Senior Information Security Analyst

Scotiabank; Canada; On-site; CAD 70,000 - 90,000; Full time

Job summary

A leading financial institution is seeking a dedicated professional to bolster their information security efforts. This role will focus on managing user access, troubleshooting issues, and collaborating with stakeholders to enhance security measures. The ideal candidate should possess a diploma in Computer Science, along with 3-5 years of relevant experience, and expertise in systems like Active Directory and SailPoint. Join Scotiabank to be part of a diverse and inclusive culture that champions personal and professional growth.

Benefits

Diversity, Equity, Inclusion & Allyship initiatives

Accessible and accommodating workplace environment

Opportunities for upskilling

Competitive rewards, including bonuses

Flexible vacation and benefits

Community engagement activities

Qualifications

• 3-5 years of technical experience in IT.
• Technical certifications like CISSP or Security+ are assets.

Responsibilities

• Manage users and permissions in Active Directory and LDAP systems.
• Improve workflows related to onboarding and logical access platforms.
• Perform Identity & Access Management tasks including provisioning and deprovisioning.

Skills

Active Directory Management

LDAP Systems Management

Troubleshooting Skills

PowerShell

SQL

Oracle

ServiceNow

Fluency in Spanish

Education

Diploma in Computer Science or equivalent

Tools

SailPoint

Centrify

Job description

Requisition ID: #

Join a purpose-driven, high-performing team committed to results in an inclusive culture.

The incumbent is responsible for supporting the achievement of the Bank’s information security objectives, including integrity, confidentiality/privacy, availability, and continuity, by:

1. Ensuring effective implementation of logical access control across the enterprise.
2. Addressing logical access risks aligned with the Bank’s risk appetite.
3. Supporting logical access systems such as AD, LDAP, workstation local admin, vFilers, privileged access, and toxic combinations (e.g., SOD) for applications and platforms.
4. Helping the business understand their responsibilities regarding logical access controls.

In this role, you will:

1. Work with stakeholders to define and document Logical Access Control Matrices and related documents.
2. Improve workflows related to onboarding and logical access platforms to enhance user and customer experience.
3. Perform tasks related to Identity & Access Management, including access requests, provisioning, deprovisioning, and documentation of processes.
4. Review and resolve IDM conflicts.
5. Handle add/remove/change activities and support access issues for:

• ScotiaID, Windows ID (Active Directory), Exchange/Notes mailbox requests.
• AD Security Groups, Distribution Lists, Group Mailboxes.
• Service Accounts, LAA Access, Local Workstation Administration.

Use troubleshooting skills to diagnose systems/issues and identify root causes.

Liaise with support levels 2 and 3 as needed.

Provide reports and data for audits and internal control walkthroughs.

Qualifications and Skills:

1. Experience managing users and permissions in Active Directory and LDAP systems.
2. Experience with SailPoint, Centrify or similar PAM solutions, PowerShell, ServiceNow, SQL/Oracle.
3. Diploma in Computer Science or equivalent.
4. 3-5 years of technical experience.
5. Technical certifications like CISSP, Security+ are assets.
6. Fluency in Spanish is an asset.

What We Offer:

• Diversity, Equity, Inclusion & Allyship initiatives and an inclusive culture.
• Accessible and accommodating workplace environment.
• Opportunities for upskilling through courses, cross-functional programs, and tuition assistance.
• Competitive rewards, including bonuses, flexible vacation, and benefits.
• Community engagement activities such as hackathons, contests, and more.

Location:

Canada, Ontario, Toronto

Scotiabank is committed to creating an inclusive environment. If accommodations are needed during the recruitment process, please inform our Recruitment team. Candidates must apply online to be considered. Only shortlisted candidates will be contacted.