, vulnerabilities, and information value to enable informed security decisions. This role also demands proven leadership in designing, evaluating, and continuously improving security processes, while guiding cross-functional teams in strengthening organizational security posture and operational maturity.\nKey Responsibilities\nSecurity Operations & Incident Response\n\nMonitor and investigate security alerts across endpoint, identity, email, and data protection platforms\n\nRespond to escalations and coordinate incident containment and remediation\n\nPerform root cause analysis and document findings\n\nTrack incidents through full lifecycle (detection, response, closure)\n\nCoordinate cross-team response efforts during active incidents\n\nProvide mentorship and technical leadership to SOC analysts, driving skill development and process consistency.\n\nSecurity Tooling & Platform Operations\nSupport operations of enterprise tools including EDR/XDR, DLP, email security, and identity monitoring\n\nLead escalation handling for endpoint protection platforms (e.g., CrowdStrike-like tools)\n\nCoordinate sensor/agent deployments, upgrades, and onboarding during acquisitions\n\nMaintain operational dashboards and reporting visibility\n\nEnsure consistent alert handling and response workflows across platforms\n\nSupport dashboard displays and reporting visibility (e.g., office display dashboards)\n\nMonitoring & Investigations\nInvestigate endpoint detections and behavioral alerts\n\nMonitor identity risks including risky users and insider risk signals\n\nPerform DLP monitoring, reporting, and coordination activities\n\nConduct email investigations including trace analysis and troubleshooting\n\nManage and resolve security-related tickets (e.g., email protection platforms utilizing Proofpoint-like tools)\n\nSecurity Awareness & Phishing\nConduct phishing investigations and response coordination\n\nSupport phishing simulation campaigns and reporting\n\nManage user synchronization and participation in awareness platforms\n\nIdentify trends from phishing results and recommend improvements\n\nGovernance, Risk & Compliance\nImplement and maintain security policies aligned with industry frameworks (NIST, ISO, PCI, SOC)\n\nConduct risk assessments and document findings\n\nTrack remediation activities and risk mitigation progress\n\nSupport audits and compliance reporting\n\nAssist with control validation and evidence collection\n\nCollaboration & Support\nWork with IT, Infrastructure, and business teams on security initiatives\n\nProvide guidance on security incidents, tools, and processes\n\nDocument procedures, runbooks, and operational standards\n\nIdentify and drive process improvements and automation opportunities\n\nRequired Qualifications\n3-5 years of experience in information security (operations, governance, or risk)\n\nExperience operating in or supporting a Security Operations Center (SOC), including end-to-end incident lifecycle management (detection, investigation, response, and remediation)\n\nStrong hands-on experience with endpoint detection, monitoring, and alerting tools, including tuning detections and improving signal quality\n\nProven experience with core Microsoft security technologies, including:\n\nMicrosoft Defender (Endpoint, M365, Identity) for threat detection and response\n\nData Loss Prevention (DLP) across M365 workloads\n\nWorking knowledge of compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS, GDPR) and their application in enterprise environments\n\nStrong analytical and communication skills, with the ability to translate technical findings into clear business risk and actionable outcomes\n\nAbility to operate effectively in a global, distributed environment, including prioritizing work, adapting to changing business needs, and supporting occasional after-hours operations\n\nAbility to communicate ideas in both technical and user-friendly language\n\nAbility to investigate, troubleshoot and resolve complicated technical issues\n\nAbility to effectively prioritize and execute tasks in a high-pressure environment\n\nHighly self-motivated and directed, with keen attention to detail\n\nProven analytical and creative problem-solving abilities\n\nAvailable for infrequent business travel\n\nAbility to work within a diverse geographically distributed team\n\nWilling to adjust work schedule to accommodate business needs\n\nExceptional documentation and customer service skills with written, oral, and interpersonal communication skills\n\nAbility to adapt to different cultures with varying degrees of physical living standards, accommodations, and environments\n\nAble to sit at a computer workstation for extended time periods and fully utilize the PC monitor, keyboard, mouse, and required programs\n\nPreferred Qualifications\nAdvanced experience across the Microsoft Security ecosystem, including:\n\nKQL query development, analytics rule creation, and incident correlation\n\nMicrosoft Purview (data governance, Insider Risk Management, eDiscovery, compliance solutions)\n\nMicrosoft Defender for Cloud Apps and cloud security posture management\n\nExperience designing or integrating Microsoft security tools into an enterprise XDR or centralized security architecture\n\nExperience driving SOC maturity, including playbook development, automation, and continuous process improvement\n\nExperience operating in hybrid or multi-cloud environments with centralized security tooling\n\nDemonstrated experience leading security process improvements or contributing to security program maturity across distributed organizations\n\nRelevant certifications (e.g., CISSP, GIAC, Microsoft Security certifications)\n\nCompensation\nCSI offers a competitive base salary, bonus potential, a full benefits package, and a great environment.\nSalary Range (Ontario & BC Only):\nThe estimated base salary range for this role is CAD$103,500.00 - CAD$126,500.00 per year. We include salary ranges in job postings only where required by applicable pay transparency laws, based on the jurisdictions in which the role may be performed. The posted range is a good faith estimate and reflects factors that are subject to change. Final offer amounts may vary based on job-related factors, including work location, candidate experience and expertise, and other relevant considerations.We recognize the value and importance of diversity and inclusion in our communities and in the workplace. We celebrate diversity and one of our goals as an employer is to create an inclusive work environment for all employees. We are an equal opportunity employer and do not discriminate against any employee or applicant because of race, religion, sex, sexual orientation including gender identity or expression, pregnancy, national origin, age, marital status, veteran status, disability status, or any other category or characteristic protected by law.Applicants with disabilities who would like to require a reasonable accommodation related to any part of the application process may contact us at .#Perseus HO","description_format":"text","description_chars":7519,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","ERP & Business Management Software","Investment Holding Companies"],"lifecycle":[{"event":"open","at":"2026-10-02T07:16:29Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.585,"p_room":0.28,"age_days":78,"expected_fill_days":29,"reasons":["conf:4","velocity","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":89504,"is_top_pay":false},"html_url":"https://alion.io/job/perseus-group-cit-information-security-grc-lead","json_url":"https://alion.io/job/perseus-group-cit-information-security-grc-lead.json","meta":{"generated_at":"2026-10-29T02:20:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3530,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58344},"rest":"https://alion.io/mcp/rest/get_company?id=58344"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperseus-group-cit-information-security-grc-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperseus-group-cit-information-security-grc-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperseus-group-cit-information-security-grc-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/perseus-group-cit-information-security-grc-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperseus-group-cit-information-security-grc-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1672310}},{"tool":"search_jobs","arguments":{"company":"perseusgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1672310},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}