About the role

Senior Information Security Analyst responsible for ITSM and security assessment for Capco's clients. Collaborating on ServiceNow improvements and managing security controls.

Responsibilities

Provide expert consultation and advice to business and technology partners on technology controls, information security programs, policies, standards, and security incidents within the specialized area of responsibility
Conduct project-level consulting on risk assessments, control design, control effectiveness, vulnerability assessments, and other relevant security matters
Lead or contribute to risk and control design assessments across an application portfolio, documenting the business and enterprise impact of control gaps, including mitigation strategies and remediation plans
Support the definition, development, and oversight of enterprise security management strategies and frameworks
Help ensure that appropriate technology, governance, and processes are in place to monitor, detect, prevent, and respond to current and emerging security threats
Collaborate proactively with stakeholders, service owners, and platform owners to integrate security requirements into enterprise architecture and address identified control gaps
Provide consultation on regulatory compliance requirements, related reporting, and inquiries
Participate in security incident response activities relevant to the business or enterprise and represent the function’s position to stakeholders as needed
Adhere to internal policies, procedures, technology control standards, and applicable regulatory guidelines

University degree or equivalent relevant experience
5-7 years of relevant experience in information security, technology controls, risk management, or a related field
Sound knowledge and practical experience working with ServiceNow modules, including Change, Incident, Problem, TDAR, and CMDB
Experience generating reports and analysis within ServiceNow
Sound to advanced knowledge of organizational processes, technology controls, security, and risk issues
Experience contributing to projects of moderate to high complexity

Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of employer matching contributions
Virtual Health Care – Company-paid program for employees and their dependents/partners
Employee & Family Assistance Program (EFAP) – Support services for employees and their dependents/partners
Parental Leave Top-Up – Enhanced parental leave benefits from Day 1
Wellness Support – Fitness reimbursement to promote well-being
Business Coach from Day 1 – Personalized coaching to support career growth