Information Security Analyst Job Surrey area,BC Canada,IT/Tech

Salary The salary range for this position is CAD $38.88 - $55.89 / hour

We are hiring a Full Time Information Security Analyst to join our team in Surrey, B.C.

In this role, you will play a critical role in protecting the systems and data that support patient care within one of the largest health authorities. In this high-impact role, you’ll lead security incident intake and response, conduct threat and risk assessments, and collaborate with clinical and technical teams to safeguard sensitive health information. If you’re driven by purpose and thrive in fast-paced, high-stakes environments, this is your opportunity to strengthen cybersecurity while directly supporting safe, patient-centered care.

A career with Fraser Health will offer you the opportunity to be a part of a dedicated team of professionals in a dynamic and rewarding health care environment. We offer a competitive compensation and benefit package, including comprehensive health benefits coverage.

Important to know

Confirm you are legally entitled to work in Canada

BC’s health system is in the process of transformation. As part of the planned changes, certain IM/IT, Finance, and Supply Chain roles are expected to be in scope for transition to a new provincial shared services organization, BC Shared Health Services. Candidates applying to positions in these areas should be aware that, while the role is currently employed by the Health Authority, it may transition to BC Shared Health Services as part of the first or subsequent implementation phases.

The intent of this transition is to support continuity of employment however, details regarding timing, process, and any impacts to employment arrangements will be confirmed as planning progresses. Providing this information at the recruitment stage is intended to ensure transparency about the broader system changes underway and to support informed decision-making by candidates.

#LI-DNI

Detailed Overview

Supporting the Vision, Values, Purpose and Commitments of Fraser Health including service delivery that is centered around patients/clients/residents and families:

The Information Security Analyst provides initial intake, assessment, and prioritization of requests for Health Informatics and Information Technology (HIIT) Information Security Services and/or events requiring incident response prioritizing based on risk and urgency, ensuring that work activities are logged and tracked and that higher priority events are appropriately escalated. The Analyst helps coordinate investigations for security-related incidents and policy violations as well as participates as a key member of an integrated breach response team.

The Analyst deals with sensitive and critical situations and provides training and education on Fraser Health's security procedures, policies, and standards at all levels of the organization.

Responsibilities

Conducts HIIT Security threat and risk assessments, investigations, and performs incident management activities utilizing approved processes and techniques to conduct electronic audits, review security logs and gather forensic evidence.

Analyzes complex information through acute problem-solving to manage and investigate security incidents; develops reports, action plans, and response communications on mitigation strategies.

Monitors and maintains security tracking tools and associated databases and prepares reports and presentations on metrics and risk trends.

Maintains clear, concise, objective and complete documentation regarding all details of information security incidents and investigations to ensure action taken to contain and remediate these events are formally recorded.

Monitors and interprets security alerts generated by security monitoring systems to ensure appropriate and timely response to security-related incidents.

Participates in security, vulnerability, and risk assessments related to the information security features of the systems, networks, and related administrative activities; recommends mitigation strategies where necessary.

Participates in the design, implementation, and evaluation of information security projects, objectives, policies, and procedures.

Develops and…