Information Security Analyst

Jobtailor; Toronto; On-site; CAD 70,000 - 110,000; Full time

Job summary

Jobtailor in Toronto, Canada is seeking a Information Security Vulnerability Management Analyst to contribute to the delivery of vulnerability management capabilities across infrastructure and applications.

You will manage internal and external vulnerability scanning, track identified vulnerabilities, and report findings to management, while exploring automation opportunities to enhance security processes in line with the Digital Enterprise model.

Qualifications

• University degree or certificate in Information Security or Computer Technology is an advantage.
• Intermediate IT/Information Security experience in vulnerability management or core security technologies.
• Knowledge of Information Security principles, protocols, practices, and industry standards.
• Experience with ServiceNow modules and scanning tools.
• Professional designation relating to Information Security is an advantage but not mandatory.

Responsibilities

• Participate in delivery of Vulnerability Management capability and related services within Digital Security Threat Management.
• Manage internal and external vulnerability scanning processes.
• Track and report identified vulnerabilities.
• Monitor vulnerabilities and perform classification and investigation follow-up.
• Investigate and report information security vulnerabilities across infrastructure and application environments.
• Identify opportunities to automate or enhance Vulnerability Management processes in alignment with the Digital Enterprise model.

Skills

Vulnerability Management

Information Security Principles

ServiceNow Modules

Risk Reporting

Automation of Processes

Education

Security+ certification

CISSP

CISM

CISA

Tools

ServiceNow

Vulnerability Scanning Tools

MS Office

Job description

• Participate in delivery of the Information Security Vulnerability Management capability and related services within Digital Security Threat Management
• Manage internal and external vulnerability scanning processes
• Track and report identified vulnerabilities
• Monitor vulnerabilities and perform classification and investigation follow-up
• Investigate and report information security vulnerabilities across infrastructure and application environments
• Participate in the Information Security Program, including Enterprise Vulnerability Management, Risk Reporting, and security program initiatives
• Research vulnerabilities and threats
• Write technical and non-technical reports for management
• Identify opportunities to automate or enhance Vulnerability Management processes in alignment with the Digital Enterprise model

Requirements

• University degree or Certificate in Information Security or Computer Technology is an advantage
• Intermediate IT/Information Security experience in vulnerability management or core security technologies
• Intermediate Internet, networking, and computer knowledge, including software and hardware
• Knowledge of Information Security principles, protocols, practices, and industry standards
• Understanding of existing and emerging Information Security technologies
• Good generalist technology knowledge, especially IT architecture
• Experience with ServiceNow modules and scanning tools
• Proficient knowledge of MS Office, including Word, PowerPoint, and Excel
• Professional designation relating to Information Security, such as Security+, CISSP, CISM, or CISA, is an advantage but not mandatory
• Previous hands-on security technology experience
• Detail-oriented with organizational and analytical skills
• Excellent communication and collaboration skills

Core Competencies

Demonstrates expertise in Information Security Vulnerability Management, including vulnerability scanning, risk reporting, and the ability to investigate and report on security vulnerabilities across various environments. Proficient in utilizing tools like ServiceNow and MS Office to enhance security processes and reporting.

Highest-signal resume keywords

• Vulnerability Management
• Information Security Principles
• ServiceNow Modules
• Risk Reporting
• Security Certifications

Hard Skills

• Vulnerability Scanning
• Information Security
• IT Architecture
• Network Knowledge
• Security Technologies
• Analytical Skills
• Technical Reporting
• Automation of Processes
• Risk Assessment
• Threat Research

Soft Skills

• Detail-Oriented
• Organizational Skills
• Excellent Communication
• Collaboration Skills

Certifications & Qualifications

• Security+
• CISSP
• CISM
• CISA

Industry Keywords

• Information Security
• Vulnerability Management
• Risk Reporting
• Security Protocols
• Industry Standards

Tools & Technologies

• ServiceNow
• Vulnerability Scanning Tools
• MS Office