Data Security Specialist, Information Technology Services

Data Security Specialist

Richter Montreal Office

Overview

Richter is a Business | Family Office that provides strategic advice on business matters and on families’ financial and personal objectives across generations. With close to 100 years of experience advising at the intersection of family and business, Richter has developed an integrated approach to help business owners find sustainable success. Whether business, personal, or both, Richter is uniquely positioned to address the needs of Canada’s most successful entrepreneurs, private clients, business owners and business families and help them chart a clear path to shape their legacy for the future. Founded in 1926, Richter’s 600-person multidisciplinary team continuously innovates to create value for our people, clients, and community in Canada and in the US.

What we offer:

• The chance to become a strategic business partner with our clients, building relationships directly with entrepreneurs and businesses to provide them with meaningful advisory services
• The opportunity to develop your career with the direct support of your managers and firm partners; and
• A culture that values work-life balance and mental health and well-being. Our firm has taken a fresh approach to these issues, offering a hybrid work environment with flexible hours and resources to support you in your personal journey.
• Investment in your continuing education and professional development through a variety of learning offerings and tuition reimbursement.

Position Overview

The Data Security Specialist is responsible for implementing, managing, and maintaining security controls and measures to safeguard sensitive data. The role involves identifying vulnerabilities, monitoring for breaches, and developing processes to ensure the confidentiality, integrity, and availability of data. The Data Security Specialist ensures that Richter maintains compliance with privacy regulations and meets all data security legal obligations. They collaborate with cross-functional teams to develop and implement security strategies that align with regulatory standards and industry best practices, including CIS Controls, NIST, and CISA frameworks.

A day in the life 

• Design and implement security measures to protect sensitive data across systems, applications, and networks.
• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Develop and maintain data classification and encryption standards.
• Ensure compliance with relevant security standards and regulations (e.g., Law 25, GDPR, HIPAA, PCI-DSS).
• Manage data loss prevention (DLP) systems, encryption solutions, and security monitoring tools.
• Develop security policies and procedures, providing guidance on secure data handling practices.
• Perform regular audits and reviews of data access, security controls, and compliance metrics.
• Work with vendors and third-party services to assess and enhance data security.
• Interact and negotiate with management, vendors, outsourcers, and contractors to obtain protection services and products.
• Demonstrate a strong understanding of security frameworks (for example CIS Controls, NIST, and CISA frameworks)
• Participate in the IT Security on call routine (once every three weeks

About you 

• Minimum of 5 years of experience in data security, cybersecurity, or a related field.  

• Strong communication and documentation skills in both English and French  

• Proven technical learning: CISSP, CISM, CISA, GIAC or other.  

• Certification or experience with Microsoft Purview required  

• Strong understanding of encryption, Data Loss Prevention, Identity and Access Management systems 

• Strong team collaboration and interpersonal skills required 

• Knowledge of applicable practices and laws relating to data privacy and protection for Canada (Ontario, Quebec), and how they are applied using modern security frameworks (CIS, GDPR, etc) 

• Keep current on emerging products, services, protocols, and standards in support of security enhancements 

• Intuition and keen instincts to pre-empt attacks. 

• High level of analytical and problem-solving abilities. 

• Ability to effectively prioritize and execute tasks in a high-pressure environment. 

• Provide on-call security support once every three weeks.

What Richter offers you?

• Competitive group benefits which include group insurance, Health Spending Account, savings plans, and Employer Contribution Matching
• Employee and Family access to virtual healthcare network
• Employee and Family Assistance Programs, including consultations with mental health professionals
• Annual Health & Well-being Program
• Hybrid work Environment
• Competitive Performance Bonus
• Tuition Reimbursement
• Professional Dues Reimbursement
• CFE leave financial support
• Academic Incentives
• Talent referral bonus
• Client referral bonus
• Access to an on-demand concierge nannying, babysitting, and tutoring service
• Annual employee rewards and recognition

Your application

We are excited to meet motivated professionals who are looking for career growth in a mid-sized family minded firm and have a strong background in building and fostering relationships.

Sounds like you? Apply today!