JOB PURPOSE
Reporting to the Information Security Officer, the Information Security Analyst will possess a strong background in managing infrastructure, coupled with significant experience and expertise in cybersecurity.
This role will involve analyzing threats, implementing security controls, responding to incidents, and supporting cybersecurity initiatives and projects.
PRIMARY RESPONSIBILITIES
- Oversee and create all Information Security-related tasks within CanDeal environments and new projects.
- Conduct in-depth security assessments of infrastructure components to identify vulnerabilities, assess risks, and recommend mitigation strategies.
- Monitor security alerts and events, investigate incidents, and lead incident response efforts to contain and remediate security breaches.
- Provide level 3 support to the Security Operations teams, particularly in conducting investigations derived from threat intelligence.
- Develop and implement security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
- Manage and maintain security technologies and tools, including firewalls, intrusion detection / prevention systems (IDS / IPS), antivirus, and endpoint security solutions.
- Proficiency in conducting penetration tests, including planning, executing, and analyzing results to identify vulnerabilities and enhance security measures.
- Collaborate with cross-functional teams to integrate security requirements into the design and deployment of IT systems and applications.
- Provide guidance and support to IT teams on security-related matters, including security awareness training and adherence to security policies.
- Stay abreast of the latest cybersecurity threats, trends, and technologies through continuous learning and participation in industry events and training programs.
- Assist in the development and implementation of cybersecurity initiatives and projects to enhance the organization's security posture.
- Read, analyze, and design process and procedure, also, be able to identify enhancements opportunities, prepare supporting data and present to management for approval.
- Conducting audit meetings, summarizing the discussions, defining action items, and follow up until completion.
- Participate in on-call rotation to provide after-hours support for security incidents and emergencies.
QUALIFICATIONS
Education & Experience
- Bachelor’s degree in computer science, technology or related field is required.
- AWS Certified Security and / or AWS Solutions Architect Certification is required.
- Certification(s) in cybersecurity (e.g. CISSP, CCSP, CySA+, GSEC, OSCP, Azure Security Engineer) preferred.
- Minimum of four (4) years of experience in IT security-related projects, including working with security controls and processes, with a preference for experience in the financial services industry.
Knowledge, Skills & Abilities
- Demonstrated proficiency in technology troubleshooting and exceptional analytical abilities, capable of thinking creatively to resolve issues.
- Experience with security technologies and tools, such as firewalls, IDS / IPS, antivirus, and endpoint security solutions.
- Strong technical knowledge of networking, operating systems, and cloud environments.
- Robust experience in cloud security to enhance organization's resilience in an increasingly cloud-centric environment.
- Familiarity with security frameworks and standards, including NIST Cybersecurity Framework and ISO 27001 / 27002.
- Excellent verbal and written communication skills, with the ability to effectively clarify complex technical issues and concepts in a business-friendly manner to various audiences.
- Strong organizational skills, with the abilities to manage multiple deliverables in a demanding, time-sensitive environment, adapt to frequently changing priorities by prioritizing tasks and escalate / communicate issues or seek assistance to overcome obstacles.
- Ability to work effectively within a team, as well as independently.
Key Qualities for Success
- Have a deep interest in computing and cybersecurity.
- Self-motivated and driven.
- Highly attentive to detail and committed to quality.
- Enthusiastic, service oriented.
DECISION MAKING
- Recommends IT security tools to the ISO based on current industry knowledge and best practice and provides input to IT Security policies.
- Collaborate with teams to align security measures with organizational goals and continuously improve security posture through proactive initiatives.
Information Security Analyst
Our client is a financial services subsidiary looking to hire an Information Security Analyst . Any Security Certification – CISSP, CCSP, ISSAP, AWS Security, CCSK . You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco about the posi...
Information Security Analyst
Reporting to the Information Security Officer, the Information Security Analyst will possess a strong background in managing infrastructure, coupled with significant experience and expertise in cybersecurity. Provide guidance and support to IT teams on security-related matters, including security aw...
Information Security Analyst
Infotek Consulting is searching for a seasoned Information Security Analyst to work on a hybrid contract assignment based in Toronto. Information security analyst – 10+ years2. Assess business needs against potential risks and provide your recommendations to enhance our information security landscap...
Senior Banking Information Security Analyst to identify and mitigate the next generation of cross-pillar security challenges and financial crimes 76608-1
You are passionate about information security and risk advisory services and want to join our growing information security group. As a Senior Information Security Advisor you will be responsible for consulting on potential risks as well as current trends to help our technology and business stakehold...
Information Security Analyst
Information Technology Services (20000014) - Information Security Office (30000033). Provides technical expertise, support and services on all Cybersecurity awareness initiatives, this role works closely with various IT/OT and business subject matter experts to ensure appropriate security awareness ...
Information Security Analyst - Cyber Investigations
The Information Security Analyst - Cyber Investigations role will contribute to Wawanesa's success by helping to deliver investigation services to our enterprise client groups. Minimum of 3 years IT experience with a minimum 2 years (preferably 5 years) of information security experience. Completion...
Application Security Analyst, Information Security
Application Security Analyst, Information Security!. We're seeking an Application Security Analyst well-versed in risk analysis, vulnerability assessment methodologies, and information security concepts. Your role involves supporting security risk assessments for both internally developed and third-...
Information Security Analyst
Our client is a financial services subsidiary looking to hire an Information Security Analyst . Any Security Certification – CISSP, CCSP, ISSAP, AWS Security, CCSK . ...
information technology (IT) security analyst
Design, develop and implement information systems business solutions. Provide advice on information systems strategy, policy, management and service delivery. Assess physical and technical security risks to data, software and hardware. Develop policies, procedures and contingency plans to minimize t...
Business Information Security Analyst
Responsibilities include; ensuring compliance with standards and procedures, serving as the information security subject matter expert for designated business units or functions, participating in the development, implementation and ongoing maintenance of the information security program, and ensurin...