Information Security Analyst 3

Canada Life; Toronto; On-site; CAD 88,000 - 147,000; Full time

Job summary

An established industry player is seeking an experienced Information Security Analyst to bolster their cyber defense team. This pivotal role involves collaborating with IT and business partners to manage information security risks and ensure compliance with policies. You will conduct security assessments, implement security controls, and develop strategies to address emerging threats. If you have a strong technical background and a passion for enhancing security posture, this opportunity offers a chance to make a significant impact in a trusted and inclusive workplace. Join us in improving the well-being of Canadians.

Qualifications

• Minimum 7 years in Information Security/IT, focusing on Risk Management.
• Certifications like CISSP, CCSP, CISM, CISA preferred.

Responsibilities

• Provide information security consultation to business and IT stakeholders.
• Conduct security risk assessments and develop vulnerability assessments.

Skills

Information Security

Risk Management

Security Assessments

Technical Background in Networks

Negotiation Skills

Data Visualization

Education

Post-secondary degree in Business or Technology

Tools

PowerPoint

Power BI

AWS

Azure

Job description

Join to apply for the Information Security Analyst 3 role at Canada Life.

This is a senior security role within the first line of cyber defense, working with IT and business partners to manage information security risks and ensure policy compliance. The role supports analysis-based cyber security services across Canada, including security assessments, stakeholder inquiries, and security control evaluations.

The position reports to the AVP, Business Information Security, within the Canada group and is available in Toronto, London (Ontario), or Winnipeg (Manitoba).

What You Will Do

• Provide information security consultation to business and IT stakeholders.
• Offer security guidance on contractual security requirements, collaborating with Legal and Business teams for negotiations and RFP responses.
• Implement security controls in projects, ensuring the protection of confidential information and enhancing security posture.
• Conduct security risk assessments and research emerging threats.
• Develop and perform vulnerability assessments, documenting findings.
• Collaborate creatively to solve unique security challenges.
• Work proactively with clients to understand needs and deliver solutions.
• Review vulnerability reports (SAST, DAST, IAST, SCA, Penetration Testing, Infrastructure and Endpoint Vulnerability Testing) to identify weaknesses and prioritize remediations.

What You Will Bring

• Post-secondary degree in Business, Technology, or related field, or equivalent experience.
• Minimum 7 years in Information Security/IT, focusing on Risk Management.
• Certifications like CISSP, CCSP, CISM, CISA preferred.
• Experience interpreting and consulting on security principles, standards, and protocols.
• Knowledge of security assessments, attack vectors, and mitigation controls.
• Strong technical background in networks, servers, applications, cloud (AWS, Azure), and security technologies.
• Familiarity with IT control frameworks (SOC, ISO 27001, NIST).
• Proficiency in PowerPoint, Power BI, and data visualization.
• Self-starter with strategic thinking, negotiation skills, and ability to influence.

The salary ranges from $88,100 to $146,800 annually, excluding bonuses and other incentives. Applications are reviewed on a rolling basis, with a minimum of 5 business days from posting.

Canada Life values diversity and inclusion, providing accommodations during the application process upon request. For assistance, contact [e-mail].

Only qualified candidates will be contacted for an interview. Join us to help improve the well-being of Canadians and be part of a trusted, inclusive workplace.