Position Summary

CMG is seeking an Information Security Analyst to join our Information Technology team. This is a full-time, permanent position. Reporting to the Manager, Information Technology, the Information Security Analyst will be responsible for championing a culture of security first, best practices, and enhancing the overall security posture across the organization through improvements to the underlying technical infrastructure, the addition of new technology tooling, and through ongoing educational activities for CMG employees.

The ideal candidate will have a diverse and strong technical background, excellent problem-solving skills, possess values of extreme ownership, and be able to communicate effectively with all types of employees, including the senior leadership team and the Chief Executive Officer.

Essential Responsibilities

Monitor all aspects of on-prem and cloud infrastructure, assess and review for vulnerabilities and implement solutions to address security risks to improve the organization’s overall information security posture.
Research and stay informed of information security threats, trends, emerging technologies, and threat response alternatives.
Conduct and document security risk assessments, compliance/configuration reviews, and communicate information security risks, mitigations and recommendations to the IT team and relevant stakeholders.
Assist technical support staff, relevant stakeholders in identifying and implementing appropriate security safeguards, including patch management, vulnerability management, firewalls, and anti-virus, anti-malware strategies.
Participate and assist in incident response and recovery efforts, perform root cause analysis, and create follow-up remediation and action reports.
Review and analyze network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches.
Perform metrics gathering, reporting, documentation, and review of team procedures.
Develop scripts, tools, and procedures to automate scans, assessments, and other monitoring and discovery activities.
Conduct regular access management reviews across the organization.
Monitor and lead employee security and education initiatives as it pertains to email security threats, data sharing, workstation security best practices.
Coordinate with third parties to assist with internal and external security audits, assessments, and remediation efforts.
Plan and conduct regular cyber security table-top exercises with the IT team and relevant external stakeholders.
Assist with development of information security controls, enforcement and evidence gathering as it relates to SOC2 compliance.

Education

A bachelor’s degree in computer science or a related technical discipline and/or related information security certifications.

Knowledge, Skills & Experience

3 - 5 years’ experience in a dedicated information security role(s).
Experience securing both on-prem and cloud environments.
Experience managing security protection solutions including: SIEM, EDR, NDR, firewalls, IPS/IDS, next-gen AV, vulnerability scanning, penetration testing, encryption technologies.
In-depth knowledge of various operating systems and virtualization technologies (Windows, macOS, Linux, VMware, Citrix).
Experience with incident response, management, and root cause analysis.
Emergency on-call availability in the event of an incident.

Nice to haves:

Industry certifications (achieved or in-progress), e.g., CISSP, CISA, CSSP, Certified Ethical Hacker, CompTIA Security+
Knowledge and experience with compliance standards, e.g., SOC2, ISO 27001, CIS Controls, MITRE, NIST 800-171, PCI DSS, GDPR.
Technical knowledge of networking firewalls and gateways (e.g., Cisco, Juniper, Fortinet).
Experience with complex and geographically dispersed network environments.

Role Type

Hybrid - 3 days in the office from Monday to Wednesday and optional work from home on Thursday and Friday.

Special Requirements

Availability to be an on-call resource in the event of an incident.

CMG Compensation and Benefits Overview - Canada

CMG’s total rewards program includes a competitive salary, a performance-based bonus program, learning and development opportunities, RRSP contributions, top-of-the-line medical and dental benefits including a health spending account, 20 days of vacation per year plus flex days, quarterly wellness days, choice of transit pass or underground parking, on-site gym, car wash, cafeteria and complimentary barista style coffee and more. CMG recognizes the benefits to working in-person as well as having a choice to work from home and accordingly are offering a hybrid work model, with a minimum of three days per week in the office and flexibility to work two days per week from home.

About Us

Innovators in Simulation Technology

CMG (TSX:CMG) is a global software and consulting company that combines science and technology with deep industry expertise to solve complex subsurface and surface challenges for the new energy industry around the world. CMG is headquartered in Calgary, AB, with offices in Houston, London, Dubai, Bogota, Rio de Janeiro, Bengaluru, and Kuala Lumpur. For more information, please visit https://www.cmgl.ca

Computer Modelling Group Ltd.

New Jobs

Information Security Analyst