Information Security Analyst

The Region of Durham is committed to advancing equity, diversity and inclusion within our organization and the communities we serve. We welcome and encourage applications from people who are Indigenous, racialized persons, women, persons with disabilities, members of LGBTQ2S+ communities, and others who may contribute to the further diversification of our workforce, including those who experience systemic barriers.In accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code, accommodation will be provided throughout the recruitment process upon request, based on any Code-protected ground. Number of Available positions: Vacancies: One (01). This position may last for up to 18 months. Location This position is located at the Regional Headquarters, Whitby, Ontario. Information Security Analyst Reporting to the Supervisor, Information Security, the incumbent is required to identify IT security deficiencies in processes or projects to ensure that IT system confidentiality, integrity and availability has not been compromised. The incumbent will: Install, configure and monitor information security (IS) systems hardware, operating systems and application software Perform systems maintenance, corrective maintenance, expansion and upgrades, including operating system, application software and server hardware on multiple systems Provide technical support to end-users by acting upon system alerts generated by security systems, responding to security-related incident reports to the CS-IT Service Desk Create reports identifying inappropriate information and/or software and apply IS measures to restrict inappropriate usage as per the Region's Electronic Communications Systems Policy Research and liaise with prospective suppliers regarding security products and services; conduct evaluations of hardware and software to assess effectiveness and applicability Provide IS awareness and solutions to all divisions within CS-IT, conducting business impact analysis and provide guidance regarding security threats and methods to mitigate such threats Conduct regular information security assessments to ensure the risk to systems is being managed appropriately Identify security deficiencies through the effective analysis of all Regional information technology processes and projects Develop IS solutions and business cases, identifying systems that require re-evaluation based on changing needs within information security, information technology and business users Take charge of IS projects, completing appropriate project documentation, facilitate meetings with all stakeholders and project team members Assist with the development of policies, processes and procedures relating to IS, including actively researching and bringing forth broader technology issues with security implications Administer network security for wireless network access to ensure access is granted to authorized users and public Wi-Fi is securely isolated Test and evaluate IS hardware and software, providing recommendations for equipment purchases, creating simulation exercises to test projects and measure results to expected outcomes Liaise with vendors regarding faulty products and/or products that do not meet expectations or specifications The successful candidate will possess: A 3-year diploma in Computer/Information Technology or a related discipline or equivalent combination of education and experience Progressive experience in information security, commensurate with experience identifying IT security deficiencies Technical aptitude across a variety of IT security architectures, cloud services, and operating systems Demonstrated experience in securing Microsoft Windows, Office 365, and Azure, including Active Directory Demonstrated experience with information security solutions including but not limited to Trellix ePO, Trellix Drive Encryption, Trellix Endpoint Protection, McAfee MVISION Cloud, Skyhigh Client Proxy, Cisco Firepower, Cisco Identity Services Engine, Cisco OpenDNS, and Citrix NetScaler ADC Knowledge and proficiency with Microsoft Windows, Microsoft Office and ISO27000 series standards relating to information security and risk management Superior analytical skills in conjunction with demonstrated ability to problem solve and devise creative solutions Effective written and verbal communication skills, coupled with interpersonal and organizational skills Capacity to maintain tactfulness, integrity, and confidentiality at all times Ability to multi-task in a fast-paced environment and work independently with minimal supervision A focus on consensus-building, and shared decision-making, where possible, as well as working collaboratively with diverse groups CUPE 1764 Salary Grade 7 This position is with Salary Grade 7 and will be paid at the following hourly rates:- Start: $48.53 - Six Month: $51.22 - Job: $53.92 Conditions of Employment All applicants are expected to comply with the Region of Durham's Code of Ethics and Code of Conduct Policies throughout the recruitment process. Proof of education, qualifications and any other job bona fide requirements will be required prior to start date. External Application Process Come find a home where exciting and rewarding careers are balanced with your lifestyle. We thank all applicants; however, only those being considered will be contacted. Please apply online ( ) no later than midnight (Eastern Standard Time) on the closing date indicated on the Job Posting. The Region of Durham is an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process. If contacted for an employment opportunity and you require accommodation, or if this information is required in an accessible format, please contact us at: and a Recruiter will provide appropriate assistance pursuant to the Region's Accommodation and Accessibility policies. Please note that resumes should not be sent to. Follow us on social media @RegionofDurham The Region of Durham may utilize artificial intelligence to assist in the preliminary assessment of applicant qualifications and submitted materials. These tools are used for the purpose of supporting and enhancing an evaluation by a human decision-maker and any information provided by AI to a human decision-maker is not determinative. Final decisions are made solely by authorized human decision-makers.