Hybrid InfoSec Analyst - Risk & Security Operations

Manitoba Blue Cross; Winnipeg; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work environment

Competitive starting salary

Comprehensive health benefit package

Fully equipped onsite fitness center

Casual dress code

Personal and professional development

Job summary

Manitoba Blue Cross is seeking an Information Security Analyst to safeguard systems, networks, and data. You will assess risks, monitor security tools, and coordinate remediation efforts while collaborating with IT and business teams to strengthen our cybersecurity posture.

The role includes security governance, incident response, and training to foster a culture of cybersecurity awareness across the organization.

Qualifications

• Post-secondary degree or diploma in a related field is required.
• 5+ years of experience in information security or a related role.
• Industry certifications such as CISSP, CISA, CISM, CRISC or GIAC are assets.

Responsibilities

• Conducts security assessments and risk analyses to identify vulnerabilities and threats.
• Monitors security tools, logs, and alerts to detect and respond to incidents.
• Collaborates to develop and implement security policies, procedures, and best practices.
• Coordinates penetration testing and vulnerability assessments and remediation activities.
• Provides security awareness training and guidance to employees.

Skills

Cybersecurity

Risk assessment

Incident response

Security governance

Cloud security

Education

Post-secondary degree in a related field

Certifications: CISSP/CISA/CISM/CRISC/GIAC

Tools

EDR

NDR

DLP

SASE

Cloud security controls (AWS/Azure)

Job description

Manitoba Blue Cross is seeking an Information Security Analyst to safeguard systems, networks, and data. You will assess risks, monitor security tools, and coordinate remediation efforts while collaborating with IT and business teams to strengthen our cybersecurity posture.

The role includes security governance, incident response, and training to foster a culture of cybersecurity awareness across the organization.