Hybrid Security Analyst operating BMO’s mission-critical Information Security systems. Monitoring security tools, managing incidents, and supporting cybersecurity operations in Toronto.
Responsibilities
Monitor, restore service, change, support, and handle day-to-day activities required to run BMO’s mission-critical Information Security systems 7/24/365
Provide responsive customer service supporting cybersecurity
Build effective relationships with internal and external stakeholders
Anticipate and reduce complexity for others
Provide input into operational-program planning and implementation
Develop and document procedures and processes conforming to industry best practices and BMO security regulations, policies, and standards
Assist in preparing end-user materials
Gather and document requirements for audits, reports, and projects
Monitor and maintain security tools and applications
Create activity reports for security tools and applications
Collaborate with stakeholders to deliver business objectives and support Information Security operations
Action service requests, transactions, and queries within relevant service-level agreements
Coordinate and facilitate incident-management activities, including production changes and engagement of third-party providers during incidents
Recommend changes to streamline and integrate security processes and systems
Provide technical Information Security subject-matter expertise
Identify opportunities to strengthen the Information Security organization through expertise sharing, technical development, and employee mentoring
Stay current with industry technical and business trends through professional associations, practice communities, and individual learning
Ensure high-quality practices and achievement of business results aligned with business/group strategies and productivity goals
Exercise judgment to identify, diagnose, and solve problems within established rules
Work independently on complex tasks, including unique situations
Apply BMO’s Risk Management Framework and make risk-informed decisions aligned with business strategy, asset protection, policies, laws, and regulations
Perform other broader work or accountabilities as assigned
Requirements
Typically 2–4 years of relevant experience
Post-secondary degree in Business, Computer Science, or a related field, or an equivalent combination of formal training, industry/technical certifications, or work experience
Preference for candidates who have or are pursuing at least one certification in a related field
Strong preference for Information Security certifications from a recognized institution, such as (ISC)2, ISACA, or SANS
Experience in Information Security or multiple areas of systems and computer operations, such as Identity & Access Management, IT operations, Certification & Key Management, Security Platform Administration, or Security Incident Response
In-depth understanding and problem-solving ability for Information Security issues
Working partnering, communication, and negotiation skills
Understanding of operating-environment complexity and security-platform impacts
Knowledge of Information Security support and operations concepts, practices, and technology
In-depth knowledge of Information Security processes, procedures, and controls
In-depth knowledge of the technical and business environment and corporate processes and procedures
Technical proficiency gained through education and/or business experience
In-depth verbal and written communication skills
In-depth collaboration and team skills
In-depth analytical and problem-solving skills
In-depth influence skills
In-depth data-driven decision-making skills
Ability to work 7/24/365 operational coverage
Benefits
Health insurance
Tuition reimbursement
Accident and life insurance
Retirement savings plans
Performance-based incentives
Discretionary bonuses
Other perks and rewards
In-depth training and coaching
Manager support
Network-building opportunities
Tools and resources to reach new milestones
Accommodations available on request during the selection process
Cybersecurity analyst monitoring threats and strengthening controls for Innergex’s renewable energy operations. Investigating incidents, assessing vulnerabilities, and advising technology teams.
Azure AD Security Analyst leading identity and access management solutions at Intact insurance. Integrating Azure AD, automating operations, and supporting major incidents.
Information Security Analyst protecting cloud, identity, and infrastructure platforms for Alimentiv, a gastrointestinal clinical research organization. Strengthening cybersecurity controls, monitoring threats, and supporting compliance.
Senior Cyber Security Analyst protecting Penn Entertainment’s online gaming, sports betting, and media platforms. Leading incident response, threat detection, automation, and vulnerability remediation.
Senior Systems & Security Analyst owning Azure, enterprise network architecture, and security for Canadian specialty insurer Optiom. Leading infrastructure projects, incident response, and production change coordination.
SAP Security Analyst securing Government of Alberta ERP systems. Translating business needs into access controls, risk assessments, and enterprise security solutions.
Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.