First Transit is currently hiring an IT Security Analyst. This position has the option to work remote and the candidate can reside in any of the following: Vancouver/Metro Vancouver, Nanaimo, Victoria, Kelowna.

The First Canada IT Security Analyst is primarily responsible for IT Security practices including Security Incident Response, Awareness and Reporting. Responsibilities include, but are not limited to, application and maintenance of best practices in the areas of IT security and risk.

Responsibilities

Identify and protect company assets through the development and implementation of security framework for all servers and endpoint PCs.
Incident Response – Completes Security Incident Response processes to remediate security events as they arise. Recommends improvements to the environment to mitigate future security risks.
PC & Server Hardening - Ensures regular vulnerability scans are completed on respective systems. Ensures remediation reviews are completed and where possible, implemented via proper change control and documentation of such actions. Monitors various Anti-Virus, Zero Day Threat and other applicable patches and tools are in place to help keep the workstations and systems safe.
Service Desk Incident Tickets assigned to IT Security Operations queue - Oversee service desk incident tickets including planning and investigation around security breach activities. Examples could be: SPAM email, Phishing, Virus, Network access request (reviewing business justification to view certain sites). Work with suppliers to ensure the proper attention and resolution is provided.
Perform/participate in Penetration Testing activities – Actively participates in third-party conducted Penetration Testing activities and actively performs internal/external Penetration Tests, when required.
RedScan Incident Tickets – Oversee RedScan SOC incident tickets including planning and investigation around such occurrences. Work with endusers and other teams to ensure the proper attention and resolution is provided. Evaluate trends and higher impact items for escalation. Provide notification to management of delayed ticket response by other teams.
IT Security Awareness Program - Develop and implement a security awareness and ensure regular IT and business communications around best practices for IT Security. This could develop into additional IT Training.
Audit policies and controls continuously - Regularly auditing the policies and controls put into place for improvement, remediation, or quickly fix.
Central IT Business Continuity and Central IT Disaster Recovery support. Provides input and assistance in maintaining processes to support identified key business processes. Highlight current state and recommended actions. Work within IT Disaster Recovery Governance documentation and IT Disaster Recovery Coordination Plan for Central IT. Highlight areas where Business Continuity or risk appetite need to be addressed.
Documents other IT processes as defined by the process owner
Hire and train security staff – Creates a conducive environment for hiring qualified staff and for providing training to new or existing IT security staff.
Complies with First Canada & FGA Code of Business Conduct and Ethics.
Builds / Maintains high performance collaborations through own actions & support provided to others.
Performs all of the above in collaboration with First Transit and FirstGroup Security teams

Experience

Bachelors in Business or Information Technology.
Industry certifications a plus (CISSP, CISM, CRISC, Security+, etc.).
1 to 3 years relevant experience on process documentation preferred
General knowledge in security management and risk management
General knowledge of project management
Strong work ethic
Ability to practically support principles of IT security and IT audit
Speed and responsiveness in the facilitation of requests
Good presentation skills
Strong relationship-building skills
Strong communication and interaction skills; is comfortable working with individuals from different teams and suppliers
Demonstrated high level of integrity, ability to work with ambiguity, and strong sense of confidence to deliver on responsibilities
Excellent oral and written communication skills and presentation skills
Microsoft Office experience a must
Rapid 7 – Nexpose and Metasploit (Scanning tools) experience a plus
Experience in managing EDR (CrowdStrike, Defender, etc.) is highly valued
SharePoint experience a plus
Good to have knowledge of common cybersecurity frameworks like NIST, OSI, CIS,etc

“We aspire to have a culture where all people are First. We strive to attract and retain a diverse workforce therefore all qualified applicants will receive consideration for employment. We encourage applications from women, persons with a disability, Indigenous peoples and members of a visible minority. First is an equal opportunity employer and by doing so we will sustain and promote an inclusive culture that supports future growth for all. First is committed to providing reasonable accommodation at all stages of the hiring process and encourage all applicants who may require such accommodation to let us know

First Transit Canada

New Jobs

IT Security Analyst