Cybersecurity Specialist

Job description

Cybersecurity Specialist Clearbridge Business Solutions | Abbotsford, BC | In Office | Full-time Own cybersecurity end to end, for our customers and our own team. ABOUT CLEARBRIDGE Clearbridge Business Solutions is a people-centric managed and professional services firm with offices in Abbotsford, BC and Kent, WA. We deliver IT, cybersecurity, AI & automation, marketing, and development services to customers across Canada and the United States. Our goal is simple: help our customers do their best work. That means keeping them secure, keeping them compliant, and making sure they can trust us to have their back. THE OPPORTUNITY This is a senior level role. You will be the person responsible for cybersecurity across the board: the services we deliver to customers, the compliance programs we run on their behalf, and the security posture of Clearbridge itself. We serve a wide range of customers, including HIPAA-regulated businesses in the United States. That means compliance is not a checkbox exercise. It is a core part of what we deliver, and you will lead it. Like every role at Clearbridge, this one is fundamentally customer-facing. You need to be as comfortable in a boardroom conversation about risk as you are running a technical assessment. If you can only do one or the other, this is not the right fit. WHAT YOU WILL DO Customer cybersecurity Own and deliver our tiered security offering (Security Basics, Core, Advanced) across the customer base. Lead security assessments and risk reviews. Identify gaps, explain them clearly, and turn findings into actionable recommendations customers can act on. Run dark-web monitoring and threat-detection services. Triage alerts and communicate what matters in plain language. Support customers through compliance programs: HIPAA, SOC 2, NIST, and others relevant to their industry. Be the customer's trusted advisor on security. Build relationships where customers call you when something feels off. Compliance Lead compliance engagements from scoping through to delivery. Own the process, the documentation, and the customer relationship throughout. Translate regulatory requirements into clear, practical guidance for non-technical stakeholders. Maintain working knowledge of the regulatory landscape our customers operate in and flag changes that affect them. Build repeatable compliance frameworks so the work scales without reinventing the wheel each time. Internal security Own Clearbridge's internal security posture. Policies, controls, tooling, and ongoing monitoring. Ensure our own house reflects the standards we hold our customers to. Partner with leadership on risk decisions and keep the team informed of anything that matters. Internal contribution Work closely with our IT and AI teams to embed security into how we build and deliver services. Stay current. Track the threat landscape, emerging tooling, and regulatory changes, and bring the best of it back to the team. WHAT WE'RE LOOKING FOR We are not looking for someone who lives behind a screen and never talks to anyone. Security expertise is the baseline. What sets the right candidate apart is the ability to communicate risk clearly, earn trust quickly, and make cybersecurity compliance feel manageable rather than overwhelming. This role is for you if: You know cybersecurity deeply. You understand the threat landscape, common attack vectors, and what good controls look like across different environments and risk profiles. You know compliance. HIPAA, SOC 2, NIST, or similar frameworks are not new territory. You have led or supported real compliance engagements and know where the complexity hides. You communicate clearly. You can walk a business owner through a risk assessment without losing them, and you can write a policy that people will actually read and follow. You are customer-obsessed. You measure success by how secure and confident your customers feel, not just by what the reports say. You use AI tools in your work. Every Clearbridge team member is expected to leverage AI to work smarter. You do not need to be an AI specialist, but you need to be an active, capable user. You are self-directed. You can own a program from start to finish without someone managing every step. Nice to have: Relevant certifications: CISSP, CISM, CompTIA Security+, or similar. Hands-on experience with HIPAA compliance in a US healthcare or adjacent environment. Experience in an MSP or professional services firm. Familiarity with dark-web monitoring tools and threat intelligence platforms. OUR VALUES Customer Obsessed. Easy To Work With. Think Beyond Boundaries. Seek Mastery. Move Tactically. If these resonate, we should talk. *Please note this is an in office role. Kindly do not apply if you are not able to be in our office 5 days a week.