Information Security Analyst

The Opportunity

The primary purpose of the Information Security Analyst role is to help reduce the risk of a major cyber incident at Banff Centre while significantly shortening the detection and containment time of any cyber incidents that occur.

To support this overall goal, the incumbent will work closely with the Manager to recommend policy and standard components, conduct research on best practices, develop staff awareness of cyber security through the cyber security program, manage and monitor technical threat detection, analysis, and control systems, and act quickly to contain breaches when they occur.

A critical success factor for this role will be responding to security incidents by conducting thorough investigations and implementing incident response plans, in coordination with the Manager and cross-functional teams.

This is a technical hands-on role, supporting day-to-day security operations in collaboration with the IT / S team and third-party vendors.

Roles and Responsibilities

Reporting to Manager, Information Security, below are some key accountabilities :

• Monitor applications, devices, and network infrastructure for significant threats and work with service owners to patch and mitigate risks.
• Conduct forensic examination of equipment suspected of breach or infection, working closely with the ITS team in responding to security incidents, including investigation, containment, and remediation.
• Work independently and with other teams to manage and support remediation projects to resolve identified risks. This includes reviewing, investigating and escalating security incidents such as phishing, malware, infections, etc.
• Actively participate in cross-functional teams to provide security guidance and advice for all information technology projects, acquisitions and services, including an assessment of the software security controls to be implemented for system architecture and applications. This may take the form of engaging with various stakeholders and application owners and work through the tasks required to ensure that access to an application in the scope is only limited to relevant users.
• Prepare and provide written and verbal recommendations for assessing information technology risks and compliance across a wide array of technologies, advising the Manager, Information Security of mitigations and solutions recommended.
• Stay current on the latest cyber threats, malware and attack methods to anticipate and defend against them.
• Be a champion for cybersecurity awareness by contributing to the following security goals for Banff Centre : Help to design and deliver cybersecurity awareness training that is designed to help protect employees and stakeholders from identity theft, fraud and reputational harm;Contribute to overall security goals designed to protect Banff Centre’s operational infrastructure including computers, servers, network, building management systems,
• Help to design and deliver cybersecurity awareness training.
• Recommend to the Manager, Information Security, additional security solutions or enhancements to improve overall enterprise security, to reduce identified risks based on their impact and likelihood of occurrence,
• Contribute to and maintain security documentation and the supporting knowledge base.
• Conduct risk and vulnerability assessments and analysis using industry frameworks (ISO 27001, NIST CSFT) and CIS controls for new projects, applications, and 3rd party vendors.
• Assist in internal and external security audits and risk assessments, ensuring evidence collection and control verification.

Qualifications and Educational Requirements

Employment Terms and Benefits