Information Security Analyst

Location - This role is hybrid with a mix of remote and in-person. Work primarily takes place at North Campus, Edmonton.

The Office of the Chief Information Security Officer (CISO), part of Information Services and Technology (IST), leads information security for the University of Alberta. The team develops security policies and procedures, identifies and mitigates cybersecurity risks, monitors network infrastructure, responds to security incidents, and delivers training and awareness programs that help staff and students stay safe online. As a member of the Office of the CISO, you'll be on the front line defending the University's data, research, and systems against real-world threats.

Reporting to the Manager, Information Security, the Information Security Analyst is responsible for the operation, investigation, and enforcement of IT and information security systems and policy for the University. You will work with a wide range of technologies, including next-generation firewalls, anti-malware systems, remote access, privileged access management, network security monitoring, deception technologies, incident response, and vulnerability management tools, to protect the confidentiality, integrity, and availability of University data and technical resources and to enable secure research. You'll also be a trusted voice for cybersecurity across campus: delivering presentations, sharing security expertise with faculties, departments, and units, and contributing to campus-wide security initiatives.

If you enjoy solving real security problems, explaining complex ideas to a wide range of audiences, and growing in an energetic, professional team, we'd love to hear from you.

• Manages security controls across the network, identity, and endpoint, including next-generation firewalls, remote access, privileged access management, endpoint privilege management, and email security.
• Identifies, prioritizes, and reports vulnerabilities across University and third-party systems, applications, and cloud services, and works with system owners on risk-based remediation.
• Detects, investigates, and responds to security incidents and account compromises using network security monitoring, deception technologies, and threat intelligence, while maintaining forensic integrity and chain of custody.
• Maintains endpoint protection and anti-malware technologies, triages alerts, and analyzes suspicious files and phishing through sandboxing and external analysis services.
• Delivers cybersecurity training and awareness campaigns, and provides expert security guidance to the University community.
• Participates in the weekly 24x7 on-call rotation and responds to after-hours security events.
  

Minimum Qualifications

• Post-secondary education in a related field, or 3 years of experience in a dedicated information security role. An equivalent combination of education and experience will be considered.
• Knowledge of Windows, macOS, and Linux operating systems.
• Excellent written and verbal communication skills.
• Excellent presentation skills, with the ability to communicate complex topics to a wide variety of audiences.
• Ability to work independently and within a team environment.
• Ability to participate in a 24x7 on-call rotation.

Preferred Qualifications

• One or more of the following professional designations: CISSP, CEH, GSEC, CompTIA Security+, Cisco CyberOps, Cisco CCNP Security, or Cisco CCIE Security. Other relevant certifications will be considered.
• Knowledge of network protocols (TCP/IP, ICMP, UDP), encryption fundamentals, next-generation firewalls, VPNs, anti-malware techniques, vulnerability management, mobile device management, threat detection and prevention, and security incident response processes.
• Knowledge of current and emerging threats and technologies related to information security.

• Knowledge of IT Service Management (ITSM) concepts and service management platforms such as FreshService or ServiceNow.

Application Instructions

Click "Apply Now" to submit your resume and cover letter

This position is subject to all applicable terms and conditions of the collective agreement between the Governors of the University of Alberta and the Non-Academic Staff Association (NASA).

This position offers a comprehensive benefits package.

Information Services & Technology (IST) is the central support group for the university's technological landscape. IST plays a pivotal role in ensuring the evolution and smooth operation of technology for teaching, learning, research and working at the University of Alberta. Beyond having expansive technical expertise, IST fosters a supportive environment where our staff values include compassion, connection, collaboration, creativity and courage. If you are passionate about leveraging technology to empower education, research and to drive institutional excellence, join us and be part of shaping the future of the University of Alberta through innovative IT solutions.

The University of Alberta, its buildings, labs and research stations are primarily located on the territory of Néhiyaw (Cree), Niitsitapi (Blackfoot), Métis, Nakoda (Stoney), Dene, Haudenosaunee (Iroquois) and Anishinaabe (Ojibway/Saulteaux), lands that are now known as part of Treaties 6, 7 and 8 and homeland of the Métis. The University of Alberta respects the sovereignty, lands, histories, languages, knowledge systems and cultures of all First Nations, Métis, and Inuit.

The University of Alberta is a community of knowledge seekers, change makers and world shapers who lead with purpose each and every day. We are home to over 14,000 faculty and staff, more than 40,000 students and a growing community of 300,000 alumni worldwide.

Your work will have a meaningful influence on a fascinating cross-section of people - from our students and community members, to our renowned researchers and innovators, making discoveries and generating solutions that make the world healthier, safer, stronger and more just. Learn more.

At the University of Alberta, we are committed to creating an inclusive and accessible hiring process for all candidates. If you require accommodations to participate in the interview process, please let us know at the time of booking your interview and we will make every effort to accommodate your needs.

We thank all applicants for their interest; however, only those individuals selected for an interview will be contacted.

All University employees have a responsibility to foster a workplace that prioritizes safety in all its forms—physical, cultural, and psychological. This is achieved by promoting a safe environment, adhering to all safety laws, policies and procedures, completing all required safety training, identifying hazards and implementing controls, reporting incidents, and contributing to a culture of belonging and respect, while endeavoring to ensure that all colleagues feel valued and safe to express their thoughts, perspectives and concerns.

The University of Alberta is committed to creating a university community where everyone feels valued, barriers to success are removed, and thriving connections are fostered. We welcome applications from all qualified persons. We encourage women, First Nations, Métis and Inuit persons, members of visible minority groups, persons with disabilities, persons of any sexual orientation or gender identity and expression, and all those who may contribute to the further diversification of ideas and the University to apply.

L’Université de l’Alberta s’engage à créer une communauté universitaire où chaque personne se sent valorisée, où les obstacles à la réussite sont éliminés et où des connexions enrichissantes peuvent se développer. Nous accueillons les demandes de toutes les personnes qualifiées. Nous encourageons les femmes; Premières nations, Métis et Inuits; membres des groupes minoritaires visibles; personnes handicapées; personnes de toute orientation sexuelle ou identité et expression de genre; et toutes les personnes qui peuvent contribuer à la diversification des idées et à l'université à postuler.