IT Security Analyst – Resilience

Jobtailor; Calgary; On-site; CAD 85,000 - 120,000; Full time

Job summary

Optiom seeks an IT governance professional to build and maintain its CMDB, covering applications, infrastructure, and data flows. You will consolidate vendor agreements, flag gaps, expiries, and duplicate spend while assessing business impact and criticality of each application.

You will set recovery targets, exercise BCP/DR/IR plans, and keep security policies current, collaborating with vendor management for outcomes.

Qualifications

• Hands-on CMDB construction or rebuilding experience.
• Experience with business continuity, disaster recovery, or incident response documentation.
• Familiarity with frameworks such as NIST CSF, ISO 27001/22301, COBIT, or ITIL.
• Ability to read commercial contracts and extract key terms including notice periods and SLAs.
• Strong documentation discipline and persistence to obtain necessary information.
• Post-secondary IT/business education or equivalent experience.

Responsibilities

• Build and maintain Optiom's CMDB covering applications, infrastructure, integrations, and data flows.
• Consolidate every technology vendor agreement into a single register and flag gaps, expiries, and duplicate spend.
• Run business impact assessments and rate every application for criticality.
• Set recovery targets and ensure environment adherence to them.
• Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application.
• Keep security policies and control documentation current.
• Answer due diligence questionnaires from broker, dealer, and OEM partners using a governed source.
• Build governance artifacts as a hands-on individual contributor.
• Work with Vendor Management business analysts and own the outcome.

Skills

IT Governance

CMDB Development

Risk Management

Compliance

Service Management

Business Continuity Planning

Disaster Recovery Documentation

Contract Analysis

Documentation Discipline

Vendor Management

Education

Post-secondary Education in IT/Business

Tools

Microsoft 365

ServiceNow

Jira

Confluence

Entra ID

Defender

Job description

• Build and maintain Optiom's CMDB — applications, infrastructure, integrations, data flows
• Consolidate every technology vendor agreement into a single register, and flag gaps, expiries, and duplicate spend
• Run business impact assessments and rate every application for criticality
• Set recovery targets and hold the environment to them
• Write and exercise Business Continuity, Disaster Recovery, and Incident Response plans for every critical application
• Keep security policies and control documentation current
• Answer due diligence questionnaires from broker, dealer, and OEM partners using a governed source
• Build governance artifacts as a hands-on individual contributor
• Work with Vendor Management business analysts and own the outcome

Requirements

• 3–6 years in IT governance, risk, compliance, service management, or IT security in an operational role
• Hands-on experience building or substantially rebuilding a CMDB or asset/configuration register
• Experience authoring business continuity, disaster recovery, or incident response documentation — not just reviewing plans someone else wrote
• Working knowledge of a recognized framework (NIST CSF, ISO 27001, ISO 22301, COBIT, or ITIL)
• Comfort reading commercial contracts and pulling out the terms that actually matter — notice periods, termination rights, SLAs
• Documentation discipline and persistence to chase down owners until you get an answer
• Post-secondary education in IT, business, or a related field — or equivalent experience
• Bonus: ITIL Foundation, CompTIA Security+, CRISC, CISA, CISM, or a DRI International certification (ABCP/CBCP)
• Bonus: Experience in insurance, financial services, or another regulated industry
• Bonus: Familiarity with Microsoft 365, Entra ID, and Defender
• Bonus: Experience with ServiceNow, Jira, or Confluence
• Bonus: Exposure to SaaS, MGA, or carrier platform environments

Core Competencies

Demonstrates expertise in IT governance, risk management, and compliance, with a strong focus on building and maintaining a Configuration Management Database (CMDB) and authoring critical documentation for business continuity and disaster recovery. Proficient in vendor management and contract analysis within regulated industries.

Highest-signal resume keywords

• IT Governance
• Configuration Management Database (CMDB) Development
• Business Continuity Planning
• Disaster Recovery Documentation
• Risk Management Frameworks (NIST CSF, ISO 27001)

ATS Optimization Keywords

Hard Skills

• IT Governance
• Risk Management
• Compliance
• Service Management
• Business Continuity Planning
• Disaster Recovery Planning
• Incident Response Documentation
• Configuration Management Database (CMDB)
• Contract Analysis
• Documentation Discipline

Soft Skills

• Persistence
• Attention to Detail
• Communication

Certifications & Qualifications

• ITIL Foundation
• CompTIA Security+
• CRISC
• CISA
• CISM
• DRI International Certification (ABCP/CBCP)

Industry Keywords

• Insurance
• Financial Services
• Regulated Industry
• SaaS
• MGA
• Carrier Platform

Tools & Technologies

• Microsoft 365
• ServiceNow
• Jira
• Confluence
• Entra ID
• Defender