INFORMATION SECURITY ANALYST

THE TEAM
ICG’s solutions are rooted in understanding our business lines and technologies and collaborating with our business teams to deliver high quality, reliable, enterprise-grade solutions for top Global brands such as Twitter, Microsoft, and Bausch + Lomb. We deliver in a fast-paced, ever-changing, and innovative environment underpinned by sound cost management while maintaining a high level of security practices for PCI and ISO27001/27701/22301 compliances.

Our teams are responsible for the secure delivery and execution of all client programs & projects. ICG aims to act as a trusted partner and strives to deepen client relationships based on trust, security, integrity, commitment, accountability and delivery. This team lives on the cutting edge with solutions which drive strategic and long-term value to our customers.
More specifically, our Information Security (InfoSec) team is responsible for development, maintenance and evolution of our information security roadmap, as well as Infosec certifications such as PCI DSS and relevant ISO programs, validating the security of our service partners, and supporting our top client security onboarding and re-occurring reviews as a start. All while managing the full spectrum of internal information security and all our real-time production facilities.

WHO ARE WE LOOKING FOR?
We are hiring an Information Security Analyst to work in our growing Governance and Compliance team.

Reporting to the Manager-Information Security you will evaluate and maintain procedures to safeguard internal and production information systems. Working with the Infosec Team, your responsibilities will include total involvement on ISO 27001, ISO 27701 and PCI DSS yearly compliancy, overall company IT and security policies, internal IT audits, Security programs and vulnerability assessments. You will report, investigate and resolve security incidents with our internal teams and also educate and communicate security requirements and procedures to all users and new employees. In addition, you should have competence in researching security trends, new methods and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of a system breach. Other responsibilities include ensuring compliance with our internal standards, client requirements, regulations and privacy laws and complete and manage InfoSec questionnaires across our company and clients. You will establish and maintain our Vendor and Supplier management ecosystem.

To do well in this role you should have a related degree or diploma in computer science or IT Security and experience in the information security field, process auditing, or other compliance related area.

YOUR RESPONSIBILITIES

Work with the team to complete annual certifications in ISO 27001, ISO 27701 and PCI-DSS (payment card industry) by assistance and leading in evidence collections, reviews, and quality control

Investigate and maintain documentation of security breaches and other cyber security incidents.

Setup and manage penetration testing with our chosen partners
Develop company-wide best practices for IT security.
Respond and complete Information Security questionnaires/onboarding for our top clients
Develop and maintain IT and Security governance documentation, process and policies
Establish and manage vendor and supplier management processes and audits
Manage various third party SAAS products for our company
Research security enhancements and make recommendations to management
Train users and promotes security awareness to ensure system security and to improve server and network efficiency.

Assist and perform internal IT and PCI, ISO27701 and ISO27001 audits and process reviews

Stay up-to-date on IT and PCI trends, news and security standards
Other duties may be assigned

REQUIREMENTS
The successful candidate will possess the following:

Strong English communication (verbal/written/presentation) skills with both business and technical stakeholders.
Strong knowledge of MS Office suite of products
Understanding of firewalls, proxies, antivirus, and IDPS concepts.
Understanding of security controls to protect information systems consistent within the industry.
Excellent attention to detail and documentation

EXPERIENCE REQUIREMENTS;

Diploma or Bachelor’s degree in Computer Science, IT security, a related field, or a diploma/certificate/degree in Information Systems, Information Technology, or a related area.
Minimum of 3 years of experience working IT Security environment

CAN YOU DEMONSTRATE EXPERIENCE PROVING;

Ability to work under tight timelines and competing priorities.
Critical thinking & thought leadership on project and/or program management.

GREAT ASSETS TO HAVE WOULD BE;

Prior experience in incident identification/analysis and escalation procedures an asset
Understanding of PCI, ISO 27001 and 27701 or related security frameworks considered an asset.
At least one security or IT certification would be an asset or working towards certification.

Location: 383 Dovercourt Drive

Job Type: Full-time

Salary: $50,000.00-$75,000.00 per year

COVID-19 considerations:
Currently, roles at IC Group are a partial-remote (hybrid).
In office attendance will be required 2 days a week at present.

Work Location: Multiple Locations

IC Group Inc.

New Jobs

INFORMATION SECURITY ANALYST