Auditing and reporting on established security operational reports (No AV, Company Phishing Campaign results, Repeat Offenders Company Phishing )
Member of Splunk escalation and altering use cases which are established and documented
Reviewing ADAudit and Splunk logs outlining and acting upon unusual admin activity
Ensuring 2FA/MFA (2 factor or multifactor authentication ) policies are enforced and current
SSL and Digital Certificate Management (LDAP for cisco phones, public-facing web servers, RDP servers )
Auditing and reporting on all external and internal web services that they are secure with SSL and scanning tools (ensuring ongoing ciphers & TLS recommended standards followed)
Work with 3rd party to provide year external/internal threat assessment and recommendations
Work with the development group to ensure best practices are in place for web applications (cors, reverse proxy, SQL injection, etc.), and sensitive data (credit card, health care data, personally identifiable information)
Communicate the benefits of Cyber diligence to ensure cybersecurity stays on the organization's radar and champion all related efforts going forward
Ensure our company has a well-defined and documented plan of action to put into place in the event of a security incident update in the company's ORMS (Organizational Resilience Management System)
Work with Operations and Infrastructure teams on ensuring operational security compliance (Windows Server/Windows 10/11 updates, Sophos AV updates etc.)

Qualifications

Post Secondary Education preferably in Computer Science or Information Security
Experience with Cyber Security Management tools and projects supporting Infrastructure, Cloud Applications, on-premise applications, BCP and DR plans
Experience documenting procedures and creating technical specs for the internal technology team and staff
SSCP (Systems Security Certified Practitioner), GISF (GIAC Information Security Fundamentals), CompTIA Security
Knowledge of Vital regulatory and compliance knowledge (CCPA, GDPR)
Experience in a variety of security technology and architecture, such as MFA/2FA, VPN, DLP, privileged access management, network security, data security, cryptography and software-defined networks
Knowledge of email security.
Experience with SIEM technology such as Splunk
Advanced Microsoft Excel and/or Google Sheets
Excellent communication skills, both oral and written
Acute attention to detail with excellent documentation skills

Additional Information

What do we offer to you?

Manitoulin Group of Companies

New Jobs