Senior Information Security Analyst

IKO Industries Ltd. is a market leader in the manufacturing of roofing and building materials. IKO is a Canadian owned and operated business with production facilities worldwide and has many years of unparalleled success in the roofing materials industry. Quality, integrity, and trustworthiness are the values that underlie this success, and we have built this company by hiring people who hold these values.

People like you!

Job Description

Job Description
Senior Information Security Analyst

Location:

Mississauga, ON (Onsite)

Reports to:

Team Lead, Information Security
Compensation: $106,000 - $120,000
Role Summary
We are seeking a Senior Information Security Analyst with deep, handsu
2011on experience across security operations, incident response, and data protection in enterprise, cloud, and SaaS environments. This role is responsible for defending the organization against advanced cyber threats while leading efforts to protect sensitive business, employee, and executive data across onu
2011premise systems, cloud platforms, and collaboration tools such as Microsoft 365.
The Senior Analyst operates as a technical authority and trusted advisor, helping shape security detection, response, and data protection practices across the enterprise. This role goes beyond monitoring toolsu
2014it focuses on investigations, risk reduction, and building durable security controls that scale across modern hybrid IT and SaaS environments.
This position is fully onsite at our Mississauga, ON office.
What Success Looks Like in This Role
Cyber incidents are detected early across network, endpoint, cloud, and SaaS platforms, investigated thoroughly, and closed decisively
Sensitive data in email, file sharing, cloud storage, and business systems is protected by designu
2014not discovered after an incident
Security controls balance risk reduction without breaking productivity in platforms like Microsoft 365 and other SaaS tools
Business and IT leaders understand cyber and data risk in clear, plain language
Junior analysts get stronger because of your guidance, not despite it

Key Responsibilities
Security Operations & Incident Response (Core)
Lead investigation and response to security incidents across network, endpoint, cloud infrastructure, SaaS platforms (including Office 365), email, and identity systems
Proactively hunt for threats, suspicious behavior, and signs of data compromise across onu
2011prem, cloud, and SaaS environments
Analyze logs, alerts, and telemetry from SIEM, EDR, identity, email, and cloud platforms to identify unauthorized access, privilege abuse, lateral movement, and account compromise
Act as an escalation point for complex or highu
2011impact security incidents, including cloud security breaches and SaaS account takeovers
Produce clear, defensible incident reports with evidence, root cause analysis, and corrective actions
Data Protection, Governance & DLP
Play a lead role in Data Governance and Data Classification initiatives covering onu
2011premise systems, cloud platforms, and SaaS applications
Design, tune, and support Data Loss Prevention (DLP) controls across:
Email and collaboration platforms (e.g., Office 365)
Endpoints
Cloud storage and SaaS collaboration tools
Investigate datau
2011related security events, including:
Unauthorized access to sensitive or regulated data in cloud and SaaS platforms
Large or unusual data transfers from cloud storage or collaboration systems
Data shared externally or to personal accounts from corporate email or SaaS environments
Partner with business owners to apply risku
2011based data protection controls without unnecessary friction
Security Architecture & Project Enablement
Embed security and data protection requirements into IT and businessu
2011led projects involving cloud, SaaS, and hybrid environments
Identify risks introduced by new systems, integrations, SaaS vendors, cloud services, or workflows
Recommend pragmatic remediation options, compensating controls, and secure design improvements
Provide handsu
2011on security architecture guidance for cloud services, SaaS platforms, and identityu
2011centric solutions when needed
Governance, Risk & Compliance
Contribute to security standards,…