Overview At OSL Retail Services, we believe people are the heart of everything we do, and it is an exciting time to be part of something special! Our momentum is growing, and is fueled by innovation, collaboration, and a shared entrepreneurial spirit that drives real results. Founded in 2012 in Mississauga, Ontario, OSL delivers customized sales solutions in retail, direct sales, and customer acquisition, all built on a foundation of integrity, respect, and passion. Our culture thrives on connection, purpose, and growth. If you’re looking for a place where your talents are valued, your ideas matter, and your career can grow, we’d love to meet you. The Position: Reporting to the Manager of Loss Prevention, the Loss Prevention Lead will be responsible for monitoring, investigating, and auditing across multiple states and stores. In addition, you’ll be accountable for the development and implementation of a loss prevention plan that includes asset protection and safety. You will be charged with decreasing losses through examining, reporting on and adjusting, when necessary, customer transactions, scheduling, payroll, merchandising, cash management and all other operational practices. Travel: you can expect about 10% travel per month, heading out to stores, in the states listed below, to carry out either face-to-face meetings or conduct site visits. USA Location: fully remote, working in any of these US States, Virginia, North Carolina, South Carolina, Georgia, Tennessee, Kentucky, Florida, Mississippi, Louisiana, Arkansas. A little more about the role and responsibilities: - Track compliance to loss prevention objectives – liaise with the Sales Team to gain compliance and improve behaviors - Work with the client’s LP team to address opportunities - Conduct internal Loss Prevention investigations and interrogations - Maintain the OSL Loss Prevention Register and track metrics - Act as the primary contact for the Field / Head Office in relation to any Loss Prevention concerns. - Liaise with Carrier Loss Prevention personnel to capture best practices, refine operational processes and establish continuous communication - Review Carrier fraud reports, initiate actions (tracking, commission suspension, investigation as appropriate). - Present applicable complaints and evidence to police in conjunction with the Client’s Loss Prevention team. - Liaise with Directors, District Manager’s and the Human Resources Department as appropriate regarding Loss Prevention issues. - Work collaboratively with Training Lead to ensure focus in all training is current, accurate and appropriate What You Bring to The Table: - 3+ years of experience in retail or wireless operations - Wicklander certification considered an asset - Liaising with clients and field leadership teams - Effective time management skills and the ability to prioritize competing deadlines - Knowledge of the Criminal Code and Employment Standards as related to Retail Loss Prevention - Analytical with the ability to review multiple points of data and other sources of information - Must possess the ability to deal with sensitive issues with tact, diplomacy, and the highest level of integrity - A strong communicator, able to connect with various types of employees, clients and consumers - MS Office proficiency in all applications – Excel, Access, Word, Power Point The starting salary for this role typically begins at $60,000-$65,000, your final offer will reflect your relevant skills, individual strengths and experience. Beyond the numbers, we’re proud to offer a holistic package that includes bonus opportunities, room to grow, chances to be recognized, top-tier benefits, and perks that make coming to work something you can look forward to. We’re committed to supporting your success every step of the way. Total Rewards: - Generous time off: Start with 3 weeks of vacation, plus extra flex days to recharge. - Comprehensive benefits package: Includes medical, dental, vision, health spending account, and Teladoc virtual care. - Retirement support: Company-sponsored 401K plan to help build your financial future. - Fully Remote: Work where your most productive no commute required. - Top-tier tools: Best-in-class systems and equipment so you can do your best work. Recruitment Process Next Steps: - Step 1: If your profile is a match, we will invite you for a first conversation with the recruiter. - Step 2: The next step is a virtual interview with the hiring manager. - Step 3: The final step is a virtual interview with the hiring Director and extended team members. Ready to bring your talent to a team where your impact matters? Apply today - we can’t wait to meet you! We thank all interested applicants; however, only qualified candidates will be contacted. This position requires successful completion of a criminal background check. OSL is committed to an inclusive workplace that does not discriminate against race, nationality, religion, age, marital status, physical or mental disability, sexual orientation, gender, or gender identity. We believe in diversity and encourage any qualified individual to apply. Disclaimer: As part of our recruitment process, we utilize artificial intelligence (AI)-based tools to assist with certain stages, including initial resume screening and skills-matching assessments. These tools are designed to help our hiring team identify candidates whose experience and qualifications align closely with the requirements of the role. Please note that all final hiring decisions are made by our recruitment team. The preceding job description has been designed to indicate the general nature and level of work performed by employees within this job. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. In compliance with Ontario’s Bill 190, we confirm that this posting represents a current existing vacancy within our organization.

