Senior API Security Specialist

Position Description:

This hybrid role requires attendance at our downtown Toronto office (250 Yonge Street) and/or Client office at least 2 days per week, subject to change.

Your future duties and responsibilities:

The Senior API Security Specialist will establish an API Security POD to achieve the following objectives:

Strategic Vision and Roadmap: Provide a strategic vision and roadmap for API Security Policy Management and Governance.
API Security Maturity Model: Evolve and own the API Security Maturity model to meet internal and external regulatory requirements.
Process and Tooling Enhancements: Drive API security processes and tooling enhancements to support API Security alerting, vulnerability, and risk resolution.
Standards and Procedures: Manage the evolution of API Security Standards and related Procedures.
KPIs and KRIs: Develop and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
API Delivery and Lifecycle: Improve API Delivery and Lifecycle management.
Audit Support: Support the bank with internal, external, and regulatory audits in collaboration with Organization Risk Management (ORM), Enterprise Architecture, DevX, Security Architecture, and Solutions stakeholders.
Roles and Responsibilities
Provide expert consulting services in API Security and APIs.
Diagnose and manage API security vulnerabilities and incidents.
Utilize OWASP Top 10 expertise to enhance API security.
Analyze data using SQL, extract data, and generate reports.
Design, develop, and implement business processes to support API Security incidents and alerting.
Collaborate with various stakeholders to ensure comprehensive security measures.

Required qualifications to be successful in this role:

Expertise in API Security: In-depth knowledge of API security vulnerabilities, incidents diagnostics, and management.
OWASP Top 10: Strong understanding and application of OWASP Top 10 principles.
Data Analytics: Proficiency in analyzing data using SQL, data extraction, and report generation.
Business Process Design: Experience in designing, developing, and implementing business processes.
API Development: Experience in API development is a plus.
This role is crucial for maintaining and enhancing the security of our API infrastructure, ensuring compliance with regulatory requirements, and supporting the overall security posture.

Skills:

• Data Analysis
• Financial Services
• RESTful (Rest-APIs)
• SQL

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we recognize the richness that diversity brings. We strive to create a work culture where all belong and collaborate with clients in building more inclusive communities. As an equal-opportunity employer, we want to empower all our members to succeed and grow. If you require an accommodation at any point during the recruitment process, please let us know. We will be happy to assist.

Come join our team—one of the largest IT and business consulting services firms in the world.