Information Security Analyst

NRT Tech; Canada; Remote; CAD 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company as an Information Security Analyst, where you'll play a crucial role in safeguarding our innovative FinTech solutions. This position offers the opportunity to work on cutting-edge security architecture and vulnerability management systems while collaborating with diverse teams to enhance our security posture. With a strong commitment to professional development and community, this role not only promises career growth but also the chance to contribute to a sustainable future. If you're passionate about security and eager to make a difference in the gaming industry, this is the perfect opportunity for you.

Benefits

Health Benefits

Paid Time Off

Professional Development

Community Sharing

Collaboration Opportunities

Qualifications

• 2-5 years experience in security architecture for web-based environments.
• Strong understanding of PCI-DSS and security controls.
• Experience with security event orchestration and automation.

Responsibilities

• Manage vulnerability and threat detection systems.
• Support centralized SIEM/SOAR strategy and optimize alerts.
• Collaborate on patching, access controls, and endpoint protection.

Skills

Security Architecture Design

Threat Detection

Risk Assessment

SIEM/SOAR Platforms

Communication Skills

Vulnerability Management

Incident Response

Team Collaboration

Education

Degree in Information Technology

PCIP Certification

PMP Certification

Azure Security Engineer Associate

Tools

Nessus

Splunk

Microsoft Defender

Azure Security Center

Microsoft Sentinel

Job description

Posted Monday, April 21, 2025 at 4:00 AM

INFORMATION SECURITY ANALYST

About NRT

At NRT we build more than solutions: we build up each other.

NRT is a worldwide leader in future-ready FinTech and Information Technology designed to elevate and enhance the enterprise gaming industry. Our next-generation solutions encompass every aspect of the modern integrated resort, including secure payment systems, AML compliance and reporting tools, credit information and electronic marker services to intelligent and engaging table game platforms, dynamic financial and marketing kiosks, and our completely customizable digital gamification and mobile experiences. NRT has acquired JOINGO, a revolutionary resort app engagement platform dedicated to unifying guest experiences, offering a seamless experience from booking to checkout through App Builder, which has more than 100 third-party integrations which are unmatched in the industry. Our strategic partnerships have resulted in the most convenient, reliable, and secure omni-channel payment ecosystem in the industry. Our collective solutions are used by casinos, race and sports operators, lotteries, banks, and retailers-- globally-- to dazzle their guests.

We’re dedicated to building a better future for all, including environmental initiatives designed to reduce our carbon footprint. Some of our actionable initiatives include utilizing green energy, digitizing our internal processes, and implementing our unique cashless solutions.

NRT believes in the value of connection and community. We believe that our diversity in skills and background make us a unique and formidable culture. Additionally, we believe in encouraging the growth of individual development, and recognize that our success depends on developing each other. We know that to be the innovative FinTech leader that we are, it’s all hands on deck. NRT knows that to stand firm, we need to stand together.

Our innovative products and success allow us to reward you with competitive salaries, paid time off, individual growth plans, community sharing, collaboration, Health Benefits (including medical, vision, dental, EAP, etc) and more. NRT has metrics designed to get you to where you want to be in your career, and we are your biggest advocate for professional development. We provide training, product knowledge demos, tiered-lever skill building, development workshops, teambuilding exercises, webinars, collaboration, and more. Joining NRT is more than a job: it’s an opportunity to grow and discover.

To learn more about who we are and what we do, visit our website at www.nrttech.com .

Reporting to the SVP, Information Technology, the Information Security Analyst’s primary mandate is to provide ongoing day-to-day Infrastructure administration, which includes, but is not limited to; network and server management, logical access administration, anti-virus administration, log analysis and auditing, maintenance of security logs, and reviewing performance data, fire wall maintenance and security. The incumbent will have a proactive attitude and approach in managing the business office production networks, exhibit excellent judgment in reacting to or escalating problems, and providing in-depth analysis of solutions.

Core Competencies

•Results Oriented

•Problem Solving

Key Responsibilities include, but are not limited to:
• Participate in the design and operational delivery of vulnerability management and threat detection systems that integrate with enterprise monitoring platforms.
• Support the centralized SIEM/SOAR strategy through regular tuning, alerting optimization, and threat correlation activities in coordination with IT Ops.
• Contribute to Change Advisory Boards (CAB) and post-incident reviews to ensure security implications are assessed and controls remain effective throughout the operational lifecycle.
• Collaborate with the Manager, IT Operations and infrastructure teams to maintain up-to-date patching, access controls, endpoint protection, and vulnerability remediation pipelines.
• Drive risk-based prioritization of findings from tools such as Nessus, Splunk, Microsoft Defender, and Azure Security Center, ensuring operational alignment with compliance frameworks (PCI-DSS, ISO 27001).
• Assist in integrating Identity and Access Management (IAM) practices across Active Directory, Azure AD, and SaaS platforms with a focus on Zero Trust models.
• Regularly review and analyze system, firewall, and application logs; maintain automation scripts and detection rules for real-time response and compliance enforcement.
• Coordinate with application support, DevOps, and infrastructure leads to secure CI/CD pipelines and cloud-native services within the broader Azure governance framework.

Skills/Experience
• Possess high level of initiative, organizational skills and of detail and action oriented.
• Understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
• Excellent communication skills with internal and external contacts.
• Minimum 2 to 5 years’ experience in the designing of security architecture within a web-based Internet e-Business and m-Commerce technology environments.
• Possess good understanding of PCI-DSS and PA-DSS requirements.
• Possess good understanding of AD design maintenance and Troubleshooting.
• Possess good understanding of SIEM, HIDS, NIDS and EMS.
• Ability to assess, investigate and review ID events through real time console.
• Possess good understanding of Nessus vulnerability scan remediation, and management.
• Perform risk assessment and security audits.
• Able to be a team player.
• Experience within payment and financial industry preferred.
• Proficiency in security event orchestration and automation (SOAR) platforms, and ability to build playbooks in response to threats.
• Experience supporting security within Infrastructure-as-Code (IaC) environments and integrating controls into deployment pipelines.
• Familiarity with Microsoft Sentinel, Defender for Endpoint, and Azure Policy compliance monitoring.
• Ability to interpret complex risk data and convert it into operational requirements for IT teams and managed services providers.
• Prior experience implementing logging, tracing, and monitoring best practices in high-availability environments.

Qualifications
• A degree in Information Technology / Computer Information Systems or related
• Possession of PCIP and PMP would be an asset
• Possession of Azure Security Engineer Associate (AZ-500) or Microsoft SC-200 is considered an asset.
• Familiarity with ITIL Foundation and/or operational certifications such as CompTIA Security+ or CySA+ is beneficial in bridging InfoSec and IT Ops processes.

NRT would like to thank all applicants for applying, but only those applicants best suited for the position will be contacted.

NRT is an equal opportunity employer. It is NRT’s policy to recruit and select applicants for employment solely on the basis of their qualifications, with emphasis on selecting the best-qualified person for the job. NRT does not discriminate against applicants based on race, color, religion, sex, sexual orientation, national origin, or disability or any other status or condition protected by applicable law.

NRT welcomes and encourages applications from all. Accommodations are available on request for candidates taking part in all aspects of the selection process. If you are selected for this position, please notify the HR team member for reasonable accommodation.