Senior Security Analyst

Senior Security Analyst

Senior Security Analyst

About the Organization
This organization is a long-established North American leader in its industry, operating at scale across both Canada and the United States. It combines operational excellence with ongoing investment in technology, security, and modernization. With multiple facilities, a highly distributed workforce, and a strong emphasis on resilience and continuity, the company offers a stable environment where cybersecurity is treated as a strategic priority.
The organization is known for its long-term mindset, disciplined execution, and commitment to building durable systems, processes, and teams. It is an environment well-suited for professionals who want to make a lasting impact, grow their scope over time, and contribute meaningfully to an evolving security posture within a mature enterprise.

Role Overview
The Senior Security Analyst is a senior-level position within the IT department, reporting directly to the Director of IT. This individual will take a leadership role in ensuring compliance with cybersecurity standards while designing, implementing, and supporting security technologies that protect the organization’s digital assets.
This role supports both on-premises and cloud-based environments and plays a critical role in safeguarding business-critical systems across a highly distributed, multi-location footprint. While the work schedule is generally stable, the role requires availability for on-call support in the event of significant security incidents. The organization is seeking a professional interested in long-term growth and progression within the company.

Environment
The organization operates across 18 locations in Canada and the United States, ranging in size from small offices to large operational sites. The technology environment is predominantly Microsoft-based, with a strong hybrid model that includes both legacy on-prem infrastructure and modern cloud services. The ideal candidate will be comfortable operating across both environments.
Position Details

Title:

Senior Security Analyst
Work Model:
Hybrid (typically 2–3 days per week on-site, flexibility depending on business needs)

Employment Type:

Full-time, permanent

Start Date:

2026
Compensation and Benefits
Competitive base salary
Annual performance bonus
Three weeks of vacation plus a full week off during the December holiday period
Profit-sharing program
Comprehensive benefits package
Employer-matched retirement savings plan with increasing contribution levels based on tenure

Key Responsibilities

• Analyze, develop, implement, and enforce information security and data protection policies, standards, and technical guidelines

• Lead initiatives to strengthen the organization’s overall security posture and reduce risk

• Conduct ongoing vulnerability assessments, identify threats, and recommend mitigation strategies

• Respond to and manage cybersecurity incidents, including those occurring outside regular business hours

• Ensure systems, applications, and platforms are designed and maintained in compliance with security, privacy, and business continuity requirements

• Lead the implementation of risk reduction and security control measures

• Maintain accurate documentation related to security practices, policies, procedures, and configurations

• Implement and manage cybersecurity and data protection technologies

• Review new initiatives and business opportunities to ensure security, privacy, and continuity requirements are appropriately addressed

• Ensure all security-related SOPs and documentation remain current and accurate

• Perform additional duties as required

Qualifications and Experience

• Bachelor’s degree in Technology, Computer Science, Engineering, or a related field

• One or more relevant security certifications (, CISSP, GSEC, CEH, GCIH)

• 3–5 years of experience working within a cybersecurity team or security-focused IT function, ideally in a distributed enterprise environment

• 5+ years of hands-on experience implementing and supporting cybersecurity initiatives, particularly for business-critical…