Senior Security Analyst

Job Description

McCarthy Tétrault is a leading Canadian law firm offering a full suite of legal and business solutions to clients in Canada and around the world. With offices in Toronto, Montréal, Québec City, Calgary and Vancouver, we provide challenging and rewarding career opportunities across the country. Recognized as one of Canada's Top 100 Employers for eleven consecutive years and one of Canada's Best Diversity Employers for fourteenth consecutive years, our culture is guided by The McCarthy Way —our shared approach to working with clients and with each other.

The McCarthy Way is built on four core elements:
Excellence , through attracting and developing top talent committed to delivering on our Client Commitment;
Collaboration , through seamless, integrated teamwork;
Inclusion , through eliminating barriers to belonging and success; and Innovation , through delivering maximum value by embracing leading‑edge technologies and approaches. Together, these principles shape how we work, lead, and grow—every day.

We are recruiting for an Senior Security Analyst to join our team in our Calgary office. The successful candidate must have a minimum of 5 years of hands‑on experience as a Security Administrator, Support Desk Consultant or similar IT roles involving frequent customer contact, ideally in a professional services environment. The candidate must also have experience with an EDR solution such as Crowdstrike/ Defender / Sentinel One and cloud security technologies within AWS/ GCP/ Azure.

McCarthy Tétrault employees benefit from a hybrid work environment with 3 days in the office per week.

• Working with IT/ Security stakeholders during investigations and incident response activities.
• Working with internal stakeholders to lead a strong vulnerability and patch management program.
• Liaising with clients on external audit and compliance requests.
• Leading security risk assessments against internal and external clients and technologies, as required.
• Supporting IT and Business projects as the Security SME and conducting project risk assessments where necessary.
• Contributing to the identification and evaluation of information security threats through internal technology and process reviews of existing security controls.
• Participating in the periodic review of the firewall rule‑set and regular reviews of identity access management.
• Developing and executing penetration testing process, as well as follow up remediation activities.
• Maintaining awareness of current and emerging threats and staying abreast of current and developing technologies, risks, and security best practices.
• Developing and coordinating the Department’s Security Awareness Training program.

• University degree or equivalent in Information Technology or Information Security.
• Minimum of 7 years of relevant work experience, including a minimum of 5 years of hands‑on experience as a Security Administrator, Support Desk Consultant or similar IT roles involving frequent customer contact.
• Minimum of 3 years of experience with an EDR solution such as Crowdstrike/ Defender / Sentinel One.
• Minimum of 3 years of experience with cloud security technologies within AWS/ GCP/ Azure.
• Experience with ISO 27001/27002 and/or Top 20 Critical Controls required.
• Experience with information security risk assessment methodologies required.
• CISSP or CISM certification preferred.
• GCIH or GCFA certifications a strong asset.
• Strong written and verbal communication skills.
• Strong written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk‑related concepts to technical and non‑technical audiences.
• A critical thinker with strong problem‑solving skills.
• Knowledge of technological trends and developments in the area of information security and risk management.
• High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
• Strong organizational skills, with a high attention to detail.
• Bilingualism (French, English)…