Essential Duties and Responsibilities: - Collaborate in the implementation and maintenance of identity and access management (IAM) controls across Azure Entra, Okta, AWS, and other enterprise systems. - Partner with infrastructure teams to maintain cloud security configurations and ensure alignment with organizational policies and industry best practices, keeping pace with artificial intelligence developments in threat escalation and threat response, as well as secure business use implementation. - Contribute to the development, maintenance, and enforcement of security standards, procedures, and documentation. - Support vulnerability management processes, including scanning, tracking, and remediation. - Collaborate with Infrastructure and DevOps teams to ensure secure system design and configuration. - Support technical operations teams in facilitating system patching and backup management. - Assist with security alert monitoring, investigate potential threats, and perform incident response activities. - Participate in Third Party Risk Management through vendor security assessments and supply chain risk management. - Maintain compliance requirements for HIPAA and SOX regulations. Participate in audits, compliance reviews, and risk assessments. Minimum Qualifications: - Minimum 5 – 7 years of hands-on experience in cyber security roles with increasing levels of responsibility. - Foundational knowledge of cybersecurity principles, cloud security, and IAM concepts. - Hands-on experience managing IAM and security controls in AWS and Azure Entra. - Familiarity with SIEM tools with an emphasis on Microsoft Sentinel, endpoint protection platforms, and basic network security concepts. - Strong analytical and problem-solving skills with special care for detail. - Ability to work collaboratively in a team environment. - Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience considered. - At least one of the following entry-level or foundational cybersecurity certifications or equivalent experience: - CompTIA Security+ - Certified Cloud Security Professional (CCSP) – Associate-level exposure acceptable - GIAC Security Essentials (GSEC) - Certified Information Systems Security Professional (CISSP) Preferred Knowledge, Skills, and Abilities: - Experience with Okta identity and access management automation platform. - Familiarity with automation or scripting tools (Python, PowerShell, etc.). - Understanding of zero trust principles and modern authentication frameworks. - Knowledge of Dev/Sec/Ops practices or cloud-native security tooling. - Understanding principles of networking and firewall management. - Preferred Certifications - Okta Certified Professional - AWS Certified Cloud Practitioner or AWS Security Specialty (Associate-level exposure acceptable) - Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC900) - Understanding strategies and tools used by threat actors. Red team experience. You will be expected to work during normal business hours, which are Monday through Friday, 8:00 a.m. – 5:00 p.m. This position requires candidates to reside in Lafayette, LA or within a three-hour driving radius. Occasional travel to Lafayette will be required for candidates who are remote. Travel expectations are less than 10%. Please note that this job description is not designed to cover and/or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties and responsibilities may change at any time with or without notice.

