Information Security Analyst - Security Awareness & Training

Canada Life; Winnipeg; On-site; CAD 95,000 - 145,000; Full time

Benefits offered by this job

Education reimbursement up to $2,000

Health & dental benefits

Mental health benefit

Job summary

Canada Life is seeking a Senior Information Security Analyst focused on security awareness and training. You will lead development and delivery of programs that educate employees, drive behavioral change, and strengthen the organization’s cybersecurity culture across Canada, the US, and Europe.

Strong communications and policy‑driven risk knowledge are essential. You will design campaigns, marshal training resources, and measure effectiveness while partnering with business and technology teams

Qualifications

• Bachelor’s degree from an accredited college or university or equivalent experience.
• Minimum five years’ experience in information technology with at least three in information security.
• Holds at least one information security certification or pursuing one (e.g., CISSP, CISM).
• Excellent communicator with strong presentation and negotiation skills.
• Experience interpreting and advising on Information Security Policies and Standards for a large organization.
• Knowledge of COBIT, ISO 27001, NIST CSF; OSFI B13.
• Experience with IT Audit processes and control testing.
• Proven ability to build relationships and work independently.
• Strong analytical, problem‑solving, and written/verbal communication skills.
• Bilingualism (English/French) is an asset.

Responsibilities

• Develop, implement, and maintain security awareness and training programs for employees.
• Design campaigns to counter phishing, deepfakes, AI‑assisted attacks, and social engineering.
• Evaluate and update training materials to meet industry standards and regulatory requirements.
• Create learning paths tailored to different audiences and roles.
• Manage accounts, content updates, reporting, and administration of the training platform.
• Create engaging training content including webinars and workshops.
• Track training effectiveness and phishing simulation results to drive improvement.
• Plan Cybersecurity Awareness Month programming with senior leaders.
• Keep up with evolving threats and training methodologies.

Skills

Security awareness

Communication skills

Risk management

IT control frameworks

IT Audit

Independent work

Analytical thinking

Problem solving

Verbal communication

Education

Bachelor’s degree

Job description

Permanent Full Time

The Senior Information Security Analyst – Security Awareness & Training plays a crucial role in our first line of cyber defense. This position involves collaborating with various stakeholders, including technology and business partners, to effectively manage information security risks and ensure compliance with organizational policies. Additionally, the role supports the delivery of analysis-driven cybersecurity services to our internal clients across Canada, US, and European segments.

We are seeking a highly skilled and experienced Senior Information Security Analyst to join our team in the Information Security & Technology Risk department. This role will primarily focus on security awareness and training. The successful candidate will play a critical role in implementing security awareness and training program requirements, enhancing the program based on evolving needs to elevate the security culture and drive behavioral change, and collaborating across our segments to improve the cybersecurity culture.

The ideal candidate should possess in-depth knowledge of security awareness and training, cybersecurity threats, risks, and mitigation strategies, along with the ability to communicate security concepts effectively to all levels of the organization.

What you will do:

• Develop, implement, and maintain security awareness and training program to educate employees on security best practices, threat prevention, and response procedures.


• Design targeted campaigns to address emerging threats such as phishing, deepfakes, AI assisted attacks, and social engineering.


• Evaluate and enhance training materials to ensure alignment with industry standards, regulatory requirements, and the evolving threat landscape.


• Create comprehensive security training learning paths tailored to various audiences within the organization.


• Manage user accounts, content updates, reporting functionalities, and other administrative actions through our security training platform.


• Create engaging training materials, including learning paths, lunch & learns, workshops, informational resources, webinars, and internal social media posts that promote a culture of security awareness.


• Track and report on training effectiveness and phishing simulation results, using data to continuously improve training programs.


• Plan and deliver on Cybersecurity Awareness Month programming, partnering with senior leaders across the organization to enhance cybersecurity culture.


• Keep up with the latest trends in cybersecurity threats and awareness training methodologies to ensure programs remain relevant and effective.


• Collaborate in the incident response tasks to analyze security incidents and develop training materials that address identified vulnerabilities.


• Strong desire to work collaboratively in an unconventional and non-linear way to problem-solve unique solutions.


• Be customer focused and delivery oriented to drive change in ambiguous situations.


• Collaborate proactively with internal clients to understand their needs and deliver creative solutions.


• Strive for continuous learning and can influence others.

What you will bring:

• Bachelor’s degree from an accredited college or university or equivalent experience.


• Minimum five years’ experience as an information technology professional with at least three of those in information security demonstrating the accountabilities as listed above.


• Holds at least one information security certification or actively working towards at least one security certification (e.g. CISSP, CISM).


• Excellent communicator including demonstrated presentation and negotiation skills.


• Experience interpreting and consulting around meeting the requirements of the Information Security Policies and Standards for a large organization.


• Strong knowledge of IT control frameworks and regulatory requirements such as COBIT, ISO 27001, and the NIST cyber security framework; along with OSFI B13.


• Working knowledge of IT Audit processes, including design of control test procedures.


• Demonstrated ability to foster relationships and build trust.


• Ability to work independently and deliver on commitments.


• Strong analytical and problem-solving skills.


• Strong written and verbal communication skills.


• Bilingualism (English/French) will be considered an asset

The base salary for this position is between $94,800 - $144,800 annually. This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc).

Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis.

Grow with Canada Life

We’re united by a shared purpose: to improve the financial, physical and mental well-being of Canadians. Our company is trusted by 1 in 3 Canadians and contributes to the strength of communities across the country.

We’re looking for people who live our values everyday: we step up, we do the right thing, and we deliver – for our customers, communities and each other. Are you someone who always strives to do the right thing, who steps up for themselves and others, and delivers with impact? Then we want to hear from you!

What we offer

We’re committed to supporting our employees through every stage of their career. Here’s what you can expect as a full-time or part-time permanent team member:

• Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to$2,000 annually towards education reimbursement.


• Health & Wellness:Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well-being.


• Time Off:In addition to regular vacation and personal days, we support community involvement with a volunteer day.


• Financial Security:Company-matching pension plan,share ownership program and additionalinvestment options.


• Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more!


• Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events.

Learn more about Canada Life.

We’re committed to removing barriers and ensuring equal access to employment. Applicants requiring reasonable accommodation during the application process may contact [e-mail]. All information provided will be handled in accordance with applicable laws and Canada Life policies.

Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.