Security Analyst

Xello; Canada; Hybrid; CAD 72,000 - 104,000; Full time

Job summary

Xello, a leader in Technology and Education Solutions, is hiring for a role focusing on Governance, Risk, and Compliance (GRC). You'll develop and implement key policies while leading audits and training programs, all in a flexible work environment with strong opportunities for career growth.

Benefits

Flexible work arrangements

Employer-paid health and dental benefits

Generous vacation policy with 4 weeks of vacation

Commitment to continuous learning and professional development

Qualifications

• 2-5 years of experience in GRC, privacy, or security operations.
• Familiarity with compliance frameworks like SOC2, NIST, GDPR.
• Hands-on experience with security tools is preferred.

Responsibilities

• Develop and maintain GRC policies aligned with regulations.
• Lead security and privacy audits for compliance.
• Create training programs on security best practices.

Skills

Analytical skills

Problem-solving skills

Communication skills

Education

Bachelor's degree in Information Security or Computer Science

Tools

SIEM

Vulnerability management tools

Job description

Employer Industry: Technology and Education Solutions

Why consider this job opportunity:
- Salary range from $72,805 to $103,305 CAD
- Opportunity for career advancement and growth within the organization
- Flexible work arrangements, including hybrid and remote options
- Employer-paid health and dental benefits
- Generous vacation policy with 4 weeks of vacation
- Commitment to continuous learning and professional development

What to Expect (Job Responsibilities):
- Develop, implement, and maintain Governance, Risk, and Compliance (GRC) policies aligned with regulatory requirements
- Lead or assist with security and privacy audits, ensuring compliance with industry standards
- Support the security team in responding to security incidents and conducting post-incident analysis
- Develop and deliver training programs on security and privacy best practices
- Create and maintain accurate documentation for all GRC initiatives and incident response procedures

What is Required (Qualifications):
- Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent experience)
- 2-5 years of experience in a similar role, focusing on GRC, privacy, or security operations
- Experience with compliance frameworks such as SOC2, ISO27001, NIST, and GDPR
- Familiarity with incident response processes and security controls
- Strong analytical and problem-solving skills, with the ability to manage multiple tasks simultaneously

How to Stand Out (Preferred Qualifications):
- Hands-on experience with security tools and platforms, such as SIEM and vulnerability management tools
- Certifications such as CISSP, CISA, CISM, or equivalent
- Knowledge of data privacy regulations, including GDPR and CCPA
- Excellent communication skills, both written and verbal

#Technology #CyberSecurity #CareerOpportunity #RemoteWork #ContinuousLearning

We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer.