Cyber Security Analyst

Infrastructure Operations
Permanent

Today, the Royal College has over 55,000 members and the vision remains to advance the learning for specialist physicians to deliver the best health care for all. The Royal College partners and collaborates to lead the evolution of specialty medical education and standards; support specialist physicians, learners and teams to continuously improve; and advocate for excellence in specialty medicine by supporting innovation, well-being, equity and person-centered care.

We are a national, nonprofit organization established in 1929 by a special Act of Parliament to oversee the medical education of specialists in Canada.

Reporting to Manager Cyber Security, the Cyber Security Analyst shares responsibility for day-to-day security operations while contributing distinct strengths that complement the capabilities of other team members. The role balances operational response, continuous improvement, and project delivery, and is expected to document work, share knowledge, and provide backup coverage across core security functions. The Cyber Security Analyst role is critical within the organization, responsible for ensuring the confidentiality, integrity, and availability of information systems and data assets.

The Cyber Security Analyst serves as a vigilant and proactive defender, playing a pivotal part in identifying and mitigating potential security threats, vulnerabilities, and risks. By conducting comprehensive security assessments, monitoring network traffic, and implementing robust security measures, they strengthen defenses against cyber-attacks.

The Cyber Security Analyst collaborates with cross-functional teams, contributing to the development and implementation of effective security strategies, policies, and procedures. This role takes ownership of security initiatives and projects, frequently working independently, while continuously building expertise across an evolving, Microsoft-centric security toolset. Their efforts foster a culture of security awareness, safeguarding the organization's digital infrastructure and enabling secure operations in the digital age.

Typical day-to-day

Performs Threat Detection, Analysis, and Incident Response based on existing procedures and the latest industry guidance to maintain a secure technology environment for the organization to conduct its work.

Monitors and triages security events and alerts across endpoint, cloud, and network using tools such as Microsoft Defender for Endpoint and the organization's SIEM using established procedures, threat intelligence and current industry guidance.

Investigate security breaches, gather evidence, and collaborate with partners to contain and remediate incidents, ensuring a swift and effective response including supporting recovery from any incidents.

Plans, deploys, configures, and integrates security tooling such as endpoint detection and response, cloud security, SIEM, and web application firewalls. Manages project scope, timelines, and stakeholders independently, and ensures deployed tools remain current, properly integrated, and functioning effectively.

Conducts risk assessments on proposed changes or new applications in accordance with NIST risk management framework

Delivers Security Awareness and Training for all staff, and continuously develops own technical skills, based on current best practices of cyber security to minimize the likelihood of a security event.

Maintain Cloud Security configurations based on latest vendor guidance to reduce the severity and risk of a breach of a corporate cloud environment.

Implements and configures appropriate security controls, such as identity and access management, encryption, logging, and monitoring using Microsoft Defender for Cloud and related Microsoft 365 and Azure security capabilities.

Supports SaaS Application and Secure Development Security for all the third‑party integrations, built web forms and APIs to reduce risk in custom-developed solutions, at a working (non-specialist) level.

Does this sound like you?

Level of education, training, and experience equivalent to a bachelor's degree in computer science, Information Security, or a related field. Asset:
Level of education, training and experience equivalent to a master's degree in a relevant field, such as Cybersecurity or Information Assurance, or equivalent work experience in a broad range of information security domains.

3+ years of relevant work experience in cybersecurity or information security, including…