Cyber Security Analyst - Incident Response

We are seeking a senior IT Security Analyst with strong experience in incident response for a permanent full time position. This is mainly remote with 1-2 days onsite per month.

Key Responsibilities include:

• Carry out information technology security plans and policies
• Lead incident response, including steps to minimize the impact, identifying how a breach happened, the extent of the damage and lessons learned
• Guide and advise business units, technology solution delivery, other technology teams and partners on information technology security best practices.
• Identify and assess technology system security requirements at time of procurement, development and implementation of technology projects, identifying risks and implementing controls to mitigate operational risk at launch.
• Recommend, design, develop, test and implement information technology security platforms, tools and controls for on premise and cloud based solutions
• Lead and execute risk treatment remediation plans and tasks
• Maintain information technology security platforms, tools and controls
• Participate in information technology security control assessments and audits for on premise and cloud based solutions
• Participate in audits of partners, vendors, others in the supply chain and employees focused on determining it they are working within the framework of established policies
• Monitoring regulatory PCI, PIPEDA, internal policy and other compliance
• Support the information technology security awareness training program
• Develop and maintain incident response play books and standard operation procedures

Technical:

• Experience with common information security tools and platforms.
• Experience with information security standards including NIST, CIS, OWASP and CSA.
• Experience with PCI, PIPEDA, CASL and PHIPA standards and regulations.

Strong understanding of information security infrastructure and controls including:

• Iaas, PaaS, SaaS security controls and best practices
• SIEM
• EDR
• EPP
• XDR
• SWG
• CASB
• DLP
• Firewall
• WAF
• IDPS
• Microsegmentation
• VPN
• MFA
• AD, AAD, Windows Conditional Access
• Windows and Linux servers
• Networking protocols
• Virtual environments

Education and Experience:

• Degree or diploma in Information Technology Security or Computer Science
• Minimum of 5 experience developing and implementing technology security standards, controls and best practices
• CISSP or CISM or similar designation is an asset
• CCSP or similar cloud security certification(s) is an asset

Please apply today!