- Company Name
- CAAT Pension Plan
- Job Title
- Senior Information Security Analyst
- Job Description
-
Job Title: Senior Information Security Analyst
Role Summary: Owns the design, implementation, and monitoring of security controls across the organization. Leads risk assessment, vulnerability management, and security architecture initiatives to safeguard data and critical assets.
Expectations: Five+ years of hands‑on cybersecurity experience, strong command of security frameworks (ISO 27001, NIST, CIS), and relevant professional certifications. Proven ability to steer multi‑project technical initiatives independently and collaborate across business units.
Key Responsibilities:
- Develop and maintain the cybersecurity roadmap, ensuring alignment with operational standards.
- Lead security risk assessments, vulnerability scans, penetration tests, and security audits for applications and infrastructure, including cloud environments.
- Define and enforce secure configuration baselines for firewalls, IDS/IPS, SIEM, DLP, IAM, endpoint protection, and related tools.
- Advise on security‑by‑design implementation in SDLC and application development initiatives.
- Coordinate remediation tracking, reporting, and metrics to demonstrate control effectiveness.
- Support ISO 27001 certification activities and internal/external cyber maturity assessments.
- Provide technical guidance to the Cybersecurity Architecture & Program Delivery Manager on initiatives such as Data Loss Prevention, Privileged Access Management, and threat modelling.
Required Skills:
- Advanced knowledge of security operations, threat detection, and incident response.
- Proficiency with Windows, Linux, VMware, IDS/IPS, DLP, SIEM, WAF, VPN, and encryption technologies.
- Deep understanding of cloud security principles and experience securing cloud platforms.
- Strong analytical, problem‑solving, and critical‑thinking abilities.
- Effective communication skills for documentation, reporting, and stakeholder engagement.
- Project management competence, capable of handling multiple concurrent initiatives.
Required Education & Certifications:
- Post‑secondary degree or diploma in Computer Science, Information Technology, or a related discipline.
- Relevant security certifications (e.g., CISSP, CCSP, Security+, CEH, CompTIA Security+, ISO 27001 Lead Implementer).