Sr. Information Security Analyst - Hybrid

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

Business Overview:

The Information Security Analyst supports the risk mitigation efforts of the Information Security group primarily through the technical support of the procedures and policies established to safeguard information assets

Advantages
Nice to have:

•Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow

•CISSP and Cloud Security certification

Current work authorization for Canada is required for all openings.

Responsibilities
What You Will Do:

•Ensure the development life cycle complies with the information security policy requirements on secure coding and secure access controls.

•Tests for compliance with security policies and procedures. May assist in the creation, implementation, and/or management of security solutions.

•Ensure the information security policy requirements are communicated and taken into account by internal Infrastructure & development teams as well as third party vendors.

•Perform vulnerability analysis and issues management in pre-production and production applications & systems using standard application vulnerability scanning tools.

•Review and challenge any changes proposed to application controls including, but not limited to, data encryption, user security profiles / bands and entitlements as well as input, processing and output controls such as edit checks, control totals and data validation / integrity checks.

•Assist with assessment and integration of cloud vendors and SaaS from an Information Security requirements perspective.

•Review and update application security information and documentation in our asset registry.

•Conduct External Security Reviews on our client vendors who have access to confidential information or perform critical functions.

•Assist in monitoring our client's Data Loss Prevention (DLP) tool and conduct investigations.

•Assist in conducting Security Training & Awareness.

•Provide assistance for Disaster Recovery (DR) team including support of DR tests.

Qualifications
The Expertise You Bring:

•2-3 years of relevant experience in financial services industry

•Bachelors in Information Technology, Computer Science or a related discipline or equivalent working experience

•Knowledge of vulnerability assessments, secure code and infrastructure security reviews for internal and external facing (web) applications

•Knowledge of SDLC methodologies and tools. Development background is highly desirable

•Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture

•Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure etc.

•Understanding of industry audit standards, i.e. SSAE-16, FFIEC, and PCI-DSS

•Strong interpersonal skills like being a team player and effective collaborator with many different types of audiences

•Ability to multitask and handle multiple projects

•Strong presentation and written skills

Summary
Nice to have:

•Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow

•CISSP and Cloud Security certification

Current work authorization for Canada is required for all openings.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.