Security Analyst

TRUDELL MEDICAL LIMITED; London; On-site; CAD 90,000 - 150,000; Full time

Job summary

Trudell Medical Limited seeks a Security Analyst for its Corporate IT Network and Security team in London, Ontario. The role supports security controls design, risk assessments, and incident response with occasional on-site presence.

Ideal candidates hold a post-secondary IT diploma with cybersecurity focus and have 7+ years in cybersecurity. Hybrid/in-person work with shift options and strong governance knowledge are preferred.

Qualifications

• Post-secondary IT diploma with a concentration in cybersecurity.
• 7+ years of experience in the cybersecurity field.
• Knowledge of security frameworks such as NIST, COBIT, CSF, SOC2 and ISO.
• Knowledge of firewalls, proxies, SIEM, antivirus and IDPS concepts.
• Familiarity with MITRE ATT&CK and OWASP.
• Cybersecurity certifications (ISC, GIAC) and cloud security fundamentals.

Responsibilities

• Contribute to design and implementation of cybersecurity controls with teams and third-party specialists.
• Understand IT infrastructure including OS, networks, firewalls, VPNs, proxies, SIEMs and related tech.
• Support SOC2 deliverables: tests, risk assessments, tabletop exercises, incident response tabletop runs.

Skills

NIST

COBIT

CSF

SOC2

ISO

Firewalls

Proxies

SIEM

IDPS

Antivirus

MITRE ATT&CK

OWASP

Cloud security

Education

Post-secondary IT diploma with cybersecurity concentration

Tools

Firewalls

Proxies

SIEM

IDPS

Antivirus

Job description

Security Analystis a role in our Corporate IT Network and Security team.

We are looking for candidates who are available to work either an Evening Shift (2:00 pm - 10:00 pm) or Night Shift (9:00 pm - 5:00 am).

You must also be available to come into the London, Ontario office occasionally as required.

Your success in this role will be grounded in your values as a person who always acts with integrity and who treats everyone with respect. You continuously improve the systems and processes around you, and you take accountability for your work. You thrive in a team environment where you are open to learning from others, adjust to others’ styles, and drive hard to reach shared objectives. You have the ability to manage requirements elicitation activities with a variety of stakeholders and manage a workload that involves tasks from concurrently running initiatives.

You have a post-secondary diploma in IT with a concentration incybersecurityand7+ yearsof experience in the cybersecurity field.

You possess knowledge of security and control-based frameworks such as NIST, COBIT, CSF, SOC2, and ISO as well as firewalls, proxies, SIEM, antivirus and IDPS concepts. You are also knowledgeable in MITRE ATT&CK and OWASP, cybersecurity certification (ISC, GIAC) and cloud security fundamentals.

Reporting to the Director, Technology Solutions, you will analyze the design and operating effectiveness of controls within cybersecurity programs amongst the Trudell Medical Group of companies (“TMG”). You will also collaborate with operating company technology and development teams to ensure implementation and execution of cybersecurity deliverables, in support of risk reduction, compliance and reporting frameworks.

Specifically, you will focus on:

Design and Operating Effectiveness of Cybersecurity Controls

• In collaboration with TMG technology and development teams, and supported by third-party specialists, contribute to the design and implementation of cybersecurity controls
• Obtain a depth of understanding in company IT infrastructure, extending to include operating systems, development environments, firewalls, VPNs, proxies, security and information event management systems (SIEMs), among other technologies
• Assist in program management and task execution across multiple cybersecurity program and SOC2-specific deliverables, including:periodic penetration tests and network scans, threat risk assessments, security operations center alert configuration, business continuity and disaster response plans and tabletop exercises, ransomware simulations, incident response tabletop exercises and SOC2 readiness
• Proactively direct internal technical teams where required to facilitate contributions to, and timely completion of, cybersecurity control-related tasks, remediation, etc.
• Document process and procedure changes required to maintain program compliance
• Internally promote best practices for information security
• Assist with managing vendors and their third-party support

Auditing and Reporting

• Document cybersecurity program control effectiveness assessments and internal audits, and prepare reports for key stakeholders
• Validate cybersecurity control evidence where required to support SOC2 compliance
• Recommend changes to controls or areas of improvement where appropriate
• Contribute to updating cybersecurity policies where appropriate

Incident Response

• Investigate security alerts and breaches
• Assist with event response and vulnerability fixes when required
• Conduct threat research and stay current in the cybersecurity field
• Participate in cybersecurity training events for the benefit of the OpCos
• Perform forensic investigations of security control violations and escalated incidents

Salary Range - $90,000 - $150,000