Senior IT Security Analyst

McCarthy Tétrault LLP; Toronto; Hybrid; CAD 80,000 - 115,000; Full time

Job summary

McCarthy Tétrault LLP is seeking a Senior IT Security Analyst in Toronto. This role offers the opportunity to manage security risks, lead vulnerability programs, and work in a hybrid environment. The ideal candidate will have extensive IT security experience, relevant certifications, and strong communication skills.

Benefits

Outstanding benefits and wellness reimbursements

Competitive compensation and paid overtime

Generous time off including volunteer days

Commitment to professional development

Strong commitment to equity and diversity

Qualifications

• Minimum 7 years of relevant work experience in IT with customer contact.
• Hands-on experience as Security Administrator or similar role is required.
• Experience with ISO 27001/27002 and information security risk assessments.

Responsibilities

• Lead vulnerability and patch management programs.
• Conduct security risk assessments and contribute to incident response activities.
• Develop and execute penetration testing processes.

Skills

Communication

Collaboration

Critical Thinking

Problem Solving

Education

University degree or equivalent in Information Technology or Information Security

Job description

Join to apply for the Senior IT Security Analyst role at McCarthy Tétrault .

Job Description

At McCarthy Tétrault, we offer challenging and rewarding career opportunities and are delighted to have been selected for the eleventh consecutive year in 2023 as one of Canada’s Top 100 Employers and one of Canada’s Best Diversity Employers. Our culture is built on professional excellence, collaboration, innovation, thought leadership, and entrepreneurialism. We embrace inclusion in all its forms and we provide the tools and opportunities to help our people develop to their full potential.

This position is based out of Toronto . McCarthy Tétrault employees benefit from a hybrid work environment.

As a Senior IT Security Analyst, you will be :

• Working with IT / Security stakeholders during investigations and incident response activities.
• Working with internal stakeholders to lead a strong vulnerability and patch management program.
• Liaising with clients on external audit and compliance requests.
• Leading security risk assessments against internal and external clients and technologies, as required.
• Supporting IT and Business projects as the Security SME and conducting project risk assessments where necessary.
• Contributing to the identification and evaluation of information security threats through internal technology and process reviews of existing security controls.
• Participating in the periodic review of the firewall rule-set and regular reviews of identity access management.
• Developing and executing penetration testing process, as well as follow up remediation activities.
• Maintaining awareness of current and emerging threats and staying abreast of current and developing technologies, risks, and security best practices.
• Developing and coordinating the Department’s Security Awareness Training program.

As our ideal candidate, you will distinguish yourself by the following profile :

• University degree or equivalent in Information Technology or Information Security.
• Minimum of 7 years of relevant work experience, including a minimum of 5 years of hands-on experience as a Security Administrator, Support Desk Consultant or similar IT roles involving frequent customer contact.
• Experience with ISO 27001 / 27002 and / or Top 20 Critical Controls required.
• Experience with information security risk assessment methodologies required.
• CISSP or CISM certification preferred.
• GCIH or GCFA certifications a strong asset.
• Strong written and verbal communication skills.
• Interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
• A critical thinker with strong problem-solving skills.
• Knowledge of technological trends and developments in the area of information security and risk management.
• High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
• Strong organizational skills, with a high attention to detail.
• Bilingualism (French, English) would be an asset.

As a member of the McCarthy team, you will have access to :

• Outstanding benefits from day one, including insurance premiums paid by the Firm and wellness and technology reimbursements.
• Competitive compensation, paid overtime and generous time off, including a day off to volunteer and a day off for your birthday.
• A commitment to professional development and growth opportunities for our people at all levels, supported by a culture that fully embraces and encourages two-way feedback.
• Strong community involvement and a commitment to equity, diversity and inclusion.
• A collaborative, cohesive culture that connects lawyers and business teams through collective purpose.

How to Apply :

External candidates are encouraged to apply online. All Internal applicants must apply directly through our internal careers portal on Espresso.

We thank all applicants for their interest in McCarthy Tétrault; however, only chosen applicants will be contacted. We regret that we are unable to respond to individual inquiries about application status. McCarthy Tétrault is an equal opportunity employer that fosters an inclusive, equitable, and accessible environment. Please notify us if you require accommodation at any time during the recruitment process.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Law Practice

J-18808-Ljbffr

Create a job alert for this search

It Security Analyst • Toronto, ON, Canada