Senior Information Security Analyst

IKO North America; Mississauga; On-site; CAD 106,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Health care

Challenging workplace

Commitment to teamwork and integrity

Job summary

IKO North America is looking for a Senior Information Security Analyst in Mississauga, ON. You will lead investigations into security incidents and design data protection measures. The ideal candidate has a strong background in Information Security, 8+ years of experience, and works closely with both IT and business leaders. A commitment to security communication, along with excellent analytical skills, is key. The firm promotes a competitive compensation package, a commitment to teamwork, and values diversity in the workplace.

Qualifications

• 8+ years of experience in Information Security, Security Operations, or Incident Response.
• Experience leading security investigations end-to-end.
• Hands-on expertise with SIEM/logging platforms.

Responsibilities

• Lead investigation and response to security incidents.
• Proactively hunt for threats across environments.
• Partner with business owners to apply risk-based data protection controls.

Skills

Investigative skills

Analytical skills

Cybersecurity knowledge

Leadership ability

Education

Bachelor’s degree in Information Technology, Computer Science, or related field

Tools

SIEM platforms (e.g., Splunk, QRadar)

EDR platforms

Microsoft 365

Job description

Senior Information Security Analyst

Location: Mississauga, ON (Onsite)

Reports to: Team Lead, Information Security

Compensation: $106,000 - $120,000

Role Summary

We are seeking a Senior Information Security Analyst with deep, hands‑on experience across security operations, incident response, and data protection in enterprise, cloud, and SaaS environments. This role is responsible for defending the organization against advanced cyber threats while leading efforts to protect sensitive business, employee, and executive data across on‑premise systems, cloud platforms, and collaboration tools such as Microsoft 365. The Senior Analyst operates as a technical authority and trusted advisor, helping shape security detection, response, and data protection practices across the enterprise. This position is fully onsite at our Mississauga, ON office.

What Success Looks Like In This Role

• Cyber incidents are detected early across network, endpoint, cloud, and SaaS platforms, investigated thoroughly, and closed decisively.
• Sensitive data in email, file sharing, cloud storage, and business systems is protected by design—not discovered after an incident.
• Security controls balance risk reduction without breaking productivity in platforms like Microsoft 365 and other SaaS tools.
• Business and IT leaders understand cyber and data risk in clear, plain language.
• Junior analysts get stronger because of your guidance.

Key Responsibilities

Security Operations & Incident Response (Core)

• Lead investigation and response to security incidents across network, endpoint, cloud infrastructure, SaaS platforms, email, and identity systems.
• Proactively hunt for threats, suspicious behavior, and signs of data compromise across on‑prem, cloud, and SaaS environments.
• Analyze logs, alerts, and telemetry from SIEM, EDR, identity, email, and cloud platforms to identify unauthorized access, privilege abuse, lateral movement, and account compromise.
• Act as an escalation point for complex or high‑impact security incidents, including cloud security breaches and SaaS account takeovers.
• Produce clear, defensible incident reports with evidence, root cause analysis, and corrective actions.

Data Protection, Governance & DLP

• Play a lead role in Data Governance and Data Classification initiatives covering on‑prem systems, cloud platforms, and SaaS applications.
• Design, tune, and support Data Loss Prevention (DLP) controls across:
  • Email and collaboration platforms (e.g., Office 365).
  • Endpoints.
  • Cloud storage and SaaS collaboration tools.
• Investigate data‑related security events, including:
  • Unauthorized access to sensitive or regulated data in cloud and SaaS platforms.
  • Large or unusual data transfers from cloud storage or collaboration systems.
  • Data shared externally or to personal accounts from corporate email or SaaS environments.
• Partner with business owners to apply risk‑based data protection controls without unnecessary friction.

Security Architecture & Project Enablement

• Embed security and data protection requirements into IT and business‑led projects involving cloud, SaaS, and hybrid environments.
• Identify risks introduced by new systems, integrations, SaaS vendors, cloud services, or workflows.
• Recommend pragmatic remediation options, compensating controls, and secure design improvements.
• Provide hands‑on security architecture guidance for cloud services, SaaS platforms, and identity‑centric solutions when needed.

Governance, Risk & Compliance

• Contribute to security standards, policies, procedures, and technical guidelines related to cloud security, SaaS usage, identity, and data protection.
• Perform and review technical risk and threat assessments for critical systems, including cloud‑hosted and SaaS‑based services.
• Support internal and external audits (e.g., PCI, ISO 27001, regulatory reviews).
• Define and track remediation plans through to closure.

Tooling, Detection & Continuous Improvement

• Improve detection logic, alert quality, and investigation workflows across SIEM, EDR, email security, cloud security, and SaaS telemetry.
• Evaluate new security tools and capabilities with a practical, outcomes‑focused mindset.
• Reduce noise, false positives, and manual effort where possible.
• Stay current on emerging threats targeting cloud platforms, SaaS environments, identity systems, and collaboration tools.

Leadership & Mentorship

• Act as a technical mentor to junior and intermediate analysts.
• Lead by example during incidents, investigations, and projects.
• Raise the overall maturity of the security operations function across enterprise, cloud, and SaaS environments.

Experience

Required Qualifications & Experience

• 8+ years of progressive experience in Information Security, Security Operations, or Incident Response.
• Demonstrated experience leading complex security investigations end‑to‑end, including cloud and SaaS‑based incidents.
• Hands‑on expertise with SIEM / logging platforms (e.g., Splunk, QRadar, ArcSight, Elastic).
• Strong background investigating endpoint, network, cloud, SaaS, and email‑based threats.
• Proven experience working directly with IT infrastructure, cloud platforms, Microsoft 365, and enterprise applications.

Data Protection Experience (Required)

• Practical experience with Data Classification, Data Governance, and/or DLP.
• Strong understanding of how sensitive data moves across email, collaboration tools, cloud services, and enterprise systems.
• Experience investigating data misuse, data exfiltration, or insider‑related incidents.

Technical Experience (Strongly Preferred)

• Endpoint Detection & Response (EDR) platforms.
• Network security and traffic analysis.
• Identity and access security (including cloud identity platforms).
• Vulnerability management and risk‑based remediation.
• Cloud security controls and SaaS environments (including Office 365 / Microsoft 365).

Certifications (Nice to Have)

• CISSP, CISM, CRISC, or similar.
• Relevant cloud or security platform certifications.

Core Skills & Attributes

• Excellent investigative and analytical skills.
• Ability to explain cyber and data risk in plain business language.
• Calm and decisive during incidents.
• Strong written documentation skills (incident reports, risk assessments, recommendations).
• Comfortable influencing without authority.
• Pragmatic, risk‑based mindset—knows when “perfect” is the enemy of “secure”.

Education & Other Requirements

• Bachelor’s degree in Information Technology, Computer Science, or related field preferred.
• Ability to travel across North America and Europe as required.

Benefits of Employment

Competitive compensation, health care, a progressive and challenging workplace, and a commitment to teamwork and integrity.

Diversity and Equal Opportunity Employment

IKO Industries Ltd. is an equal opportunity employer. We are committed to diversity and inclusion and welcome applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.