IT Security Analyst

Pomerleau; Montreal (administrative region); Hybrid; CAD 80,000 - 120,000; Full time

Benefits offered by this job

RRSP with up to 5% employer matching

Hybrid work model for corporate roles

Employee stock ownership program

Career growth through real development

Transit pass reimbursement

Minimum 4 weeks of vacation

Job summary

Pomerleau in Montreal is seeking an IT Security Analyst to protect the organization's systems, networks, and data. Reporting to the IT Security Manager, you will monitor threats, manage incidents, and continuously improve security controls.

You will collaborate with IT, Infrastructure and Cybersecurity teams, conduct security assessments, participate in penetration testing, and help align with ISO 27001, GDPR, PIPEDA, and Quebec Law 25.

Qualifications

• This role targets candidates with IT Security/Cybersecurity experience and security operations expertise.
• Knowledge of security protocols, tools, and best practices is essential.
• Familiarity with ISO 27001, GDPR, PIPEDA, and Quebec Law 25 is preferred.
• Strong analytical, problem-solving, and organizational skills are required.
• Ability to work independently and with teams in a fast-paced environment.
• Excellent communication skills for explaining concepts to varied audiences.
• Eligibility to obtain a Government of Canada Secret Security Clearance.

Responsibilities

• Monitor technology infrastructure and security platforms to detect threats, incidents, and performance issues.
• Administer and maintain security solutions, including IDS, IAM, and endpoint/network protection technologies.
• Manage, document, and resolve security incidents and service requests within SLAs.
• Perform security assessments and participate in penetration testing to identify vulnerabilities.
• Contribute to development and enhancement of security policies, procedures, and standards.
• Maintain security documentation, configurations, and operational procedures.
• Participate in incident response activities and support major security events as needed.
• Share knowledge, support team development, and drive continuous improvement initiatives.
• Stay current on emerging threats and recommend improvements to strengthen controls.

Skills

IT Security

Cybersecurity

Security Operations

Regulatory knowledge

Analytical skills

Education

Bachelor's degree in IT/Cybersecurity

Tools

EDR

SIEM

Honeypot

Microsoft 365

Job description

Job Description

Reporting to the IT Security Manager, the IT Security Analyst plays a critical role in protecting Pomerleau's and its subsidiaries' systems, networks, and data. The successful candidate will contribute to the availability, performance, and security of the organization's technology environment through proactive monitoring, incident management, and continuous improvement of security controls.

This role works closely with IT, Infrastructure, and Cybersecurity teams to defend the organization against internal and external threats while ensuring compliance with regulatory requirements and industry best practices.

This position provides an opportunity to make a direct impact on the organization’s security posture within a rapidly evolving technology landscape.

What you will do

• Monitor technology infrastructure and security platforms to identify and respond to threats, incidents, and performance issues.
• Administer and maintain security solutions, including intrusion detection systems, identity and access management platforms, and endpoint and network protection technologies.
• Manage, document, and resolve security incidents and service requests while meeting established service levels.
• Perform security assessments, participate in penetration testing activities, and help identify vulnerabilities.
• Collaborate in the development and enhancement of security policies, procedures, and standards.
• Maintain security documentation, system configurations, and operational procedures.
• Participate in incident response activities and provide support during major security events when required.
• Share knowledge, support team development, and contribute to continuous improvement initiatives.
• Stay current on emerging threats, trends, and technologies, and recommend improvements to strengthen security controls.

This role could be for you if you have

• Degree in Information Technology, Cybersecurity, or a related field.
• Experience in IT Security, Cybersecurity, or Security Operations.
• Strong understanding of security protocols, cybersecurity tools, and industry best practices.
• Knowledge of EDR, SIEM, Honeypot, and Microsoft 365 technologies.
• Familiarity with security frameworks and regulations such as ISO 27001, GDPR, PIPEDA, and Quebec Law 25.
• Strong analytical, problem-solving, and organizational skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong attention to detail, accountability, and ability to manage multiple priorities.
• Excellent communication skills with the ability to explain technical concepts to various audiences.
• Eligibility to obtain a Government of Canada Secret Security Clearance.

Assets

• Experience with cloud environments (Azure, AWS, or GCP).
• Knowledge of ITIL best practices.
• Security certifications (CISSP, CISM, CEH, Security+, etc.).
• Availability for occasional travel within Canada and the United States.

Benefits

• RRSP with up to 5% employer matching
• Hybrid work model for corporate roles
• Employee stock ownership program
• Career growth through real development opportunities
• Transit pass reimbursement — get to work for free
• Minimum 4 weeks of vacation from day one

For the past six years, we've proudly held the distinction of being one of Canada's Top 100 Employers.

Pomerleau is a national leader in construction, delivering major projects across Canada. We believe in creating a workplace where people feel respected, supported, and empowered to grow. Our culture is built on collaboration, trust, and a shared commitment to doing great work.