Information Security Analyst assessing technology assets, controls, and cyber risks for TD, a major North American bank. Supporting governance, quality assurance, reporting, and continuous assessment improvement.
About the role
- Senior Security Analyst at McCarthy Tétrault in Canada focusing on security and IT compliance initiatives. Collaborating with teams on incident response and vulnerability management in a hybrid workspace.
Responsibilities
- Working with IT/ Security stakeholders during investigations and incident response activities.
- Working with internal stakeholders to lead a strong vulnerability and patch management program.
- Liaising with clients on external audit and compliance requests.
- Leading security risk assessments against internal and external clients and technologies, as required.
- Supporting IT and Business projects as the Security SME and conducting project risk assessments where necessary.
- Contributing to the identification and evaluation of information security threats through internal technology and process reviews of existing security controls.
- Participating in the periodic review of the firewall rule-set and regular reviews of identity access management.
- Developing and executing penetration testing process, as well as follow up remediation activities.
- Maintaining awareness of current and emerging threats and staying abreast of current and developing technologies, risks, and security best practices.
- Developing and coordinating the Department’s Security Awareness Training program.
Requirements
- University degree or equivalent in Information Technology or Information Security.
- Minimum of 7 years of relevant work experience, including a minimum of 5 years of hands-on experience as a Security Administrator, Support Desk Consultant or similar IT roles involving frequent customer contact.
- Minimum of 3 years of experience with an EDR solution such as Crowdstrike/ Defender / SentinelOne.
- Minimum of 3 years of experience with cloud security technologies within AWS/ GCP/ Azure.
- Experience with ISO 27001/27002 and/or Top 20 Critical Controls required.
- Experience with information security risk assessment methodologies required.
- CISSP or CISM certification preferred.
- GCIH or GCFA certifications a strong asset.
- Strong written and verbal communication skills.
- Strong written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
- A critical thinker with strong problem-solving skills.
- Knowledge of technological trends and developments in the area of information security and risk management.
- High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity.
- Strong organizational skills, with a high attention to detail.
- Bilingualism (French, English) would be an asset.
Benefits
- Outstanding benefits from day one, including insurance premiums paid by the Firm and wellness and technology reimbursements.
- Competitive compensation, paid overtime and generous time off, including a day off to volunteer and a day off for your birthday.
- A commitment to professional development and growth opportunities for our people at all levels, supported by a culture that fully embraces and encourages two-way feedback.
- Strong community involvement and a commitment to equity, diversity and inclusion.
- A collaborative, cohesive culture that connects lawyers and business teams through collective purpose.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Application Security Intern securing Kinaxis’s AI - powered supply - chain orchestration platform. Testing applications, managing vulnerabilities, and improving DevSecOps controls in Ottawa.
Threat Intelligence Analyst investigating telecom security threats and customer deployment data for Enea, a global telecom and cybersecurity software company. Supporting client security reviews and threat intelligence operations.
Information Security Analyst governing End - User Computing risks, controls, and remediation for TD, a major North American bank. Advising stakeholders and supporting governance reporting, audits, and regulatory requirements.
IT Security Analyst II coordinating cybersecurity monitoring, MSP oversight, audits, and incident follow - up. Supporting Veristat’s global life - sciences services and regulated technology environments.
Senior compliance analyst supporting Motorola Solutions’ mission - critical communications and analytics security programs. Managing audits, risk assessments, regulatory compliance, and information security governance.
Security Analyst protecting GitLab’s DevSecOps platform through vulnerability triage and CVE operations. Coordinating researchers, customers, and internal teams on secure software response.
SIEM/SOAR cybersecurity analyst monitoring threats, building alerts, and measuring controls. Supporting Wepoint’s digital transformation work for businesses and public sector organizations.
SIEM/SOAR information security analyst supporting Wepoint’s digital transformation services. Developing cybersecurity monitoring cases, alerts, dashboards, and security - control documentation.
Security analyst strengthening Desjardins's security posture through risk analysis, governance, and security controls. Supporting clients, partners, and cross - functional stakeholders.