Senior Cybersecurity Analyst

Dialogue; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading virtual care provider in Canada is seeking a Senior Cybersecurity Analyst to protect sensitive health data. You will lead security initiatives, manage incident response, and develop comprehensive policies. The ideal candidate has over 5 years of experience in cybersecurity and is bilingual in French and English. This role offers a hybrid work model and exceptional benefits.

Benefits

Access to virtual mental health support

Fully funded insurance and health spending account

4 weeks vacation and wellness days

Learning via Coursera and mentorship

Work abroad opportunities

Qualifications

• 5+ years of experience in cybersecurity operations with progressing responsibilities.
• Expertise in Incident Response, Vulnerability Management, and Network Security.
• Experience with cloud technologies like AWS, GCP, and understanding of Zero Trust.

Responsibilities

• Monitor and analyze security data for vulnerabilities.
• Lead incident response and conduct post-incident reviews.
• Develop cybersecurity policies aligned with industry standards.

Skills

Incident Response

Vulnerability Management

Network Security

Identity and Access Management

Cloud Security

Scripting Languages

Bilingualism

Education

Information Security Certifications (e.g., CRISC, CISA, CISM)

Job description

Your role as Senior Cybersecurity Analyst

Reporting directly to the CISO, as a Senior Cybersecurity Analyst at Dialogue, you will be a key contributor in safeguarding our innovative healthcare platform and protecting the sensitive data of our users. You will leverage your deep technical expertise to proactively identify, analyze, and mitigate cyber threats, ensuring the integrity, confidentiality, and availability of our systems and data. This role offers the opportunity to lead critical security initiatives, contribute to the development of our security strategy, and mentor other team members in a dynamic and impactful environment.

What you’ll be doing:

• Threat Intelligence: Proactively monitor and analyze security data to identify advanced threats and vulnerabilities. Develop actionable insights and key metrics (KRIs/KPIs) to strengthen our security posture.
• Incident Response Management: Take ownership of leading security incident response, from initial investigation to full resolution. Conduct post-incident reviews to implement preventative measures.
• Security Exercise Participation: Actively participate in planning and executing threat response drills and contribute to improving our business continuity and disaster recovery capabilities.
• Policy and Standard Development: Lead the creation and implementation of comprehensive cybersecurity policies, protocols, and guidelines, ensuring alignment with industry standards (e.g., NIST CSF, ISO 27001) and Canadian regulations (e.g., PIPEDA).
• Risk and Vulnerability Assessment: Independently perform in-depth security assessments to identify vulnerabilities and recommend remediation strategies. Manage the security risk register, oversee security audits, and assess vendor security practices.
• Security Awareness and Guidance: Lead the development of security awareness materials and provide expert guidance to IT and Engineering on cybersecurity program objectives and compliance.

We'd love to hear from you if you have:

• 5+ years of progressive experience in cybersecurity operations, demonstrating increasing responsibilities and a strong understanding of security principles and practices
• Demonstrated expertise and hands-on experience in several of the following areas: Incident Response, Vulnerability Management, Network Security, Identity and Access Management
• Significant experience securing cloud-based technologies (e.g., Okta, Auth0, AWS, DataGuard, GCP, Google Workspace) and a strong understanding of Zero Trust Network Access concepts
• In-depth knowledge of cybersecurity frameworks and industry standards such as NIST CSF, OWASP, MITRE ATT&CK, and SSDLC
• Relevant information security certifications (e.g., CRISC, CISA, CISM, CGEIT, CISSP, CCSP) are considered a strong asset
• Proficiency in scripting languages (e.g., Python, Bash) for automation and security analysis is a significant plus

Please note that as we serve customers across Canada, bilingualism is essential for this position. You may be required to communicate in French and English.

At Dialogue, your well-being is our priority
Taking care of others also means taking care of our team. We’ve got you covered with the following benefits:

• Access to the Dialogue app and virtual mental health support for you and your family
• Fully funded insurance, a health spending account, dental coverage, and fitness reimbursement
• 4 weeks vacation, 9 wellness days, and 1 volunteer day
• Hybrid work: 3 days/week in our Montreal or Toronto offices, excluding remote roles
• Work abroad up to 4 weeks/year
• Incentive plans, referral bonuses & RRSP matching
• Learning via Coursera, external training budget & mentorship
• Optional parental leave top-up

About Dialogue

Dialogue is the #1 virtual care provider in Canada. By developing our Integrated Health Platform, we provide exceptional online health and wellness programs (primary care, mental health, iCBT, EAP, and wellness) to organizations that want to improve the wellness of their employees and families.

When it comes to our work, we set the bar high. Together, we’re transforming health and helping millions improve their well-being. We’re firm believers that great people don’t settle on:

Impact Community Growth Excellence

Feel like you can make a difference? Good news, we saved you a seat!

Come as you are. As a proud equal-opportunity employer, Dialogue is dedicated to creating a diverse and inclusive workplace for everyone. Qualified applicants will be considered regardless of citizenship, ethnicity, race, colour, religion, gender, gender identity or expression, sexual orientation, disability, age, or veteran status. Applicants who require specialized accommodation are encouraged to contact [e-mail] .