Cybersecurity Analyst

HEARN INDUSTRIAL SERVICES | INFORMATION TECHNOLOGY

Cybersecurity Analyst

Build the security and AI governance program for a growing North American logistics company, from the ground up.

Compensation: $100,000 to $110,000 CAD Location: Windsor, Ontario

Reports to: Director of IT

Why this role matters

Hearn moves parts for some of the largest automotive manufacturers in North America, and our customers trust us with their supply chain every hour of every day. Protecting that trust is the job. This is a single seat with the scope of a department: you will own the security posture of the whole organization, set the governance that guides how we adopt AI, and have a direct line to the Director to make it happen. Decisions here are made in days, not quarters. There is little red tape between you and the change, and good ideas get implemented rather than filed away.

About Hearn

Hearn Industrial Services is a third party logistics and warehousing provider serving automotive OEM customers across roughly fifteen sites in the United States and Canada. IT underpins everything we do, from the warehouse floor to the core business systems, and the function is being rebuilt and professionalized right now with modern tooling and real investment. Security has an open canvas here. The frameworks, the policies and the program are yours to establish, and the results will be visible to leadership and customers alike.

The role in brief

You are the organization's security lead and its first dedicated cybersecurity hire. You will run day to day security operations, build the governance program that keeps us compliant with customer and regulatory expectations, and lead the policy and risk work that lets Hearn adopt AI responsibly. You will work hands on and think at the program level, often in the same afternoon.

What you'll do

• Own the security program. Establish and maintain the security framework, policies, standards and procedures for the organization, aligned with NIST CSF and CIS Controls, and set the roadmap that matures our posture year over year.
• Lead AI governance. Define how Hearn evaluates, approves and monitors AI tools and use cases. Build the acceptable use policy, risk assessment process and data handling rules, and guide leaders and staff as adoption grows.
• Run security operations. Lead monitoring, triage and investigation across endpoint, identity, network and cloud using our SIEM and EDR platforms. Serve as incident commander for active incidents and own root cause analysis, reporting and lessons learned.
• Manage vulnerabilities and access. Lead vulnerability management with risk based prioritization and remediation tracking, run firewall rule and segmentation reviews, and lead identity and access reviews with least privilege enforcement.
• Deliver compliance and audit readiness. Lead customer security assessments and regulatory obligations across both Canada and the United States, coordinate audit evidence, and keep our control environment documented and defensible on both sides of the border.
• Secure the warehouse floor. Assess and monitor warehouse connected technology, from RF scanners to automated equipment, and partner with Infrastructure on hardening and segmentation.
• Build a security aware culture. Design phishing simulations and awareness programs, brief leadership on risk in plain language, and be the person people come to before they click.
• Shape the toolset. Evaluate and recommend security technologies, track emerging threats relevant to logistics and OT environments, and propose proactive defenses.

The problems you'll solve, and the calls that are yours

A typical week means balancing an active investigation against a customer security questionnaire, deciding which of fifty findings matter this month, and answering a department that wants to use a new AI tool by Friday. You will have the room to make the call and the support to stand behind it.

• Yours to decide: security policy and standards, incident severity and response actions, vulnerability prioritization, access review outcomes, AI tool risk ratings within the governance framework, and awareness program design.
• Decided with the Director: security investments and tooling, control changes that affect operations or customer facing systems, exceptions to policy, and the annual security and AI governance roadmap.
• Escalate immediately: confirmed or suspected breaches, incidents affecting customer data or shipping operations, and regulatory or contractual notification obligations.

Your team and how we work

You report directly to the Director of IT and work daily with the Head of Solutions Development & Operations, the Network and Systems Administration team, the Software Development team and the Service Desk, who are your eyes and hands at every site. Beyond IT you'll partner with Operations leadership and customer compliance contacts.

Collaboration here is practical and direct. We run a shared ITSM platform, document as we go, and expect findings to arrive with evidence and a recommended fix. You will have a seat at the table when budget and priorities are set, and leadership that treats security as a business enabler rather than a cost line.

Where this can lead

You are building a function, and the function will grow with you. Over your first one to two years you will stand up the security and AI governance programs, bring the organization through its first full control assessment, and establish the metrics leadership uses to track risk. As the program matures, this role is positioned to become the Security Manager leading a team, or to take on a broader governance, risk and compliance mandate across the organization.

What the role asks of you

• Education and certifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field, or equivalent experience. CISSP, CISM, GCIH, CySA+ or equivalent.
• Experience: 5 or more years in security operations, incident response or security governance, including time as the senior or lead analyst; proven experience managing incidents end to end; experience building or maintaining a security framework, policy set and compliance program.
• AI governance: experience developing AI acceptable use policy, risk assessment or oversight processes, or demonstrated working knowledge of frameworks such as the NIST AI Risk Management Framework or ISO 42001.
• Technical knowledge: strong hands on expertise with SIEM, EDR and vulnerability management tools; deep understanding of networking fundamentals, identity and access, and current attack techniques; solid grasp of NIST CSF, CIS Controls and ISO 27001.
• Cross border compliance: working knowledge of the privacy and breach notification requirements that apply in both countries, including PIPEDA and provincial privacy law in Canada and the applicable federal and state regimes in the United States, and the ability to maintain one control environment that satisfies both.
• Personal attributes: sound judgment and calm decision making under pressure; clear written and verbal communication for executive reporting and cross functional leadership; the self direction to run a one person function and the influence to move an organization without direct authority.
• Nice to have: OT or IoT security in warehouse, manufacturing or industrial environments; automotive supplier security requirements such as TISAX or customer assessments; Microsoft 365 and Azure security; scripting (Python, PowerShell) for automation; experience in multi site environments.

Work conditions

Primarily office based at our Windsor, Ontario location, with occasional travel to warehouse facilities in Canada and the United States, so a valid passport and the ability to cross the border are required. Participation in on call response for security incidents is part of the role.

Reviews and benefits

After your probation period you will have a formal performance and development review, with ongoing check ins after that. You will know what good looks like from day one: incident response quality, vulnerability remediation progress, audit and assessment outcomes, policy coverage and the adoption of the AI governance program. Hearn offers a comprehensive benefits package once probation is completed.

Equal Opportunity Employer

Hearn Industrial Services is an equal opportunity employer. We value a diverse workforce and welcome applications from all qualified candidates. Accommodations are available on request throughout the hiring process. Learn more at www.hearnindustrial.com.