Information Security Analyst (IT)

Firstontario Credit Union Limited; Hamilton; Hybrid; CAD 70,000 - 96,000; Full time

Benefits offered by this job

Competitive compensation packages

Top-tier health and wellness benefits,

Mental health benefits

Flex-work environment

Employee Volunteer program

Employee and Family Assistance Program

Job summary

FirstOntario Credit Union Limited is seeking an Information Security Analyst to oversee day-to-day security operations and investigate security events. You will help implement new security solutions, maintain baselines, and document security policies and procedures.

Responsibilities include planning security architecture, vulnerability assessments, and coordinating with stakeholders to remediate issues. A strong IT security background and relevant certifications are required.

Qualifications

• College diploma or university degree in computer science or related field.
• 4–6 years of IT security experience.
• Security certifications such as CompTIA Security+, GIS(P)/CISA/CCFP, Microsoft Security Ops, or ISC2 Associate.
• Experience with SEIM, Firewalls and data classification.
• Experience with EDR, CASB, IDPS and related security technologies.
• Familiar with MITRE, CIS, NIST, PCI, COBIT and ISO 27001.
• Knowledge of VMware vSphere, vCenter and ESXi is an asset.
• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.

Responsibilities

• Participate in planning and design of enterprise security architecture.
• Create enterprise security documents (reports, baselines, procedures).
• Contribute to Business Continuity and Disaster Recovery planning.
• Monitor networks and systems for security issues and document findings.
• Investigate security incidents and escalate to IT Security Manager.
• Assist in penetration tests and security audits.
• Execute vulnerability assessments and coordinate remediation.
• Provide on-call support for security solutions.
• Monitor IT/GRC data and KPI/KRI reporting.

Skills

IT security experience

Security certifications

SEIM & firewall expertise

EDR & CASB knowledge

Vulnerability management

Networking fundamentals

Windows & Linux

Analytical skills

Communication skills

Team collaboration

Travel ability

Education

College degree in CS or related field

CompTIA Security+

GIAC GISP

Microsoft Security ops cert

CAP/CISA/CCFP

(ISC)2 Associate

Tools

Varonis

VMware vSphere/ESXi

Job description

Why FirstOntario?

• Competitive compensation packages
• Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
• Enhanced mental health benefits through SunLife and TELUS Health
• Flex-work environment
• Company-wide Employee Volunteer program (Blue Wave Program)
• Employee and Family Assistance Program

Job Overview

The Information Security Analyst performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation and resolution of security events detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines and procedures as well as conducting vulnerability audits and assessments. The IT Security Analyst is expected to monitor computer networks and systems for security issues, and document any security issues or breaches, in line with the enterprise's security goals as established by FirstOntario's policies, procedures and guidelines and to actively work towards upholding those goals.

Role

• Participate in the planning and design of enterprise security architecture, under the direction of the Manager of IT Security.
• Create enterprise security documents (reports, baselines, guidelines and procedures) as required.
• Participate in the execution of an enterprise Business Continuity Plan and Disaster Recovery Plan.
• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, new or revised security best practices and standards, and the latest attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Deploy, integrate and configure all new security solutions and any enhancements to existing security solutions in accordance with standard best practices generally and the enterprise's security documents specifically.
• Maintain up-to-date security baselines for the secure configuration and operations of assets, whether they are under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• Monitor all assets for compliance with security baselines, security documents, and enterprise policies.
• Maintain operational configurations of all security solutions as per the established baselines.
• Monitor all security solutions for efficient and appropriate operations.
• Review logs and reports of all assets, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Investigate problematic activity and report the findings to the Manager of IT Security.
• Participate in the design and execution of penetration tests and security audits.
• Design, and execute vulnerability assessments and discuss resolution planning with appropriate stakeholders
• Provide on-call support for end users for all security solutions (ex. Blocked email).
• Monitor for IT and Security policy violation(s) and recommend corrective action(s).
• Participate in IT GRC and data governance activities to ensure accurate and valuable KPI/KRI data for reporting
• Monitor, Maintain, and respond to alerts of Physical Security solutions such as Camera System and Physical Access Control
• Execute and continuously improve quarterly programs and audits such as Security Awareness Training, Access and Permission Audit, User Account audit, etc.

Required Skills

• College diploma or university degree in the field of computer science and at least 4-6 years of experience in an IT related role.
• One or more of the following or equivalent Security certification:
  • CompTIA Security+
  • GIAC Information Security Professional (GISP)
  • Microsoft Certified: Security Operations Analyst Associate
  • CAP, CISA, CCFP
  • Associate of (ISC)2
• Experience with SEIM, Firewalls & data classification
• Experience with endpoint detection and response (EDR), CASB, IDPS and other security technologies.
• Demonstrated knowledge of security frameworks and standards such as MITRE, CIS, NIST, PCI, COBIT and ISO 27001.
• Experience with Varonis is an asset.
• Knowledge of VMware vSphere, vCenter and ESXI is an asset.
• Working technical knowledge of system vulnerability scanning and remediation.
• Strong understanding of OSI Model, IP, TCP/IP, and other network administration protocols.
• Strong understanding of Windows and Linux operating systems.
• Familiarity with core banking system related security.
• Proven analytical and problem-solving abilities.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to conduct research into IT security issues and products as required.
• Ability to present ideas in a business-friendly and user-friendly language.
• Strong written and verbal communication skills
• Team-oriented and skilled in working within a collaborative environment.
• Lifting and transporting moderately heavy objects, such as computers and peripherals.
• Valid Driver's license and ability to travel to branch location as required.
• Perform other duties as assigned.

This posting is for an existing vacancy.

Salary Range: $69,931 to $96155 annually.

Compensation for this role reflects a combination of skills, experience, and internal equity. Those whose experience more closely aligns the role's requirements may be placed higher within the salary range. You will learn more about FirstOntario Credit Union's total rewards package during the interview process.

Our inclusive work environment welcomes diversity and supports accessibility. If you require accommodation at any time during the recruitment process, please let us know.