Information Security Analyst - Security Awareness & Training

TechAlliance of Southwestern Ontario, London Economic Development Corporation; Toronto; On-site; CAD 95,000 - 145,000; Full time

Benefits offered by this job

Education reimbursement

Health & dental benefits

Mental health benefit

Volunteer day

Pension plan

Employee discounts

Job summary

Canada Life in Toronto, ON (multiple locations) seeks an experienced Senior Information Security Analyst focused on security awareness and training. You will develop, implement, and enhance a comprehensive training program to educate employees on security best practices and threat prevention across Canada, US, and Europe.

The role requires deep knowledge of cybersecurity threats, effective communication, and collaboration with stakeholders to elevate the security culture.

Qualifications

• Bachelor’s degree or equivalent experience in IT or related field.
• Minimum five years’ IT experience with at least three in information security.
• CISSP or CISM (or actively pursuing) preferred.
• Excellent communicator with presentation/negotiation skills.
• Strong knowledge of IT controls, regulatory requirements (COBIT, ISO 27001, NIST CSF; OSFI B13).
• Able to work independently, deliver on commitments, and build trust.

Responsibilities

• Develop, implement, and maintain security awareness and training programs for employees.
• Design targeted campaigns against phishing, deepfakes, AI-assisted attacks, and social engineering.
• Evaluate and update training materials to align with industry standards and regulations.
• Create training learning paths for various audiences within the organization.
• Manage training platform administration and content updates.
• Produce engaging training materials: paths, workshops, webinars, and internal posts.
• Track training effectiveness and phishing simulation results; drive program improvements.
• Plan Cybersecurity Awareness Month programming with senior leaders.
• Stay updated on industry trends to keep programs relevant.
• Collaborate on incident response to feed lessons into training materials.

Skills

5+ years IT security experience

Security risk management

Excellent communication skills

Analytical problem solving

Bilingual English/French (asset)

Education

Bachelor’s degree in IT or related field

Tools

NIST CSF, COBIT, ISO 27001

Security training platform

Job description

Information Security Analyst - Security Awareness & Training

Description:

Permanent Full Time

-

The Senior Information Security Analyst – Security Awareness & Training plays a crucial role in our first line of cyber defense. This position involves collaborating with various stakeholders, including technology and business partners, to effectively manage information security risks and ensure compliance with organizational policies. Additionally, the role supports the delivery of analysis-driven cybersecurity services to our internal clients across Canada, US, and European segments.

We are seeking a highly skilled and experienced Senior Information Security Analyst to join our team in the Information Security & Technology Risk department. This role will primarily focus on security awareness and training. The successful candidate will play a critical role in implementing security awareness and training program requirements, enhancing the program based on evolving needs to elevate the security culture and drive behavioral change, and collaborating across our segments to improve the cybersecurity culture.

The ideal candidate should possess in-depth knowledge of security awareness and training, cybersecurity threats, risks, and mitigation strategies, along with the ability to communicate security concepts effectively to all levels of the organization.

What you will do:

• Develop, implement, and maintain security awareness and training program to educate employees on security best practices, threat prevention, and response procedures.
• Design targeted campaigns to address emerging threats such as phishing, deepfakes, AI assisted attacks, and social engineering.
• Evaluate and enhance training materials to ensure alignment with industry standards, regulatory requirements, and the evolving threat landscape.
• Create comprehensive security training learning paths tailored to various audiences within the organization.
• Manage user accounts, content updates, reporting functionalities, and other administrative actions through our security training platform.
• Create engaging training materials, including learning paths, lunch & learns, workshops, informational resources, webinars, and internal social media posts that promote a culture of security awareness.
• Track and report on training effectiveness and phishing simulation results, using data to continuously improve training programs.
• Plan and deliver on Cybersecurity Awareness Month programming, partnering with senior leaders across the organization to enhance cybersecurity culture.
• Keep up with the latest trends in cybersecurity threats and awareness training methodologies to ensure programs remain relevant and effective.
• Collaborate in the incident response tasks to analyze security incidents and develop training materials that address identified vulnerabilities.
• Strong desire to work collaboratively in an unconventional and non-linear way to problem-solve unique solutions.
• Be customer focused and delivery oriented to drive change in ambiguous situations.
• Collaborate proactively with internal clients to understand their needs and deliver creative solutions.
• Strive for continuous learning and can influence others.

What you will bring:

• Bachelor’s degree from an accredited college or university or equivalent experience.
• Minimum five years’ experience as an information technology professional with at least three of those in information security demonstrating the accountabilities as listed above.
• Holds at least one information security certification or actively working towards at least one security certification (e.g. CISSP, CISM).
• Excellent communicator including demonstrated presentation and negotiation skills.
• Experience interpreting and consulting around meeting the requirements of the Information Security Policies and Standards for a large organization.
• Strong knowledge of IT control frameworks and regulatory requirements such as COBIT, ISO 27001, and the NISTcyber security framework; along with OSFI B13.
• Working knowledge of IT Audit processes, including design of control test procedures.
• Demonstrated ability to foster relationships and build trust.
• Ability to work independently and deliver on commitments.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Bilingualism (English/French) will be considered an asset

The base salary for this position is between $94,800 - $144,800 annually. This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc). If you are selected to move forward in our recruitment process, your recruiter will be able to discuss additional details of our total rewards program with you.

Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis.

Grow with Canada Life

We’reunited by a shared purpose: to improve the financial,physicaland mental well beingof Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country.

We’relooking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers,communitiesand each other.Are you someone who always strives to do the right thing, who steps up for themselves and others, and who delivers with impact? Then we want to hear from you!

What we offer

We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member:

• Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to$2,000 annuallytowardseducation reimbursement.

• Health & Wellness: Flexible health and dental benefits,plus a $5,000 mental health benefit to support your well-being.

• Time Off: In addition to regular vacation andpersonal days,we support communityinvolvement with avolunteer day.

• Financial Security: Company-matching pension plan,share ownership program andadditionalinvestment options.

• Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more!
• Emphasis onCommunity: We provide aworkplace whereemployeesfeel connected and supported throughEmployee Resource Groups (ERGs),mentorshipprograms,socialclubsandevents.

Learn moreaboutCanada Life .

We’recommitted to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact [e-mail]. All information provided will be handledin accordance withapplicable lawsand Canada Life policies.

Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.

Location: Toronto, ON, CA London, ON, CA Winnipeg, MB, CA