Information Security Analyst

BC Financial Services Authority; Vancouver; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Healthy living and work-life balance

Comprehensive health and wellness plan

Opportunities for personal and profes‑

Hybrid work model

Defined benefits pension plan

Job summary

BC Financial Services Authority (BCFSA) is seeking an Information Security Analyst to protect data and services by monitoring security events, investigating threats, and supporting incident response and vulnerability management across the organization.

The role emphasizes implementing security controls, staying ahead of threats, and guiding internal stakeholders with practical security guidance in line with policies and standards. Hybrid work is available in downtown Vancouver.

Qualifications

• Experience with security operations tools and platforms such as SIEM, SOAR, XDR, EDR, cloud security, identity protection, vulnerability management, and firewall or security gateway technologies.
• Knowledge of Zero Trust security concepts and common security control frameworks.
• Knowledge of security and privacy issues and how they relate to business requirements, public sector operations, and privacy regulations.
• Ability to analyze security events, assess risk, document findings, and recommend practical remediation actions.

Responsibilities

• Monitor security events and alerts using enterprise security tools, including SIEM, SOAR, XDR, EDR, and cloud security platforms.
• Investigate and respond to cybersecurity incidents, security alerts, and suspicious activities, including security-related escalations.
• Coordinate incident response activities with internal technology teams, managed security service providers, and external partners.
• Document investigations, findings, actions taken, and lessons learned to support continuous improvement of security operations.
• Stay current with emerging threats, vulnerabilities, security technologies and best practices.
• Contribute to BCFSA’s security awareness program and knowledge-sharing initiatives.

Skills

SIEM/SOAR/XDR/EDR experience

Zero Trust

Privacy regulations knowledge

Risk assessment & remediation

FOIP/FIP confidentiality knowledge

Education

College diploma or university degree in computer science

Tools

SIEM

SOAR

XDR

EDR

Job description

BC Financial Services Authority (BCFSA) helps to protect British Columbians during the biggest financial decisions in their lives. We regulate B.C. ’s financial services sector, including credit unions, real estate licensees, registered pension plans, insurance and trust companies and mortgage brokers. Through modern, effective and efficient oversight, BCFSA protects consumers by impartially setting and enforcing standards across the entire sector ensuring the prosperity of the province.

BCFSA is an equal opportunity employer and welcomes applications from all groups. This includes Indigenous Peoples, women, visible minorities, persons with disabilities, persons of diverse sexual orientation, gender identity or expression (LGBTQ2S+), and others who may contribute to diversity at BCFSA.

We recognize unique styles, perspectives, beliefs, and creativity that support a diverse, respectful, inclusive and collaborative work environment. To achieve this, we are committed to:

• Hiring team members who represent the population we serve;

• Removing barriers that may prevent equitable employment; and

• Supporting respectful work environments where everyone feels included and able to produce excellent results.

BCFSA is proud to be selected as one of BC's Top Employers (2025) in recognition of our competitive compensation, work-life balance, and progressive programs.

WHAT WE OFFER:

When you join us, you become part of a high-performing team. Here, each Team Member can bring their unique talent to make outstanding contributions as we work towards the common goal of protecting British Columbians during the most important financial transactions in their lives. We offer:

• Healthy living and work-life balance

• Comprehensive health and wellness benefits plan

• Opportunities for personal and professional development

• A challenging and engaging team environment

• Defined benefits pension plan

• Our team members enjoy the flexibility of a hybrid work model. They can choose every day where they want to work to be the most effective, from the comfort of their home to our beautiful office in downtown Vancouver. (Eligibility may vary, depending on position).

SUMMARY

The Information Security Analyst supports protection of BCFSA’s data and services by monitoring security events, investigating and responding to cybersecurity threats, conducting investigations, supporting incident response and vulnerability management activities, improving security controls, and providing practical security guidance across the organization in accordance with established policies, standards, and procedures.

ACCOUNTABILITIES

• Monitor security events and alerts using enterprise security tools, including SIEM, SOAR, XDR, EDR, and cloud security platforms.
• Investigate and respond to cybersecurity incidents, security alerts, and suspicious activities, including security-related escalations.
• Conduct threat analysis and threat hunting activities to identify potential threats, indicators of compromise, and opportunities to improve detection capabilities.
• Coordinate incident response activities with internal technology teams, managed security service providers, and external partners.
• Document investigations, findings, actions taken, and lessons learned to support continuous improvement of security operations.
• Stay current with emerging threats, vulnerabilities, security technologies and best practices.
• Contribute to BCFSA’s security awareness program and knowledge-sharing initiatives.
• Validate identified vulnerabilities and work with other technology teams to prioritize remediation, including patch management.
• Supports information technology Threat and Risk Assessments.
• Contribute to business continuity, disaster recovery, and incident response planning.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices.
• Monitor all in-place security solutions for efficient and appropriate operations.
• Investigate problematic activity and manage security related escalations.
• Participate in the creation/updating of enterprise security documents (policies, standards, baselines, guidelines, and procedures).
• Participate in the planning and design of the enterprise Incident Response Plans, Business Continuity Plan and Disaster Recovery Plan.
• Acts as subject matter expert providing expert digital security guidance to internal stakeholders in accordance with established policies, standards, and procedures.

JOB REQUIREMENTS

• Experience with security operations tools and platforms such as SIEM, SOAR, XDR, EDR, cloud security, identity protection, vulnerability management, and firewall or security gateway technologies.
• Knowledge of Zero Trust security concepts and common security control frameworks.
• Knowledge of security and privacy issues and how they relate to business requirements, public sector operations, and privacy regulations.
• Ability to analyze security events, assess risk, document findings, and recommend practical remediation actions.
• Knowledge of Freedom of Information and Protection of Privacy services.
• Knowledge of change management processes and project management methodologies.
• Experience establishing and maintaining effective working relationships with a variety of organizations.
• Ability to exercise judgement, initiative, and discretion.
• Ability to clearly and concisely communicate complex information.
• Continuous learning

EDUCATION

• College diploma or university degree in the field of computer science and/or 3 years’ equivalent work experience.

CERTIFICATIONS

• One or more related certifications such as CompTIA CySA+, GIAC Security Essentials (GSEC), GIAC Certified Incident Handler (GCIH), Microsoft Certified: Security Operations Analyst Associate (SC-200), or Certified Ethical Hacker (CEH).

PROVISOS

Candidates must be eligible to work in Canada and living in British Columbia or intent to settle in the province.

Internal candidates are kindly requested to use their BCFSA email address when applying for this position. This will help us identify and streamline the internal application process.

Hiring Process Accommodation

BCFSA wants to ensure every job applicant is treated fairly and with respect and encourages applications from all candidates, including those with diverse abilities. We welcome you to inform us confidentially if you may require any special support in the application process, including disability accommodation, in order to participate fully in our recruitment experience. Email us at [e-mail] to notify us of any needs related to your job application.