Job Description
We are seeking a Senior Security Analyst to join our team in Winnipeg or Toronto. The Senior Information Security Analyst will support the security policies, standards, practices, procedures, and technologies in order to ensure the protection of networks, systems, applications, and data within the enterprise. This role provides security consulting services, helping ensure corporate security controls are effective and enforced. This role will also be involved with day-to-day security operations by responding to security incidents, vulnerability assessments, recommending corrective action by working with IT Operations, Architecture and Application areas as well as partners throughout the business to coordinate the implementation & management of security services.
The Senior Security Analyst will:
- Perform 3rd Party Risk Assessments for software vendors and professional services partners used within the enterprise environment
- Participate in a vulnerability management program that includes:
- external and internal vulnerability scans of applications and systems
- external and internal penetration tests of applications and systems
- documentation and remediation of identified vulnerabilities and exploits
- routine monitoring for security vulnerabilities and security patches
- taking a risk-based approach comparing those security vulnerabilities and security patches across the operating environment
- making recommendations to various IT teams on the mitigation process for those identified security vulnerabilities
- Coordinate with business units, operations, and technology teams for incident response, remediation, and vulnerability management
- Acts as the escalation point of contact to facilitate the handling of security incidents and requests, conduct technical investigations resulting in successful root cause analysis of security incidents, and make real-time decisions about incidents as they occur
- Complete audits of system security to ensure compliance with security policies
- Evaluate security tools and processes in conjunction with the Director of Information Security and the IT Department. Recommend improvements to security tools, configurations, standards, processes and policies
- Support and mentor Security Analysts in network monitoring and intrusion detection analysis using various tools, such as Intrusion Detection/Prevention Systems (IDS/IPS), Firewalls, and SIEM
- Supports the creation of business continuity/disaster recovery plans, to include conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies
- Assist with the development and delivery of information security awareness training programs
To be successful as a Senior Security Analyst with People Corporation, you will need:
- 7-10 years of experience in IT with at least 5 years of related, relevant cyber security experience
- Knowledge of information security standards and the importance of information security ensuring ongoing mission critical business functions
- Knowledge of Information risk concepts and principles, and relating business needs to security controls
- Knowledge of the principles, practices, theories and concepts of information security related to network, workstations, servers, and applications
- Advance Information Security training and Certification Security+, , CISSP, GIAC Specialty certification (GCIH, GCFA, GSTRT) or similar certification
- Must be a team-oriented individual who works well with others and put team success ahead of individual success
- Demonstrate strong organizational, research, analytical and/or problem-solving skills to evaluate situations make recommendations and take effective action.
- Capable of articulating complex technical concepts or scenarios to both technical and non-technical audiences
- In addition, senior security analysts are expected to have expertise in cyber security, Cloud Security, firewalls, network security, information assurance, Linux, UNIX, security information and event management (SIEM), application security, security engineering, and security architecture. They must also keep up with the latest trends in cyber security
What's in it for you:
- Learn by working alongside our experts
- Extended health care and dental benefits
- A retirement savings plan with company contributions
- A suite of Health & Wellness offerings
- Mental Health programs and support for you and your family
- Assistance for the completion of industry designations
- Competitive compensation
At People Corporation we are committed to helping businesses succeed. We are a national provider of benefits, retirement, wealth, wellness, and human resource solutions. Our experts and solutions serve over 20,000 clients representing nearly 3 million Canadians. We offer customized solutions designed to fit the unique needs of businesses and their employees, members and stakeholders.
Providing an inclusive, accessible environment, where all employees and clients feel valued, respected and supported is something we're committed to. We are dedicated to building a workforce that reflects the diversity of the communities in which we live, and to creating an environment where every employee has the opportunity to reach their potential. If you require an accommodation or an alternative format of any posting please reach out to careers@peoplecorporation.com
.jpg
)