Information Security Analyst

Fidelity Investments; Toronto; Hybrid; CAD 70,000 - 90,000; Full time

Job summary

A leading financial services company is seeking an Information Security Analyst to support risk mitigation efforts. You will ensure compliance with security policies, perform vulnerability assessments, and assist in security training. The ideal candidate has a Bachelor's degree in IT and 2-3 years of relevant experience. Competitive compensation and flexible working arrangements are offered.

Benefits

Flexible working arrangements

Competitive total compensation

Comprehensive health benefits

Parental leave top-up

Home office equipment allowance

Generous time off policy

Extensive professional development opportunities

Qualifications

• 2-3 years of relevant experience in financial services industry.
• Knowledge of SDLC methodologies and tools.
• Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure.

Responsibilities

• Ensure the development life cycle complies with information security policies.
• Perform vulnerability analysis on production applications.
• Assist with assessment and integration of cloud vendors.

Skills

Knowledge of vulnerability assessments

Strong interpersonal skills

Ability to multitask

Knowledge of secure coding

Strong presentation skills

Education

Bachelors in Information Technology

Tools

Fortify

CISSP

ServiceNow

Job description

Description

Current work authorization for Canada is required for all openings.

You will be working on a Hybrid office schedule as part of Fidelity’s dynamic working arrangement.

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

Business Overview :

The Information Security Analyst supports the risk mitigation efforts of the Information Security group primarily through the technical support of the procedures and policies established to safeguard information assets.

What You Will Do :

• Ensure the development life cycle complies with the information security policy requirements on secure coding and secure access controls.
• Tests for compliance with security policies and procedures. May assist in the creation, implementation, and / or management of security solutions.
• Ensure the information security policy requirements are communicated and taken into account by internal Infrastructure & development teams as well as third party vendors.
• Perform vulnerability analysis and issues management in pre-production and production applications & systems using standard application vulnerability scanning tools.
• Review and challenge any changes proposed to application controls including, but not limited to, data encryption, user security profiles / bands and entitlements as well as input, processing and output controls such as edit checks, control totals and data validation / integrity checks.
• Assist with assessment and integration of cloud vendors and SaaS from an Information Security requirements perspective.
• Review and update application security information and documentation in our asset registry.
• Conduct External Security Reviews on Fidelity vendors who have access to confidential information or perform critical functions.
• Assist in monitoring Fidelity’s Data Loss Prevention (DLP) tool and conduct investigations.
• Assist in conducting Security Training & Awareness.
• Provide assistance for Disaster Recovery (DR) team including support of DR tests.

The Expertise You Bring :

2-3 years of relevant experience in financial services industry

Bachelors in Information Technology, Computer Science or a related discipline or equivalent working experience

Knowledge of vulnerability assessments, secure code and infrastructure security reviews for internal and external facing (web) applications

Knowledge of SDLC methodologies and tools. Development background is highly desirable

Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture

Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure etc.

Understanding of industry audit standards, i.e. SSAE-16, FFIEC, and PCI-DSS

Strong interpersonal skills like being a team player and effective collaborator with many different types of audiences

Ability to multitask and handle multiple projects

Strong presentation and written skills

Nice to have :

Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow

CISSP and Cloud Security certification

Some of the ways we’ll help you feel valued and supported as part of our team :

Flexible working arrangements - 100% remote, hybrid, and in office options

Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you

Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy

Parental leave top-up to 100% of your salary for a period of 25 weeks

Up to $650 for home office equipment

Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice

Diversity and inclusion programs, including an active network of Employee Resource Groups

Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation

We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.