Senior IT Analyst, Security Operations, Information & Corporate Security

Purpose. Performance. People.

Joining CPP Investments means joining one of the world’s most admired and respected institutional investors to drive a single mandate: to deliver strong, sustainable returns for generations of Canadians.

With a long-term horizon and global reach, we deploy capital at scale across public and private markets. Our size, stability, and disciplined investment philosophy allow us to pursue complex opportunities and build enduring partnerships worldwide.

For our people, this means meaningful work with tangible impact, real opportunity, and collaboration with exceptional colleagues who value partnership and performance. Here, you’ll contribute to outcomes that matter alongside team members committed to excellence and shared success.

The Role

As a Senior IT Analyst, Security Operations you will help protect CPP Investments by monitoring security threats, responding to incidents, assessing risks, and strengthening information security controls.

Working collaboratively with security professionals and stakeholders across the organization, you will investigate emerging threats, provide actionable security insights, and support effective risk management and continuous improvement of CPP Investments' security environment.

The Team

CPP Investments' information security function supports the protection of the organization's information assets, technology systems, and operations through security monitoring, incident response, threat intelligence, and risk management.

You will work with a collaborative team of security professionals to identify and address cybersecurity threats, strengthen security controls, and provide guidance to stakeholders across the organization.

Accountabilities

• Monitor, analyze, investigate, and document security alerts from logs, security tools, and threat intelligence sources, identifying vulnerabilities, exploits, and emerging threats.
• Manage security incidents in accordance with established incident response frameworks, coordinating investigations and supporting timely resolution.
• Deploy, maintain, and enhance information security controls across assigned areas to strengthen the organization's security posture.
• Conduct information security risk assessments, identify systemic risks through incident trend analysis, maintain risk register entries, and support mitigation activities.
• Produce threat intelligence reports and contribute security metrics and insights to dashboards supporting operational and strategic decision-making.
• Support information security governance activities and coordinate remediation of audit findings and identified control deficiencies.
• Collaborate with internal stakeholders to resolve complex security challenges and provide practical guidance on cybersecurity risks and issues.

What You Bring

• An undergraduate degree or college diploma in a related field.
• 3+ years of relevant experience in information security, cybersecurity, or a related technical discipline.
• Relevant cybersecurity certifications.
• Technical knowledge of security technologies, including firewalls, antivirus, content filtering, security information and event management (SIEM), endpoint detection and response (EDR), and data loss prevention (DLP).
• Understanding of threat intelligence, security orchestration and automation, vulnerability management, and cloud security.
• Experience deploying or managing IT infrastructure or cybersecurity technologies is an asset.
• Strong analytical, investigative, written, and verbal communication skills, with the ability to collaborate effectively and explain security risks to diverse stakeholders.

You are motivated to contribute to something larger than yourself, approach complex challenges with rigor, and hold yourself to high standards in a collaborative, performance-driven environment.

We provide colleagues with cutting-edge AI tools, dedicated learning time, and practical support to help them deliver with greater impact.

Inclusion & Accessibility

CPP Investments is committed to equitable access to employment and building a workforce that reflects diverse talent and perspectives. If you require accommodation at any stage of the recruitment process, please let us know and we will work with you to meet your needs.

Attention: Protect Yourself from Fraud

CPP Investments is committed to a secure and transparent recruitment process. We will never ask candidates for payment or financial information at any stage of hiring. All legitimate opportunities are posted on our careers page, and communications will come from our applicant tracking system, Workday.

CPP Investments may use AI tools to help screen and assess applicants by analyzing resumes and applications for relevant skills and experience. These tools support, but do not replace, human decision-making.

#LI-ONSITE