IT – Info Security Analyst IV

Job Title: IT – Info Security Analyst IV
Location: Toronto, ON (Hybrid)
Estimated Duration: 12 Months

SUMMARY OF THE ROLE:

• May provide guidance to partners / stakeholders within defined parameters related to specific Technology Controls / Information Security programs / policies / standards and  incidents for own specialized area
• Analyze and evaluate in scope Applications to identify possible breaches of access, inaccurate documentation, and toxic combinations of access within an application
• Participate and/or support development of a security management strategy and framework
• Support technology processes and help implement governance practices to monitor, detect, prevent and react to both current and emerging security threats against client’s business
• Support development of on-going Technology Risk reporting, monitoring key trends and defining metrics to regularly measure control effectiveness for own area
• Research and investigate regulatory compliance requirements, reporting and questions and support the team in resolving compliance, audit and regulatory issues members
• Participate in computer security incident responses relevant to business (or enterprise wide) and represent respective function and Enterprise position to the business, and business needs to incident response team
• Adhere to internal policies / procedures, technology control standards, and applicable regulatory guidelines
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement
• Adhere to enterprise frameworks and methodologies that relate to technology controls / information security activities
• Influence behavior to reduce risk and foster  a strong technology risk management culture throughout the enterprise
• Remain informed of emerging issues, industry trends and/or relevant changes
• Support development and/or implementation of standards, policies, procedures, and solutions that mitigate risk and maximize security, availability of service, efficiency and effectiveness
• Assess / identify key issues and escalate to appropriate levels and relevant stakeholders where required
• May develop / provide / contribute to reporting, analysis, and assessments at the functional or enterprise level
• May participate and provide advice / guidance on projects within own area of specialization.    
• Continuously enhance knowledge / expertise in own area and keep current emerging trends/developments and grow knowledge of the business, analytical tools and techniques
• Support a positive work environment that promotes service to the business, quality,  innovation and teamwork and ensure timely communication of issues/ points of interest
• Identify and recommend opportunities to enhance productivity, effectiveness and operational efficiency
• Establish effective relationships across multiple business and technology partners, program and project managers
• Participate in knowledge transfer within the team and business units

Requirements:

• Experience professional level role requiring sound knowledge of one or more technology controls / security domains, disciplines and practices
• Sound knowledge of organization, technology  controls / security/ risk issues
• Experience and knowledge of segregation of roles and duties / access controls principles and tools within an application
• Strong attention to detail and analytical skills. Able to interpret and analyze different sources of data in various formats with ease
• Strong professional communication skills; will be required to communicate at various levels and various businesses within the organization
• Able to initiate discussions and lead meetings with business and technology areas, with understanding of background knowledge of the applications.
• Prioritizes and manages own workload in order to deliver high quality results and meet timelines under guidance of management
• Advanced Excel skills

 
Typical Day-to-Day Responsibilities

• Review, validate and process the requests submitted by business and technology on Service Now
• Connect with business or technology if required to clarify requests
• Manage the dashboard to ensure that requests are being managed in a timely manner and that approvals pending for a long time are followed up
• Ensure any process changes are communicated to the team
• Review mails and respond to those that need to be addressed / File those that are done under relevant folders

MUST-HAVE Hard Skills:

• Service Now
• Jira
• Ms office suite ( especially  Excel  as a database )
• strong  data analysis role – Governance
• Acces management

SOFT SKILLS:

• Strong customer service skills  required
• Time management skills
• Priority management skills
• Attention to  detail

NICE-TO-HAVE

• Automation knowledge (Power query Power automate)