Cyber Security Analyst

We are seeking a senior IT Security Analyst for a permanent full time position. This is a hybrid position requiring 3 days onsite weekly in the Greater London Ontario area.

Key Responsibilities include:

Carry out information technology security plans and policies

Guide and advise business units, technology solution delivery, other technology teams and partners on information technology security best practices.

Identify and assess technology system security requirements at time of procurement, development and implementation of technology projects, identifying risks and implementing controls to mitigate operational risk at launch.

Recommend, design, develop, test and implement information technology security platforms, tools and controls for on premise and cloud based solutions

Lead and execute risk treatment remediation plans and tasks

Lead incident response, including steps to minimize the impact, identifying how a breach happened, the extent of the damage and lessons learned

Maintain information technology security platforms, tools and controls

Participate in information technology security control assessments and audits for on premise and cloud based solutions

Participate in audits of partners, vendors, others in the supply chain and employees focused on determining it they are working within the framework of established policies

Monitoring regulatory PCI, PIPEDA, internal policy and other compliance

Support the information technology security awareness training program

Develop and maintain incident response play books and standard operation procedures

Technical:

Experience with common information security tools and platforms.

Experience with information security standards including NIST, CIS, OWASP and CSA.

Experience with PCI, PIPEDA, CASL and PHIPA standards and regulations.

Strong understanding of information security infrastructure and controls including:

Iaas, PaaS, SaaS security controls and best practices

SIEM

EDR

EPP

XDR

SWG

CASB

DLP

Firewall

WAF

IDPS

VPN

MFA

AD, AAD, Windows Conditional Access

Windows and Linux servers

Networking protocols

Education and Experience:

Degree or diploma in Information Technology Security or Computer Science

Minimum of 5 experience developing and implementing technology security standards, controls and best practices

CISSP or CISM or similar designation is an asset

CCSP or similar cloud security certification(s) is an asset

#J-18808-Ljbffr