Information Security Analyst

Fidelity Canada; Toronto; Hybrid; CAD 70,000 - 90,000; Full time

Job summary

A leading financial services firm in Toronto is looking for an Information Security Analyst to enhance their security protocols. You will work on secure coding and compliance for various applications, contribute to vulnerability assessments, and assist with security training. The ideal candidate has an IT-related degree and relevant experience in the financial services sector. The role offers a hybrid work schedule and comprehensive benefits.

Benefits

Flexible working arrangements

Comprehensive health benefits

Parental leave top-up

Generous time off policy

Professional development opportunities

Qualifications

• 2-3 years of relevant experience in financial services industry.
• Strong presentation and written skills.
• Knowledge of SDLC methodologies and tools.

Responsibilities

• Ensure development life cycle complies with information security requirements.
• Conduct security training & awareness.
• Assist with disaster recovery tests.

Skills

Vulnerability assessments

Secure coding

Cloud security knowledge

Interpersonal skills

Ability to multitask

Education

Bachelor's in Information Technology or Computer Science

Tools

Fortify

Veracode

ServiceNow

Job description

Job Description

Current work authorization for Canada is required for all openings.

You will be working on a Hybrid office schedule as part of Fidelity’s dynamic working arrangement.

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

Business Overview:

The Information Security Analyst supports the risk mitigation efforts of the Information Security group primarily through the technical support of the procedures and policies established to safeguard information assets.

What You Will Do:

• Ensure the development life cycle complies with the information security policy requirements on secure coding and secure access controls.
• Tests for compliance with security policies and procedures. May assist in the creation, implementation, and/or management of security solutions.
• Ensure the information security policy requirements are communicated and taken into account by internal Infrastructure & development teams as well as third party vendors.
• Perform vulnerability analysis and issues management in pre-production and production applications & systems using standard application vulnerability scanning tools.
• Review and challenge any changes proposed to application controls including, but not limited to, data encryption, user security profiles / bands and entitlements as well as input, processing and output controls such as edit checks, control totals and data validation / integrity checks.
• Assist with assessment and integration of cloud vendors and SaaS from an Information Security requirements perspective.
• Review and update application security information and documentation in our asset registry.
• Conduct External Security Reviews on Fidelity vendors who have access to confidential information or perform critical functions.
• Assist in monitoring Fidelity’s Data Loss Prevention (DLP) tool and conduct investigations.
• Assist in conducting Security Training & Awareness.
• Provide assistance for Disaster Recovery (DR) team including support of DR tests.

The Expertise You Bring:

• 2-3 years of relevant experience in financial services industry
• Bachelors in Information Technology, Computer Science or a related discipline or equivalent working experience
• Knowledge of vulnerability assessments, secure code and infrastructure security reviews for internal and external facing (web) applications
• Knowledge of SDLC methodologies and tools. Development background is highly desirable
• Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture
• Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure etc.
• Understanding of industry audit standards, i.e. SSAE-16, FFIEC, and PCI-DSS
• Strong interpersonal skills like being a team player and effective collaborator with many different types of audiences
• Ability to multitask and handle multiple projects
• Strong presentation and written skills

Nice to have:

• Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow
• CISSP and Cloud Security certification

Some of the ways we’ll help you feel valued and supported as part of our team:

• Flexible working arrangements - 100% remote, hybrid, and in office options
• Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
• Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy
• Parental leave top-up to 100% of your salary for a period of 25 weeks
• Up to $650 for home office equipment
• Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
• Diversity and inclusion programs, including an active network of Employee Resource Groups
• Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
• We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.

Fidelity Canada is an equal opportunity employer

Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.

Accommodation during the application process

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [e-mail] .

No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.

Why Work at Fidelity?

We are proud to be recipients of the following:

Awards

• Canada's Top 100 Employers
o Greater Toronto's Top Employers
o Canada's Top Family-Friendly Employers
o Canada's Top Employers for Young People

• Great Place To Work Certified
o Best Workplaces for Inclusion
o Best Workplaces for Mental Wellness
o Best Workplaces for Today's Youth
o Best Workplaces for Women
o Best Workplaces in Financial Services & Insurance
o Best Workplaces in Ontario
o Best Workplaces with Most Trusted Executive Teams

• LinkedIn Top Companies in Canada

• Human Resource Director (HRD) - Best Place To Work
o HRD - 5-Star Benefit Program
o HRD - 5-Star Diversity & Inclusion Employer

Designations
• Canadian Compassionate Companies – Certified
• Benefits Canada's Workplace Benefits Award - Future of Work Strategy
• TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
• Canadian HR Reporter's Most Innovative HR Team