Description
Information Security Analyst
About Toyota Financial Services
Toyota Financial Services (TFS) provides retail, leasing and wholesale financial services to Toyota and Lexus dealerships and customers across Canada.
TFS is a member of Toyota Financial Services Corporation (TFSC), a wholly owned subsidiary of Toyota Motor Corporation in Japan.
The Canadian headquarters of TFS are in Markham, Ontario.
What Sets Us Apart?
At Toyota Financial Services (TFS), you will help create best in class customer experiences in an innovative, collaborative and team focused environment.
TFS is an important part of the Toyota family, an award-winning global company, recognized worldwide for our technological leadership and superior standards of quality, continuous improvement, and environmental responsibility.
Position Summary :
TFS currently has an exciting permanent opportunity as a Information Security Analyst, reporting to the Manager, Information Security.
The successful candidate will also be responsible for the planning and execution of TFS’ regular Business Continuity and Disaster Recovery initiatives.
This role will also work closely with senior management to support and ensure compliance to prescribed risk mitigating policies and procedures in certain area of Operational and IT Risk.
We have implemented a hybrid work environment and this role resides in our Markham Office. Number of days working in office is subject to role requirements.
More details will be discussed during the interview process.
What you will be doing :
Conduct and monitor regular security access and vulnerability diagnostics and remediate any risks / issues (including email Phishing responses to Associates)
Maintain and conduct periodic reviews of the Risk Register and I.T. Asset List
Perform risk assessments of information systems and infrastructure; develop appropriate risk treatment and mitigation options, and effectively articulate findings / recommendations to IT project teams and management.
Analyze system architectures to design appropriate security requirements which enforce Information Security policies and standards.
Identify and communicate current and emerging security threats to Senior Management
Collaborate with business units, application teams, and service partners to provide guidance on security controls for managing risk for TFS.
Manage TFS’ regular BCP and DR initiatives
Coordinate ongoing Business Continuity Plan ( BCP ) activities
Develop and execute annual Information Security and BCP Associate Awareness training
Review policies and procedures relating to Business Continuity and Information Security annually
Manage and maintain the shared drive / portals, in accordance to policies and procedures
Provide support with IT projects and act as liaison with Toyota’s GISG (Global Information Security Group)
What you bring :
5-7 years’ related information security experience working with both on-prem and cloud technologies
Post-secondary education in Computer Science / Engineering or related field
Experience as an information security analyst / architect in Banking or Financial services
Hands-on experience configuring and managing security technologies
Exceptional communication skills with diverse audiences and levels - strong critical thinking and analytical skills.
Understanding of software and infrastructure development lifecycles
Understanding of network protocols, network topologies, virtual infrastructure, network segmentation, operating systems, databases, applications, and mobile security
Familiarity with standard network security technology solutions : e.g. firewall, router, VPN.
Familiarity with the use of standard security technology solutions and processes such as : access control, user provisioning, directory, SIEM, vulnerability management, Cloud Access Security Brokers, Data Loss prevention solutions, anti-virus, single sign on and auditing.
Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects.
Preferred License or Certification in Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Information Systems Security Architecture Professional (ISSAP), AWS Certified Security Specialty and / or Certified Cloud Security Knowledge (CCSK)
Working knowledge of Business Continuity and how to plan and execute supporting initiatives
Microsoft Office proficiency at intermediate level (Word, Outlook, Excel), including SharePoint
What We’ll Bring
- Competitive salary including bonus.
- Health and dental benefits effective immediately.
- Company pension plan with matched contribution.
- Associate vehicle discount program.
- Professional growth and development programs to help advance your career, as well as tuition reimbursement.
- Fitness reimbursement.
- Great company culture-respect for people and continuous improvement is at our core
What You Should Know :
Our success begins and ends with our people. We embrace diverse perspectives and value unique human experiences. We are proud to be an equal opportunity employer that celebrates the diversity of the communities where we live and do business.
Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, or any other characteristics protected by law.
Information Security Analyst
Provide leadership for the provision of technical expertise in development and support of activities, processes, procedures, and tools for protecting information security with a focus on application security. Information Security Analyst position. Research, design and implement application security ...
Int. Information Security Analyst to create a best-practices guidebook on configuring and securing AWS services for our Higher Education client.
Information Security Analyst to create a best-practices guidebook on configuring and securing AWS services for our Higher Education client. Best Practices for AWS Security, Identity, & Compliance, AWS Security Maturity Model, Best practices to secure my AWS account and its resources, AWS Security Be...
Information Security Analyst II (Cyber Crime Protection)
The analyst will provide research, evaluation, assessment, operational, reporting and / or analytical support on Technology Controls / Information Security related programs and initiatives. Security+, CISSP, or other Cybersecurity certifications preferred. Cybercrime Customer Protection Analyst (Can...
information technology (IT) security analyst
Design, develop and implement information systems business solutions. Provide advice on information systems strategy, policy, management and service delivery. Assess physical and technical security risks to data, software and hardware. Develop policies, procedures and contingency plans to minimize t...
Information Security Analyst
On behalf of our client in the Banking Sector, PROCOM is looking for an Information Security Analyst. Information Security Analyst – Job Description. Information Security Analyst – Mandatory Skills. Information Security Analyst - Assignment Start Date. ...
Sr. Information Security Analyst (GCS)
We are looking for an experienced Senior Information Security Analyst to help us operate cutting-edge Identity and Access Management (IAM) services and tools, ensuring system effectiveness of internal security controls. Operate information security controls related to privileged access within establ...
Information Security Analyst
Preferred License or Certification in Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Information Systems Security Architecture Professional (ISSAP), AWS Certified Security Specialty and/or Certified Cloud Security Knowledge (CCSK). TFS curr...
Information Security Analyst
My client is looking for an Information security analyst to work with IT team to implement corrective measures, maintain security documentation and assist in remdiation process. This role is an intermediate security operations role and it offers an opportunity to work with business and technical tea...
Application Security Analyst, Information Security
Application Security Analyst, Information Security!. We're seeking an Application Security Analyst well-versed in risk analysis, vulnerability assessment methodologies, and information security concepts. Your role involves supporting security risk assessments for both internally developed and third-...
Information Security Analyst
We’re seeking an experienced information security analyst focusing on cyber threat detection to deliver cyber security insights on a daily basis. As part of a team of specialists, the information security analyst will “slice and dice” data using various methods and create new visions for the future....