Analyste principal en sécurité

KPMG Canada; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

KPMG Canada is seeking a Senior Security Analyst to join their Cybersecurity group. This role involves managing security compliance, monitoring systems, and collaborating across departments to enhance security measures. Candidates should possess a strong background in information security, technical skills, and effective communication abilities. Bilingual proficiency in French and English is required.

Qualifications

• At least two years of experience in information security services.
• Fluent in French and English, both spoken and written.
• Experience with Azure Active Directory and Microsoft Defender.

Responsibilities

• Monitor systems and handle security incidents.
• Write and distribute compliance reports.
• Collaborate with IT groups on data security activities.

Skills

Information security practices

Vulnerability management

Network identity and access management

Cloud security principles

Data loss prevention

Effective communication

Technical analysis

Education

Associate degree in a related technical field

Bachelor's degree in IT or Computer Science

Tools

Microsoft products

AWS

Azure

PowerBI

Job description

Join to apply for the Analyste principal en sécurité role at KPMG Canada

Overview

At KPMG, you will be part of a diverse and dedicated team of problem-solving professionals with a common goal to turn information into opportunities for our clients and communities worldwide.

The KPMG Canada Cybersecurity group is responsible for protecting the digital assets of the firm and its clients. This group focuses not only on technology but also on developing relationships with other departments and supporting them to achieve their objectives. Our strength lies in our willingness to collaborate with colleagues to find operational solutions.

The bilingual senior security analyst is primarily responsible for managing, maintaining, and optimizing compliance with the security of core systems. The selected candidate will also perform other information security-related tasks.

The incumbent should have an in-depth understanding of information security practices and be familiar with Microsoft products (such as Windows, Outlook/Exchange), vulnerability management, antivirus, network identity and access management (proxy servers, firewalls), databases, cloud services (AWS, Azure), and data loss prevention products (such as Symantec, McAfee, or RSA).

The senior security analyst is part of KPMG's Information Security team and reports to the Associate Director or Director of Digital Security.

What you will do

The successful candidate will monitor systems managed by both the central system and network-organized systems, and contribute to their deployment improvements. Monitoring activities include daily console reviews, event analysis, and determining events requiring action. The senior security analyst will interact with all KPMG functions to bridge the gap between technical data and business objectives.

Some responsibilities include:

• Handling and resolving security incidents and vulnerabilities reported by the global security operations center and local security operations team.
• Writing and distributing daily/weekly progress reports and compliance reports.
• Ensuring operational condition and compliance of all security controls (such as EDR, DLP, and AV).
• Collaborating with functional and IT groups to identify sensitive data and monitor unauthorized disclosures.
• Resolving and documenting complex security incidents.
• Preparing official incident reports.
• Acting as secondary responder during cybersecurity incidents.
• Proactively monitoring network security and providing insights on risk detection and mitigation technologies, techniques, and processes.
• Consulting and advising IT staff and collaborating to coordinate data security activities.
• Contributing to the implementation and improvement of the information security program.
• Assisting with application/software security reviews.
• Regularly performing security checks on PC/MacOS to ensure compliance with standards and policies.
• Acquiring new skills to support KPMG's security team and stay updated on industry standards and advances.
• Performing other security-related tasks as needed.

The candidate must be available on call or outside normal working hours if necessary.

What you bring to the role

• Associate degree in a related technical field or equivalent experience.
• Information security certifications are an asset.
• Bachelor's degree in IT, Computer Science, Engineering, Electrical Engineering, Mathematics, or equivalent.
• Azure and/or AWS certifications are an asset.
• Microsoft MCSE/MCSA and/or Cisco certifications are an asset.
• At least two years of continuous experience in information security services, including one year in system security with certification, maintenance, and use of security products in a decentralized organization.
• Experience with:
• Azure Active Directory service;
• Microsoft Defender for endpoint;
• Microsoft Defender Vulnerability Management;
• Intune application and compliance policies;
• Cloud security principles;
• iOS, MacOS, and Windows operating systems.
• Fluent in French and English, both spoken and written.
• Effective verbal and written communication skills.
• Ability to analyze and understand technical information.
• Ability to interact harmoniously with non-technical staff.
• Good knowledge of data classification concepts and processes.
• Proactive, results-oriented approach.
• Motivated and resourceful.
• Understanding of data loss and protection processes.
• Knowledge of a wide range of technical solutions focused on data protection and cybersecurity.
• Experience with Azure Sentinel, Defender ATP/EDR, or Defender AV is an asset.
• Knowledge or experience in cloud security (Azure or AWS) is an asset.
• Proficiency in PowerBI is an asset.
• Programming experience, ideally in PowerShell, is an asset.

This position requires proficiency in spoken and written English. The successful candidate will support KPMG employees nationwide and communicate with English-speaking colleagues. They will also create documentation and share advice with colleagues from anglophone provinces.

We are here to support you to give your best

Our values, KPMG's way

• Integrity: Doing what is right
• Excellence: Never stop learning and improving
• Courage: Thinking and acting boldly
• Together: Respect each other and leverage our differences
• For the better: Making our work meaningful

KPMG Canada proudly subscribes to the principle of equal employment opportunity and is committed to providing a respectful, inclusive, and barrier-free work environment, enabling all staff to fully realize themselves. A diverse workforce is key to our success, and we believe in our mission for you to be your authentic self at work. We invite all qualified candidates to apply and hope you will make KPMG Canada your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process that allows everyone to be themselves and excel. We aim to provide a positive experience and are ready to offer adjustments and accommodations to help you perform at your best. Adjustments (informal requests), such as additional preparation time or short breaks during interviews, and accommodations (formal requests), such as accessible communication methods or technological aids, are tailored to individual needs and job requirements. Requests can be made at any stage of the recruitment process. If you need assistance, contact KPMG's Employee Relations team at 1-888-466-4778.