Full-Time

Hours: 40 hours/week

Salary Range: $90,000 - $115,000

The posted salary range reflects varying levels of experience, from professionals developing their expertise to those with several years of directly relevant experience. While the full range represents the potential earnings for the role, it is not typical for new hires to start at the top of the range. Placement within the range is based on qualifications, experience, and alignment with internal equity.

Reporting to the Cloud & Security Architect, the Security Analyst supports the implementation, operation, monitoring, and continuous improvement of cybersecurity controls and practices across Westerkirk Capital Inc. (WCI) and its subsidiaries.

Working closely with the Cloud & Security Architect, subsidiary technology teams, business stakeholders, and external security service providers, the Security Analyst helps protect information assets, identify and manage cybersecurity risks, coordinate remediation activities, and support the effective operation of the enterprise cybersecurity program.

The role supports a broad range of cybersecurity activities, including security monitoring, vulnerability and patch management, incident response, cyber risk management, security awareness, cybersecurity maturity initiatives, and the implementation and ongoing operation of security controls and processes.

The Security Analyst supports both Westerkirk and its subsidiaries. The nature and level of support will vary based on the requirements, resources, technologies, and internal capabilities of each organization and may range from monitoring and advisory support to hands-on coordination and remediation assistance.



The role works collaboratively with subsidiary technology teams and complements their existing responsibilities and capabilities.

The successful candidate will bring practical technical knowledge, sound judgment, robust analytical and communication skills, attention to detail, and the ability to work effectively across multiple organizations. The individual will be comfortable working across technical analysis, operational activities, coordination, documentation, and management reporting.

RESPONSIBILITIES:

Enterprise Security Program

- Support the Cloud & Security Architect in the implementation, operation, and continuous improvement of the enterprise cybersecurity program.
- Review existing and proposed security controls, configurations, standards, and procedures to assess alignment with enterprise requirements and identify opportunities for improvement.
- Support the implementation, operation, and validation of security technologies, policies, standards, controls, and processes across WCI and its subsidiaries.
- Translate cybersecurity assessments, identified risks, findings, and recommendations into practical remediation and improvement activities.
- Collaborate with subsidiary technology teams to support cybersecurity initiatives and improvements.
- Identify opportunities to adopt common security practices and capabilities across the enterprise where appropriate.





Security Operations & Monitoring

- Monitor security platforms, alerts, dashboards, reports, and other security data sources to identify issues requiring investigation or follow-up.
- Coordinate with external Security Operations Centre (SOC), Managed Detection and Response (MDR), and other security service providers to review findings, escalate issues, and track remediation activities.
- Act as a point of coordination among external security providers, Westerkirk, and subsidiary technology teams.
- Review security findings and recommendations, assess relevant business and technical context, identify appropriate ownership, and coordinate follow-up.
- Identify recurring security issues and work with internal teams and service providers to address underlying causes.
- Monitor emerging threats, vulnerabilities, and cybersecurity trends, and communicate relevant findings and recommended actions to the Cloud & Security Architect.
- Monitor vulnerabilities, security exposures, patch status, and associated remediation activities across relevant environments.
- Work with Westerkirk and subsidiary technology teams to prioritize remediation activities based on cybersecurity risk and business impact.
- Track security risks, exceptions, vulnerabilities, findings, and remediation activities through to completion.
- Validate remediation activities and confirm closure of findings where appropriate.
- Identify overdue, recurring, or higher-risk items requiring additional attention or escalation.
- Provide remediation support to technology teams where additional cybersecurity knowledge or capacity is required.

Cybersecurity Maturity & Continuou

📌 Security Analyst (Calgary)
🏢 Westerkirk Capital
📍 Calgary