Cybersecurity Analyst - Closing

Port Hope is a uniquely attractive place to work, highlighted by the potential future development of the world's largest nuclear plant, which promises cutting-edge infrastructure and economic stability. This potential diversification into nuclear energy complements the area's strong economic base in agriculture and manufacturing, securing a stable job market. Employees will engage with advanced technology and industry experts, enhancing professional development.

The community's warmth promotes work-life balance, supported by cultural festivals and heritage sites. Proximity to Toronto/GTA provides urban access, while the area's natural beauty invites outdoor recreation. High-quality education and healthcare, low crime rates, and a commitment to environmental sustainability make Port Hope an exceptional place to live and work, fostering both professional and personal growth.

The Cybersecurity Analyst serves as the primary technical resource for identifying, assessing, and reducing cybersecurity risks across the Municipality’s information, systems, and technology services. This includes monitoring and investigating security alerts and incidents, coordinating and participating in vulnerability remediation, supporting the implementation of security controls, and contributing to secure technology planning and operational improvements. The role works collaboratively with I.T. staff, municipal departments, and service providers to strengthen the confidentiality, integrity, availability, and resilience of municipal technology services.

• Employer paid Group Health, Dental and Life Insurance after three months of employment
• OMERS Pension Plan from the date of hire
• Professional Development and Skill Based Training Opportunities
• Alternate Work Arrangements
• Wellness, Social and Staff Ambassador Committees
• Employee and Family Assistance Plan
• Perks and Savings Partnerships

Approximately $86,805 per annum

Non Union Compensation study under review

• Minimum 2 Year post-secondary education with a focus on cybersecurity.
• Relevant cybersecurity certifications are preferred, such as CompTIA Security+, CompTIA CySA+, Microsoft Certified:
  Identity and Access Administrator Associate. Certified Information Systems Security Professional (CISSP) or similar is an asset.
• Minimum of 3 years of experience in cybersecurity, security operations, or systems administration with substantial security responsibilities.
• Demonstrated experience investigating and responding to security alerts or incidents, managed detection and response (MDR), endpoint detection and response (EDR), and identity.
• Strong practical knowledge of Microsoft 365 security and identity capabilities, including Microsoft Defender, Entra , Intune, conditional access, multifactor authentication, role-based access control, audit logging, endpoint protection, and security/compliance controls.
• Working knowledge of hybrid I.T. environments, including Windows servers and workstations, virtualization, Active Directory, networking, firewalls, VPNs, wireless networks, cloud services, mobile-device management, backup systems, and patch management.
• Strong knowledge of vulnerability management, secure configuration, least privilege, privileged-access management, logging and monitoring, encryption, data protection, phishing and social-engineering risks, malware/ransomware response, and incident-response practices.
• Knowledge of risk assessment, third-party and application security review, change management, security documentation, and the practical application of security controls in operational environments.
• Understanding of the protection of personal information and confidential municipal information, and the importance of applying…