Senior IT Analyst - Security & Compliance (Job Req #2025-280)

Ross; Ottawa; On-site; CAD 80,000 - 110,000; Full time

Job summary

Ross Video is seeking a Senior IT Analyst focusing on Security & Compliance. In this pivotal role, you will oversee the enterprise security program, coordinate penetration tests, and support policy development. Bring your expertise in cybersecurity to a dynamic team dedicated to inclusivity and innovation, where your contributions will drive results and improve security practices.

Benefits

Flexible hours

Generous paid time off

Fitness/wellness allowance

Employee share ownership program

Development support

Qualifications

• 3–6 years in cybersecurity or IT compliance roles.
• Strong understanding of security principles and frameworks.

Responsibilities

• Lead penetration testing activities, including scheduling and vendor management.
• Assist in maintaining security policies and documentation.

Skills

Cybersecurity

Risk Management

IT Compliance

Documentation Management

Clear Communication

Organizational Judgment

Tools

Tenable

M365 Defender

Job description

Senior IT Analyst - Security & Compliance (Job Req #2025-280)

Job Description

Posted Tuesday, June 10, 2025 at 4:00 AM

Why Work at Ross Video? We have a great group of people working together to create and deliver cutting edge products that look amazing and are easy to use. We go all out so that our customers can have the best possible experience and achieve quality results. With a product focus, continual learning, results driven processes, and creative thinking, we constantly strive to improve our solutions and to deliver results. If you've ever watched live television, news, sports, or entertainment, you've seen our products in use. All of the major Hollywood award shows, most professional sports teams, and many of the largest broadcasters in the world use Ross Video technology. Get behind the scenes and learn about what it takes to make live events possible. If that resonates, and you’re someone with integrity, commitment, and a strong drive to deliver great products, we’d love to hear from you.

Job Overview:

Reporting to the IT Security & Compliance Manager, the Senior IT Security Analyst (“Senior Analyst”) plays a central role in the ongoing execution, improvement, and operational oversight of Ross Video’s enterprise information security program. The Senior Analyst will lead a number of core activities that ensure the security program’s effectiveness across technical, procedural, and organizational layers.

This role will act as the primary point of contact for Ross’s external penetration testing provider, including the planning, scoping, and scheduling of tests. The Senior Analyst will also support the development and maintenance of information security policies, procedures, and related documentation, and act as a liaison between the corporate security team and other departments across the organization to ensure alignment and accountability.

The Senior Analyst will additionally provide mentorship and coordination support to junior staff, particularly in the areas of vulnerability management, threat alert triage, and operational ticket handling. This is a high-trust, high-impact role best suited to a seasoned practitioner with a strong operational grasp of cybersecurity and a clear interest in advancing both team outcomes and program maturity.

Who you report to: Manager, IT Security & Compliance

What we offer:

Ross offers competitive salaries, comprehensive health plans, and several perks to help you perform at your best.

Some of these perks include flexible hours, generous paid time off, fitness/wellness allowance, an employee share ownership program, development support, and a ton of fun social activities and events!

Best of all, you will be part of the Ross Video family, and we've got an energizing environment here.

What the job is all about:

• Penetration Testing Program: Act as the lead coordinator for all penetration testing activities, including vendor relationship management, test scheduling, remediation tracking, and executive reporting.
• Policy & Documentation Support: Assist the Manager in maintaining security c documentation, including policies, procedures, and implementation guides; ensure version control and audit-readiness.
• Cross-Team Liaison: Serve as the primary interface between the security function and other departments where inter-team alignment is required to execute security controls or fulfill compliance mandates.
• Vulnerability Management Oversight: Provide guidance and oversight for junior team members managing patching and remediation activities; review scan outputs and validate closure of findings.
• Threat Monitoring & Alert Triage: Support and supervise the triage of alerts received from the company’s external Security Operations Centre (SOC) provider; help develop response playbooks and escalation guidelines.
• Internal Audit & Readiness: Assist with internal control audits, evidence preparation, and compliance monitoring in alignment with frameworks such as ISO 27001 and PIPEDA.
• Mentorship & Task Coordination: Act as a day-to-day escalation point and support resource for junior analysts; help coordinate task prioritization, review outputs, and ensure team delivery targets are met.
• Program Maturity & Improvement: Identify operational gaps, recommend process enhancements, and contribute to the broader strategic roadmap of the security program.
• Metrics & Reporting: Generate high-quality reports and dashboards to track program health, risk posture, and compliance metrics for management and executive audiences.

Who you are:

• 3–6 years of professional experience in cybersecurity, risk management, or IT compliance roles
• Solid understanding of information security principles, security control frameworks, and IT infrastructure concepts
• Prior experience coordinating penetration tests, vulnerability scans, or internal audits
• Demonstrated experience with documentation management, policy lifecycle control, and compliance reporting
• Clear and confident communication skills – both written and verbal – with the ability to interface professionally across technical and non-technical audiences
• Strong organizational judgement and ability to balance competing priorities with minimal supervision
• Proven ability to lead by example, coach junior colleagues, and contribute to a high-performance team environment
• Familiarity with core security tooling (e.g., Tenable, M365 Defender, endpoint protection platforms) and managed security service workflows
• Experience working with or within formal security frameworks (e.g., ISO 27001, NIST CSF, PCI-DSS) is preferred

Equity, Diversity & Inclusion
At Ross, we embrace diversity, and we want you to bring your authentic self to work.We are committed to building a team that includes a variety of backgrounds, perspectives, and skills. Inclusivity drives innovation and creativity, and that’s something we’re passionate about at Ross! We believe everyone should be able to enjoy a rewarding career at Ross, regardless of race, colour, religion, sexual orientation, gender, gender identity or expression, marital status, age, veteran status, physical or mental disability. If a disability means that you need any additional support during the recruitment process, please contact Talent Acquisition and we will make all reasonable efforts to accommodate your request.