About Toronto Metropolitan For more than 75 years, Toronto Metropolitan University (formerly known as Ryerson University) has been shaping the next generation of leaders through its uniquely innovative, entrepreneurial and career-focused approach to higher education.

Driven by bold leadership, cutting-edge research and a deep commitment to academic excellence, TMU collaborates with students, faculties, staff and partners to push boundaries, reimagine solutions and create meaningful change in an increasingly interconnected world.

For a more in-depth understanding of our vision, core values and ongoing work, please see our. TMU welcomes those who have demonstrated a commitment to upholding the values of equity, diversity, and inclusion and will assist us in realizing the benefits of embedding these values into the work at every level and in every unit of the university.

In addition, to correct the conditions of disadvantage in employment in Canada and to bring lived experiences to the work, we encourage applications from members of equity deserving groups that have been historically disadvantaged and marginalized, including First Nations, Métis and Inuit Peoples in Canada, First Nations Peoples in the United States, racialized people, Black people, persons with disabilities, women, and 2SLGBTQ+ people.

Preference will be given to candidates with lived experiences as people from equity deserving groups, as well as experience working with these communities with which the University works every day.

Please note that all qualified candidates are encouraged to apply and we welcome newcomers and immigrants to Canada.

In April 2022, the university announced its new name of Toronto Metropolitan University.

Learn more about our .

About the CCS team Computing & Communications Services (CCS) is TMU’s central IT organization, supporting the university’s voice and data communications, server and storage infrastructure, printing, end-user computing support, computer labs, learning management system, application support, web application development, streaming media services,



presentation technology-enabled classrooms, and much more.

We are extremely proud of our university and what we are accomplishing as a department.

We welcome you to get to know our people and services better before you decide to apply to join our team.

Visit us at and search @torontomet and @bdlesser on Twitter.

The Opportunity Are you a #bold cyber security professional who is looking for an exciting career opportunity protecting a leading University from cyber threats and making sure we are compliant with industry standards? Join an inclusive and supportive organization and help support shaping tomorrow’s future leaders.

The Senior Information Security Analyst provides security expertise to clients.

The Senior Information Security Analyst manages compliance initiatives, and coordinates security activities among multiple stakeholders.

They handle the coordination of response activities to day-to-day security incidents and the mitigation of vulnerabilities.

They also support the Chief Information Security Officer in the development and implementation of the Information Security Program, which includes the delivery of security assessments, a security policy framework, security architecture, security controls enhancements and a security awareness program.

This role will majorly support the Chief Information Security Officer in coordinating security incident response measures while providing support for Threat and Security Risk Assessments.

Here are some of the things you can expect to do in this role: Vulnerability Management Risk Management and Compliance Security Incident Management Security Consultation, Security Assessments,



and Security Audits Support development and maintenance of the Information Security Program Security Awareness Training Qualifications To help us learn more about you, please provide a cover letter and resume describing how you meet the following required qualifications: Completion of a post-secondary degree in Computer Science, Information Systems, or Engineering (or equivalent experience); Industry certifications such as CISSP, Certified Information Systems Security Professional or GISP, GIAC Information Security Professional are preferred; A minimum of five (5) years of relevant experience in IT security or information risk management, including: Preferred experience in a post-secondary or public-sector environment Strong Experience with coordinating security incident investigation and response activities Experience drafting formal security incident reports and incident report templates Experience reviewing and updating security incident response plans, processes, procedures and playbooks Proficiency in security risk analysis and delivery of Threat and Risk Assessment (TRA) reports Sound knowledge of IT, industry security standards and best practices, legal and regulatory requirements for security, and common security controls Experience with the development and enforcement of security policies, standards, procedures and guidelines Demonstrated experience in the application of the ISO/IEC 27001 and 27002, NIST framework of controls Experience with IT audit and compliance frameworks.

Experience with vulnerability management and use of vulnerability management tools such as tenable security center.

Experience with deploying security awareness trainings and phish campaigns Experience with managing and responding to security incidents Robust familiarity or experience with ITIL, COBIT, and other operational and/or IT service management frameworks Experience with system development lifecycles (SDLC) and embedding security assurance into the planning, implementation, testing, and deployment of solutions

📌 Senior Information Security Analyst (Toronto)
🏢 Toronto Metropolitan University
📍 Toronto