Information Security Analyst; IT

Why First Ontario?

• Competitive compensation packages
• Top-tier health and wellness benefits, including comprehensive benefits packages, a yearly health spending account and personal spending account
• Enhanced mental health benefits through Sun Life and TELUS Health
• Flex-work environment
• Company-wide Employee Volunteer program (Blue Wave Program)
• Employee and Family Assistance Program

The Information Security Analyst performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation and resolution of security events detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines and procedures as well as conducting vulnerability audits and assessments.

The IT Security Analyst is expected to monitor computer networks and systems for security issues, and document any security issues or breaches, in line with the enterprise's security goals as established by First Ontario's policies, procedures and guidelines and to actively work towards upholding those goals.

• Participate in the planning and design of enterprise security architecture, under the direction of the Manager of IT Security.
• Create enterprise security documents (reports, baselines, guidelines and procedures) as required.
• Participate in the execution of an enterprise Business Continuity Plan and Disaster Recovery Plan.
• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, new or revised security best practices and standards, and the latest attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Deploy, integrate and configure all new security solutions and any enhancements to existing security solutions in accordance with standard best practices generally and the enterprise's security documents specifically.
• Maintain up-to-date security baselines for the secure configuration and operations of assets, whether they are under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• Monitor all assets for compliance with security baselines, security documents, and enterprise policies.
• Maintain operational configurations of all security solutions as per the established baselines.
• Monitor all security solutions for efficient and appropriate operations.
• Review logs and reports of all assets, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Investigate problematic activity and report the findings to the Manager of IT Security.
• Participate in the design and execution of penetration tests and security audits.
• Design, and execute vulnerability assessments and discuss resolution planning with appropriate stakeholders
• Provide on-call support for end users for all security solutions (ex. Blocked email).
• Monitor for IT and Security policy violation(s) and recommend corrective action(s).
• Participate in IT GRC and data governance activities to ensure accurate and valuable KPI/KRI data for reporting
• Monitor, Maintain, and respond to alerts of Physical Security solutions such as Camera System and Physical Access Control
• Execute and continuously improve quarterly programs and audits such as Security Awareness Training, Access and Permission Audit, User Account audit, etc.

• College diploma or university degree in the field of computer science and at least 4-6 years of experience in an IT related role.
• One or more of the following or equivalent Security certification:
  • CompTIA Security+
  • GIAC Information Security Professional (GISP)
  • Microsoft Certified:
    Security Operations Analyst Associate
  • CAP, CISA, CCFP
  • Associate of (ISC)2
• Experience with SEIM, Firewalls & data classification
• Experience with endpoint detection and response (EDR), CASB, IDPS and other security technologies.
• Demonstrated knowledge of security frameworks and standards such as MITRE, CIS, NIST, PCI, COBIT and ISO 27001.
• Experience with Varonis is an asset.
• Knowledge of VMware vSphere, vCenter and ESXI is an asset.
• Working technical knowledge of system vulnerability scanning and remediation.
• Strong understanding of OSI Model, IP, TCP/IP, and other network administration protocols.
• Strong understanding of Windows and Linux operating systems.
• Familiarity with core banking system related security.
• Proven analytical and problem-solving abilities.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to conduct research into IT security issues and products as required.
• Ability to present ideas in a business-friendly and user-friendly language.
• Strong written and verbal…