IT Security Analyst

Job Title: IT Security Analyst

Full-time, 3 days/week in office based in the Greater Vancouver Metropolitan Area

Salary Range: $70,000-$80,000/annum

Only candidates with a valid Canadian work visa will be considered

Our client is looking to bring on an experience IT Security Analyst on a full-time basis. The IT Security Analyst is responsible for protecting our systems and data from potential breaches. They will analyze security risks, implement security measures, and ensure compliance with relevant regulations and policies. Their efforts and expertise will be vital to maintaining the integrity and confidentiality of our information systems.

Responsibilities

Responsibilities:

• Maintains the confidentiality, integrity, and availability of the organization’s assets.
• Identifies, recommends and implements security measures to strengthen the security posture of the organization.
• Collaborates with IT teams to ensure security measures are integrated into system architectures and applications.
• Responds to alerts and investigations, working closely with the SOC to assess and validate potential threats.
• Research emerging security threats and widely exploited vulnerabilities and respond accordingly.
• Acts as an incident responder during ongoing security threats, including direct response, preservation of evidence, and reporting findings and root cause analysis.
• Ensures the health of the monitoring, logging and auditing systems.
• Periodically reviews logs with the assistance of SIEM tools to monitor for anomalies.
• Enumerates vulnerabilities in the network and collaborate with the IT Infrastructure team to perform remediation steps.
• Conducts internal risk assessments, maintain the risk register, and implement treatments to mitigate risks.
• Conducts internal audits to ensure compliance with established security standards (ISO27001:2022) and industry best practices.
• Collaborates with the Infrastructure team to ensure that all systems are designed and maintained with security practices throughout the lifecycle of the organization’s systems.
• Ensures endpoints, servers, network and storage devices comply with patch schedules and security baselines.
  
  

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Familiarity with information security risk management frameworks (NIST RMF, ISO)
• Experience with Windows and Server Linux Administration
• Microsoft 365, Entra ID, Azure & PowerShell experience
• Good working knowledge of Microsoft 365 Security
• Good working knowledge of server/endpoint computing, networking, e-mail
• Relevant certifications (e.g., CISSP, CISM, CEH, Security+) are preferred.
• Strong communication skills, both verbal and written, with the ability to convey technical information to non-technical stakeholders.