The Canadian Automobile Association is a federation of eight Clubs providing over 7 million Members with exceptional emergency roadside service, complete automotive and travel services, Member savings and comprehensive insurance services. CAA also advocates on issues of concern to its Members and all Canadians, including road safety, the environment, mobility, consumer rights, road safety and infrastructure.

The CAA National Office is seeking a motivated and detail-oriented Information Security Analyst who will play a key role in the operational aspects of our information security program. This role focuses on strengthening the organization’s cyber resilience through proactive monitoring, system hardening, configuration compliance, endpoint protection, identity and access management, and awareness initiatives.

This role is remote based within the province of Ontario or Quebec.

You will work closely with the Director of Information Security, IT, and business stakeholders to ensure systems and processes are secured, risks are identified and mitigated, and employees are engaged in building a strong security culture.

Key Responsibilities

Monitor cybersecurity alerts, logs, and vulnerabilities, escalating and responding as needed.
Support IT teams in system hardening, secure configurations, and patch management.
Manage and optimize endpoint security solutions, including antivirus and EDR platforms.
Evaluate technology architectures to identify security risks and recommend improvements.
Ensure that identity and access management (IAM) practices are aligned with organizational policies and security requirements.
Suggest updates or improvements to security governance and policies based on operational realities.
Communicate effectively with internal and external partners responsible for maintaining or developing organizational assets, ensuring clear expectations are understood and met.
Assess and enforce compliance of systems, configurations, and operational practices against policies and standards.
Assist in incident response activities, including analysis, documentation, and remediation follow-up.
Help plan, coordinate, and run phishing simulations and awareness campaigns to strengthen the human firewall.
Help prepare metrics and reporting on the state of information security to support KPI development.
Contribute to the continuous improvement of security operations, controls, and practices.

Required Skills

4+ years of experience in information security or IT with a strong focus on security operations.
Familiarity with endpoint protection solutions, antivirus, and EDR platforms.
Hands-on experience with Microsoft Azure security features and best practices.
Strong knowledge of cybersecurity fundamentals (system hardening, IAM, patching, vulnerability management, etc.).
Experience in identity and access management (provisioning, role-based access, least privilege, periodic reviews).
Practical knowledge of security frameworks and standards such as NIST CSF, ISO 27001, PCI-DSS, and CIS Controls.
Experience with SIEM and monitoring tools.
Strong analytical, problem-solving, and communication skills.
Ability to collaborate effectively across technical and non-technical teams.

Preferred Skills & Certifications

Experience supporting security awareness programs or phishing campaigns.
Hands-on experience in incident response.
Relevant certifications such as CompTIA Security+, CySA+, Microsoft/Azure security certifications (e.g., SC-200, AZ-500, MS-500), or other equivalent technical security certifications.
Experience working in cloud based environment

This role is a new vacancy. Employment is contingent on a successful criminal background check and references.

Apply today by submitting your resume. Deadline is Dec 31/25.

We thank all applicants for their interest; only those selected for an interview will be contacted.

We are an equal opportunity employer and are committed to an inclusive, barrier-free recruitment and selection process. CAA will provide accommodations to job applicants with disabilities through the recruitment process. If you require an accommodation, please notify us and we will work with you to meet your needs.

Job Types: Full-time, Permanent

Application question(s):

Are you located in Ontario or Quebec?

Experience:

Cybersecurity: 4 years (preferred)
IT: 4 years (preferred)

Work Location: Remote

Application deadline: 2025-12-12

Canadian Automobile Association

New Jobs

Information Security Analyst