Information Security Analyst

Fraser Health; Surrey; On-site; Full time

Job summary

Fraser Health is seeking a Full Time Leader, Information Security Analyst in Surrey, B.C. This role involves conducting security assessments, managing incidents, and ensuring compliance with security policies. Join a team dedicated to providing exceptional health care and fostering a culture of respect and trust.

Benefits

Comprehensive, 100% Employer-Paid Benefits

Generous Vacation Time

Immediate Pension Enrollment

Maternity Top-Up

TransLink Pass Subsidy

Additional employee discounts and perks

Qualifications

• 5 years' experience in a large IT services environment.
• 2 years' experience in an information security role.
• Preferred certification from SANS, ISACA, or (ISC)2.

Responsibilities

• Conducts security threat and risk assessments.
• Analyzes security incidents and develops reports.
• Monitors security tracking tools and prepares reports.

Skills

Information security principles

Problem-solving

Analytical skills

Education

Bachelor's degree in Computer Science

Tools

Firewalls

Anti-virus software

Intrusion prevention systems

Job description

Salary

The salary range for this position is CAD $38.12 - $54.80 / hour
Job Summary

We are hiring a Full Time Leader, Information Security Analystto join our team in Surrey, B.C.

We invite you to apply today and find out why employees recommend Fraser Health to their friends as an exceptional place to work. We are committed to planetary health, we value diversity in the work force and seek to maintain an environment of Respect, Caring and Trust.

Joining our team offers you opportunities to work in a rapidly growing organization with health professionals who are excellent in their respective fields. Fraser Health offers opportunities for career growth and advancement and competitive benefits, including but not limited, to:

• Comprehensive, 100% Employer-Paid Benefits: Enjoy peace of mind with full coverage.
• Generous Vacation Time: Eligible employees can earn up to four weeks of vacation to recharge and relax.
• Benefit Portability: Seamlessly transfer your benefits from another HEABC employer.
• Immediate Pension Enrollment: Secure your future with a defined municipal pension plan from day one.
• Maternity Top-Up: Receive an 87% top-up during maternity leave.
• TransLink Pass Subsidy: Save on commuting costs with a 50% subsidy on TransLink passes.
• Additional employee discounts and perks available
• *Eligibility based on employment status

Take the next step and apply so we can continue the conversation with you.

Detailed Overview

Supporting the Vision, Values, Purpose and Commitments of Fraser Health including service delivery that is centered around patients/clients/residents and families:

The Information Security Analyst provides initial intake, assessment, and prioritization of requests for Health Informatics and Information Technology (HIIT) Information Security Services and/or events requiring incident response prioritizing based on risk and urgency, ensuring that work activities are logged and tracked and that higher priority events are appropriately escalated. The Analyst helps coordinate investigations for security-related incidents and policy violations as well as participates as a key member of an integrated breach response team. The Analyst deals with sensitive and critical situations and provides training and education on Fraser Health's security procedures, policies, and standards at all levels of the organization.

Responsibilities

1. Conducts HIIT Security threat and risk assessments, investigations, and performs incident management activities utilizing approved processes and techniques to conduct electronic audits, review security logs and gather forensic evidence.
2. Analyzes complex information through acute problem-solving to manage and investigate security incidents; develops reports, action plans, and response communications on mitigation strategies.
3. Monitors and maintains security tracking tools and associated databases and prepares reports and presentations on metrics and risk trends.
4. Maintains clear, concise, objective and complete documentation regarding all details of information security incidents and investigations to ensure action taken to contain and remediate these events are formally recorded.
5. Monitors and interprets security alerts generated by security monitoring systems to ensure appropriate and timely response to security-related incidents.
6. Participates in security, vulnerability, and risk assessments related to the information security features of the systems, networks, and related administrative activities; recommends mitigation strategies where necessary.
7. Participates in the design, implementation, and evaluation of information security projects, objectives, policies, and procedures.
8. Develops and proposes new operational security processes and enhancement of existing processes to ensure adherence to FH security policies, industry standards and legislated FIPPA requirements.
9. Provides day-to-day guidance and direction both verbally and in writing to internal staff, physicians, clinicians, and management on information security policy, standards, and best practices.
10. Assists in the delivery of Information Privacy and Security training programs and initiatives.
11. Promotes good security practices and an organization culture of information security awareness.
12. Performs other related duties as assigned.

Qualifications

Education and Experience

Bachelor's degree in Computer Science or a related field, plus five (5) years' recent, related experience in a large information technology services environment with a minimum of two (2) years' experience in an information security role, within a large organization, or an equivalent combination of education and experience. Preferred completion of intermediate to advanced information security certification from SANS, ISACA, (ISC)2 or other leading industry certification bodies.

Competencies

Demonstrates the leadership practices of the Fraser Health Leadership Framework of Clear, Caring and Courageous and creates the conditions for people to succeed.

Professional/Technical Capabilities:

• Comprehensive knowledge of information security principles, standards, best practices, and industry trends.
• Working knowledge of core security technologies including firewalls, anti-virus, intrusion prevention, and web content filtering. Experience in Security Incident Response.
• Investigative and analytical skills to research, analyze, and interpret data and information from a variety of disparate sources.
• Ability to utilize both analytical skills and conceptual thinking to identify and resolve issues.
• Advanced proficiency in business applications, Microsoft Office Suite, databases, internet/intranet, and report writing.
• Ability to operate related equipment including applicable software applications
• Physical ability to perform the duties of the position

About Fraser Health

Fraser Health is the heart of health care for over two million people in Metro Vancouver and the Fraser Valley in British Columbia, Canada, on the traditional, ancestral and unceded lands of the Coast Salish and Nlaka’pamux Nations and is home to 32 First Nations within the Fraser Salish region.

People - those we care for and those who care for them - are at the heart of everything we do. Our hospital and community-based services are delivered by a team of 48,000+ staff, medical staff and volunteers.

We are committed to planetary health and value diversity in the work force. We strive to maintain an environment of respect, caring and trust. Fraser Health’s hiring practices aspire to ensure all individuals are treated in an inclusive, equitable and culturally safe manner.

Together, we are the heart of health care.

Instagram | Facebook | LinkedIn | X | Indeed | Glassdoor

IMPORTANT: Recruitment scam warning

Please be on alert for recruitment scams. We are aware of several scams targeting individuals by falsely claiming to represent Fraser Health. Always take precautions when sharing personal details with unverified sources. Please note that we will never ask for money or payment, nor ask you to download or install an app at any point during our recruitment process.