Security Analyst(12 month Fixed term, Full time)

Equifax, Inc.; Toronto; On-site; CAD 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a motivated IT Security Analyst with a strong analytical mindset and a passion for cybersecurity. This role involves proactively identifying vulnerabilities, assessing security controls, and collaborating with stakeholders to enhance the security posture of the organization. You will play a crucial role in conducting risk assessments, supporting compliance frameworks, and providing insights to management on technical risks. If you are detail-oriented and have a solid background in security and risk management, this opportunity offers a dynamic environment to make a significant impact in safeguarding sensitive information.

Qualifications

• 4+ years in security with experience in risk assessment and application security.
• Strong understanding of PKI, encryption standards, and microservices architectures.

Responsibilities

• Identify and address system vulnerabilities to prevent cyber-attacks.
• Conduct security controls risk assessments and collaborate with stakeholders.

Skills

Analytical Skills

Problem-Solving Skills

Communication Skills

Risk Assessment

Cloud Security

Technical Security Controls

Secure Coding Standards

Attention to Detail

Tools

ServiceNow

Jira

GCP

AWS

Job description

Synopsis of the role

As our IT Security Analyst, this role requires a motivated self-starter. Someone who has strong analytical and problem-solving skills, a deep understanding of risk and compliance management principles, excellent communication and report-writing abilities, and knowledge of industry-specific regulations, standards, and frameworks. You are passionate about security and believe in due diligence. Responsibilities include but are not limited to:

What you’ll do

1. Proactively identify and address system, network, and data to prevent cyber-attacks.
2. Assess and validate security controls, while suggesting compensating controls to address vulnerabilities and control gaps.
3. Collaborate with stakeholders to remediate application and infrastructure vulnerabilities.
4. Conduct vulnerability and security controls risk assessments.
5. Facilitate information gathering and reporting for Internal and External Audit functions.
6. Providing recommendations to the Technology Information Security Officer on the risks posture that are related to the Equifax Canada environment.
7. Partnering with Technology on security engagements by opening front door requests and collecting evidence for projects.
8. Support evidence collection for various security compliance frameworks, including NIST, PCI-DSS, ISO 27001, and SOC assessments.

What experience you need

1. Minimum 4+ years in security and 2+ years of experience with the Risk assessment, application security and cloud security.
2. Good understanding of technical security controls, secure coding standards and Hands-on experience with cloud such as GCP and AWS.
3. Strong understanding of PKI, encryption standards, Microservices architectures, Kubernetes security.
4. Experience with ServiceNow, Jira, and/or other reporting platform tools including creating workflows, dashboard creation, and optimization.
5. Pays attention to team needs and pivots his/ her approaches accordingly to support the delivery of business value.
6. Expert in ability to communicate to advanced Technical teams as well as brief management on technical risks and issues.
7. Exposure to audits like PCI, SOC, ISO 27001 and familiarity with common security frameworks NIST, COBIT, ITIL, ISO.
8. Proactive, detail oriented and able to work independently and efficiently.

What could set you apart

1. Passionate about Cybersecurity.
2. Bilingual (French language is an asset).
3. Previous experience working in cyber security and risk management at a large company.