Information Security Analyst

Bayshore HealthCare; Mississauga; Hybrid; CAD 70,000 - 100,000; Full time

Job summary

Bayshore HealthCare seeks a Technical Security Analyst for its Mississauga office to enhance its security operations. The role includes monitoring security events, risk assessments, and developing security policies to protect sensitive data. Candidates should possess strong communication skills and technical expertise in network security and compliance, with a minimum of 3 years' experience. A hybrid work model applies, with a focus on maintaining a secure environment.

Qualifications

• Minimum 3 years’ experience in a technical security consultant or analyst role.
• Expert knowledge of network security control environments.
• Understanding of cloud architecture and AWS or similar technologies.

Responsibilities

• Analyze event data from multiple sources to detect security breaches.
• Manage System security administration for designated technology platforms.
• Develop and implement security policies and protocols.

Skills

Network security

Risk assessment

Incident response

Technical analysis

Communication

Education

College or University level education

Security related certification (CISSP, CISA, GIAC)

Job description

Bayshore HealthCare is one of the Canada’s leading providers of home and community health care services and is a privately owned company. Bayshore HealthCare is proud to showcase its achievement as a Platinum member of Canada’s Best Managed Companies Program every year since 2006. Bayshore Healthcare is also recognized as Canada’s Best Employers in Forbes 2023 list.

The Technical Security Analyst, under the direction of the Manager Information Security & Privacy assists with the planning and implementing ofsecuritymeasures to protect Bayshore’s information computing systems and data that supports the company’s Security program and objectives.The role’s main activities include system monitoring, risk assessment, technical review of company initiatives and enhancements, policy review and development.

DUTIES AND RESPONSIBILITIES

• Support security operations by analyzing event data from multiple sources to detect unusual activities and swiftly address any security breaches or incidents. Carry out root cause analyses and implement necessary corrective measures.
• Evaluate and analyze vulnerability management reports, coordinating remediation efforts with relevant teams.
• Help maintain auditing programs to ensure compliance with Information Security policies.
• Update the risk register by conducting risk and impact assessments related to information security; collaborate with stakeholders and management to communicate risks and remediation actions.
• Oversee system security administration for designated technology platforms, which include operating systems, applications, and security systems.
• Manage the Security Exception Process to assist Security teams in tracking exceptions, managing approvals, and enhancing automation.
• Develop and implement security policies, procedures, and protocols to safeguard the organization’s data and network infrastructures.
• Aid in Information System audit and compliance efforts.
• Conduct research and report on various technologies and current attack trends.
• Compile security operations metrics and provide updates to management team.
• Identify opportunities for process improvements or efficiency gains, which may involve creating tools, workflows, or playbooks to automate routine tasks for better security effectiveness.
• Assist the team in maintaining up-to-date documentation and drafting new procedures as necessary.
• Lead Bayshore’s Information Security & Privacy Awareness program.
• Engage in small to medium-sized projects to integrate information security and privacy requirements for proactive information protection.
• Coordinate web assessments and penetration testing with external vendors, followed by remediation efforts.
• Complete additional security-related tasks as assigned.
• Act as a backup for the Information Security Officer.
• Be available for overtime work outside regular business hours or on weekends when needed.

REPORTING RELATIONSHIPS

• The Information Security Analyst reports directly to the Manager, Information Security & Privacy.

Work Location: Bayshore Healthcare, National Office, Mississauga ON

Hybrid– At least 2 days onsite weekly

EDUCATION

• College or University level education or equivalent level of experience in the industry
• Completion of a Security related certification is mandatory and considered an asset (CISSP, CISA, GIAC, etc.).

EXPERIENCE

• Minimum 3 years’ experience in a technical security consultant or analyst role.
• Demonstrates expert knowledge of network security control environments and architecture, including, system administration, intrusion detection, network architecture, enterprise threat management, perimeter controls.
• Knowledge of network security controls, appliances, including next generation perimeter security controls and web application firewalls.
• Systems administration experience, in Networks and Windows is considered a strong asset;
• Knowledge of traditional and cloud Architecture, experience of AWS or other public and private cloud technologies a plus.

OTHER SKILLS AND ABILITIES

• Ability to work independently with minimal supervision;
• Strong verbal and written communication skills are essential;
• Ability to work effectively and collaboratively with internal staff, external partners and stakeholders.
• Demonstrates solid analysis skills.
• Displays high ethics and trust values.

“At Bayshore Healthcare, our commitment to Equity, Diversity & Inclusion is our strength. This is how we bring our vision of being the difference in the lives of those we care for, work with and in our communities. We have a great sense of pride in creating a culture of belonging, where individual differences are embraced and celebrated, through programs, resources and policies that support each individuals purpose, potential and wellbeing.”

At Bayshore Healthcare Ltd., and its subsidiaries, we are committed to fostering an inclusive workplace and operate in full compliance with all Provincial and Territorial legislation pertaining to Human Rights Codes and Accessibility requirements. To ensure continued compliance throughout the recruitment and selection process, we encourage candidates to disclose any accommodation needs they may have.