Information Security Analyst

Manitoba Blue Cross; Winnipeg; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work environment

Competitive starting salary

Comprehensive health benefit package

Fully equipped onsite fitness center

Casual dress code

Personal and professional development

Job summary

Manitoba Blue Cross is seeking an Information Security Analyst to safeguard systems, networks, and data. You will assess risks, monitor security tools, and coordinate remediation efforts while collaborating with IT and business teams to strengthen our cybersecurity posture.

The role includes security governance, incident response, and training to foster a culture of cybersecurity awareness across the organization.

Qualifications

• Post-secondary degree or diploma in a related field is required.
• 5+ years of experience in information security or a related role.
• Industry certifications such as CISSP, CISA, CISM, CRISC or GIAC are assets.

Responsibilities

• Conducts security assessments and risk analyses to identify vulnerabilities and threats.
• Monitors security tools, logs, and alerts to detect and respond to incidents.
• Collaborates to develop and implement security policies, procedures, and best practices.
• Coordinates penetration testing and vulnerability assessments and remediation activities.
• Provides security awareness training and guidance to employees.

Skills

Cybersecurity

Risk assessment

Incident response

Security governance

Cloud security

Education

Post-secondary degree in a related field

Certifications: CISSP/CISA/CISM/CRISC/GIAC

Tools

EDR

NDR

DLP

SASE

Cloud security controls (AWS/Azure)

Job description

About Manitoba Blue Cross

We’re a Manitoba-based, not-for-profit, health benefits provider with a vision to be the trusted and essential health and wellness partner for all Manitobans. Every dollar made is reinvested in our infrastructure, our people, and our province with the goal of providing better care for our members, expanding our community impact and broadening our health care knowledge.

Why work for us?

Manitoba Blue Cross, is a Manitoba Top Employer. We are empowered to give back to the community, and we know that caring needs to start in our workplace with our own Manitoba Blue Cross team. We actively foster a culture that focuses on your satisfaction, development, diversity, and growth.

Culture of Caring

We strive to succeed at reaching our organizational goals, but we always make time to celebrate our successes. Having fun as a group and rewarding our employees for their accomplishments is an essential part of our workplace culture.

We want our workforce to reflect the diverse community we serve, and we're committed to creating a fair and respectful workplace. We offer a work environment that promotes a healthy work-life balance and support to advance your career that includes:

• Competitive starting salary.
• A comprehensive health benefit package.
• Hybrid work environment, flexible work schedules.
• Fully equipped onsite fitness center.
• Casual dress code to promote diversity and inclusivity.
• Personal and professional development.

Are you a driven, dedicated, and enthusiastic individual who wants to work in a friendly and rewarding environment? If so, we are looking for someone like you! The following position is open to anyone residing in Winnipeg and surrounding areas with valid work authorization.

POSITION SUMMARY

The Information Security Analyst safeguards the organization’s systems, networks, and data from cyber threats by assessing risks through security monitoring, risk assessment, vulnerability management, incident response, and security governance activities. The role works collaboratively with IT teams, business stakeholders, and third parties to improve the organization’s cybersecurity posture, supports regulatory compliance, and promotes a culture of cybersecurity awareness

DUTIES AND RESPONSIBILITIES

• Conducts regular security assessments and risk analyses to identify vulnerabilities and potential threats to our systems and networks.
• Monitors security tools, logs and alerts to detect and respond to security incidents promptly.
• Collaborates with cross-functional teams to develop and implement security policies, procedures, and best practices.
• Coordinates penetration testing and vulnerability assessments to evaluate the effectiveness of existing security controls as well as tracks and coordinates remediation activities.
• Participates in the design and implementation of security solutions.
• Stays current on the latest cybersecurity trends, threats, and technologies to continuously improve organizational security posture.
• Provides security awareness training and guidance to employees to promote a culture of cybersecurity awareness throughout the organization.
• Assists in incident response and recovery efforts, including forensic analysis and remediation activities.
• Monitors compliance with the organization's IT security policies and procedures among all employees, contractors, and other third parties.
• Assists in the development and implementation of appropriate IT security policies, standards, guidelines and procedures.
• Provides security assessments for change management, project management and architectural reviews.
• Performs security reviews and risk assessments of third-party vendors, service providers, and cloud-based solutions.
• Prepares security metrics, risk reports, and recommendations to support management decision-making and continuous improvement of the organization's security program.
• Demonstrates a strong commitment to continuous learning, professional development, and expanding technical knowledge.
• Performs other related duties as assigned.

SKILLS & QUALIFICATIONS

• Dedicated to the principles of exceptional service; committed to responding to, anticipating, and addressing customer needs, for both internal and external customers.
• Post-secondary degree, diploma or certificate in a related field is required.
• 5 or more years of experience in information security or a related role.
• Industry certifications such as CISSP, CISA, CISM, CRISC or GIAC certifications is an asset.
• Strong understanding of cybersecurity principles, best practices, and technologies.
• Familiarity with a broad array of modern security software, applications and tools, such as EDR, NDR, DLP and SASE technologies.
• Working knowledge of Microsoft 365, Windows desktop and server, Linux and Active Directory.
• Proficient understanding of IP-based networking and network devices.
• Strong communication and interpersonal skills, with the ability to interact effectively with all levels of the organization, external partners and service providers.
• Demonstrates strong organizational skills, with the ability to independently prioritize multiple tasks effectively. Capable of managing unstructured and non-routine assignments and developing innovative solutions to challenges.
• Proficient verbal and written communicator, with the ability to clearly communicate for understanding, resulting in concise and clear documentation and business requirements.
• Experience with cloud security and compliance frameworks (e.g., AWS, Azure, NIST, CIS) is an asset.

To learn more visit: https://www2.mb.bluecross.ca/about-us/careers

We appreciate the interest expressed by all applicants and acknowledge the effort put into the application process, however only those selected for an interview will be contacted.

Manitoba Blue Cross is committed to the principles of diversity, equity & inclusion and to promoting opportunities in hiring for everyone. We want our workforce to reflect the diverse community we serve, and we're committed to creating a fair and respectful workplace.

If you require an accommodation during the hiring process, please let us know.