IT – Info Security Analyst IV

Job Title: IT – Info Security Analyst IV
Location: Toronto, ON (Hybrid)
Estimated Duration: 12 Months

SUMMARY OF THE ROLE:

• May provide guidance to partners / stakeholders within defined parameters related to specific Technology Controls / Information Security programs / policies / standards and  incidents for own specialized area
• Analyze and evaluate in scope Applications to identify possible breaches of access, inaccurate documentation, and toxic combinations of access within an application
• Participate and/or support development of a security management strategy and framework
• Support technology processes and help implement governance practices to monitor, detect, prevent and react to both current and emerging security threats against client’s business
• Support development of on-going Technology Risk reporting, monitoring key trends and defining metrics to regularly measure control effectiveness for own area
• Research and investigate regulatory compliance requirements, reporting and questions and support the team in resolving compliance, audit and regulatory issues members
• Participate in computer security incident responses relevant to business (or enterprise wide) and represent respective function and Enterprise position to the business, and business needs to incident response team
• Adhere to internal policies / procedures, technology control standards, and applicable regulatory guidelines
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement
• Adhere to enterprise frameworks and methodologies that relate to technology controls / information security activities
• Influence behavior to reduce risk and foster  a strong technology risk management culture throughout the enterprise
• Remain informed of emerging issues, industry trends and/or relevant changes
• Support development and/or implementation of standards, policies, procedures, and solutions that mitigate risk and maximize security, availability of service, efficiency and effectiveness
• Assess / identify key issues and escalate to appropriate levels and relevant stakeholders where required
• May develop / provide / contribute to reporting, analysis, and assessments at the functional or enterprise level
• May participate and provide advice / guidance on projects within own area of specialization.    
• Continuously enhance knowledge / expertise in own area and keep current emerging trends/developments and grow knowledge of the business, analytical tools and techniques
• Support a positive work environment that promotes service to the business, quality,  innovation and teamwork and ensure timely communication of issues/ points of interest
• Identify and recommend opportunities to enhance productivity, effectiveness and operational efficiency
• Establish effective relationships across multiple business and technology partners, program and project managers
• Participate in knowledge transfer within the team and business units

 
Typical Day-to-Day Responsibilities

• Review, validate and process the requests submitted by business and technology on Service Now
• Connect with business or technology if required to clarify requests
• Manage the dashboard to ensure that requests are being managed in a timely manner and that approvals pending for a long time are followed up
• Ensure any process changes are communicated to the team
• Review mails and respond to those that need to be addressed / File those that are done under relevant folders

MUST-HAVE Hard Skills:

• ServiceNow experience
• Jira experience
• Ms office suite (especially Excel as a database )
• strong data analysis – Governance
• Access Management

SOFT SKILLS:

• Strong communication skills (written and verbal)
• Strong time management, priority management skills
• Attention to detail and someone who is a self-starter and adaptable

NICE-TO-HAVE

• Automation knowledge (Power query Power automate, Power BI)
• Large organization experience (compared size to client)