The Cybersecurity Analyst is a position that requires a highly motivated team player with excellent interpersonal skills; it is an exempt position. The Cybersecurity Analyst is responsible for the implementation, integration, administration, automation, documentation, and reporting of security related services and tools. The position is fast-paced and requires the ability to quickly move between a diverse set of clients and issues, this role is vital in securing hundreds of organizations. Passion for security and technology will offer great opportunity to play a foundational role within the team; initiative, out-of-the-box thinking, and great communication skills are important for this position. RESPONSIBILITIES - Management of: - Information security incident response - Security awareness training - Dark Web monitoring - Network and endpoint detection and response systems - Security information and event management (SIEM) / external SOC-as-a-Service platforms - Cloud security solutions - Firewalls - Identity and access management - Vulnerability management - Maintain consistency and standardization of our management of client environments - Tune alerts and suggest or implement automations to improve our team’s efficiency - Adhere to and evangelize information security policies, procedures, and guidelines - Develop, enhance, and update operational documentation such as standard operating procedures, knowledgebase articles, and hardening procedures - Contribute to improving the quality of service provided to our clients by actively providing input to improve processes EDUCATION & EXPERTISE - Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Business, or another related field - 3 - 5 years of experience in information technology - One or more years of professional experience in cybersecurity areas such as threat hunting, incident response, forensics, security analysis, or security engineering - Demonstrated strong technical acumen through technical certification(s) related to security analysis (CySA+, CSA, GCIA), cloud security (CCSP, GCSA, CCSK, Azure, AWS), enterprise cybersecurity (CISSP), or another related field is preferred. - Excellent written and oral communication skills - Diverse technical competences and the ability to quickly learn new technologies and skills - Basic understanding of security and compliance frameworks standards such as HIPAA, NIST CSF and 800 series, CIS CSC, etc. - MSP Experience preferred THE COMPANY Anatomy IT is a managed IT services and cybersecurity provider purpose-built for healthcare organizations. We support regulated healthcare environments across multiple care settings, helping clients reduce risk, maintain compliance, modernize infrastructure, and deliver reliable, secure technology that supports patient care and clinical operations. Our clients choose partners they trust. WHY ANATOMY IT? Anatomy IT embraces those that demonstrate a deep passion for solving the problems of healthcare with enthusiasm for building positive working relationships and winning as a team. We deliver exceptional results by caring deeply for people and community, speaking up with honesty, fueling our mission with passion and grit, and taking full ownership with integrity and accountability. BENEFITS We love collaborating and working together as a team. Our benefits include healthcare (medical, dental & vision), 401K fund contribution, paid-time-off, short & long-term disability, and a family atmosphere of caring and concern for each team member. EQUAL OPPORTUNITY EMPLOYER We are proud to be an equal opportunity employer – and celebrate our employees' differences regardless of race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or Veteran status. Different makes us better. **The above statements are intended to describe the general nature and level of work being performed by individuals assigned to this position. They are not intended to be a comprehensive list of all the responsibilities and skills required of team members.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description This role offers an exciting opportunity to strengthen and manage an organization’s Technology Governance, Risk, and Compliance (GRC) program. The Cybersecurity GRC Specialist will play a critical role in identifying, assessing, and mitigating technology and cybersecurity risks while ensuring adherence to regulatory requirements, industry standards, and internal policies. You will work closely with IT, legal, procurement, and business teams to integrate security best practices across systems, applications, and third-party engagements. This position combines hands-on risk management, policy development, and compliance oversight with a focus on proactive security and incident prevention. Ideal candidates are skilled in IT risk frameworks, cybersecurity practices, and vendor risk management, with the ability to communicate technical concepts to non-technical stakeholders. You will also contribute to continuous improvement initiatives, helping to enhance the overall security posture of the organization. - Develop, implement, and maintain the IT risk management and cybersecurity governance framework. - Conduct risk assessments to identify potential threats, vulnerabilities, and business impacts across systems, networks, and data environments. - Establish, maintain, and enforce IT security policies, standards, and procedures in alignment with regulations and industry best practices. - Provide guidance on secure system and application design, partnering with IT teams to ensure proper security controls are implemented. - Support third-party risk management, evaluating vendor security practices and ensuring compliance with organizational standards. - Assist in incident response planning, investigations, and remediation, contributing to organizational resilience. - Communicate technology and security risks effectively to leadership and stakeholders, translating technical information into actionable business insights. - Participate in audits, questionnaire responses, and contract security reviews to ensure regulatory compliance and risk mitigation. Qualifications - 5+ years of experience in IT Governance, Risk, Compliance (GRC), cybersecurity, or information security. - Bachelor’s degree in Computer Science, Information Security, or a related field preferred. - Security certifications such as CISSP, CISA, CRISC, or equivalent strongly preferred. - Experience with third-party risk management programs and ISO 27001:2022 framework. - Demonstrated ability to lead projects, initiatives, or mentor team members. - Strong understanding of regulatory requirements, risk frameworks, and industry best practices. - Excellent verbal and written communication skills, with the ability to engage both technical and non-technical audiences. - Analytical, detail-oriented, and proactive with a strong sense of ownership. - Occasional travel may be required (10% or less). Benefits - Competitive annual salary range: $105,000–$115,000. - Fully remote work within the United States. - Comprehensive health coverage including medical, dental, vision, and life insurance. - Retirement plan options including 401(k) with company contributions. - Paid time off and holidays. - Professional development and growth opportunities. - Engaging and collaborative work environment focused on security and risk management.