Job Description Key Responsibilities Monitor systems, network and applications for security risks.

Work with information security team to plan and enforce security requirements Report to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.

Participate, Investigate, support and document cybersecurity incidents and breaches.

Administer security tools to protect systems, networks and applications.

This includes firewalls, Intrusion detections and prevention systems, security gateways etc.

Assess security requirements and controls during the application development and acquisition process as defined in company’s security policies and standards.

Perform vulnerability assessments and tests to uncover flaws and help technical teams to remediate identified vulnerabilities to maintain high security standards.

Provide support to ongoing external and internal audits and audit remediation on information technology, including generating technical recommendations Develop and maintain security processes and procedures, and support service-level agreements (SLAs) to ensure that security controls are managed and maintained Create, manage and maintain user security awareness program Participate in user access provisioning and de provisioning activities to verify security controls are adhered Conduct security research in keeping abreast of latest security threat landscape and stay abreast with the current information technology trends Develop positive working relationships with various teams involved in security and privacy matters Key Qualifications 5 years of related work experience Strong hands-on experience with tools such as: IDS/IPS, Metasploit, Nexpose, Nmap, Nessus, Wireshark, L0pht

Crack, John the Ripper etc.

In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 27001, NIST Cybersecurity Framework. PCI DSS etc.

Experience with penetration tests and techniques is preferred Proficiency in performing risk, business impact, control and vulnerability assessments Experience in developing, documenting and maintaining security policies, processes, procedures and standards Proficiency in network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts Audit, compliance or governance experience is preferred Strong analytical skills to analyze security requirements and relate them to appropriate security controls.

Robust written and verbal communication skills.

University degree required.

Professional certification such as CISSP, CISA. #LI-Hybrid Salary Range: $59,000.00 - $84,700.00 The actual base salary for this position will depend on several factors, including job-related skills, experience, and education.

In addition to base pay, eligible employees may participate in a discretionary variable incentive plan, results are subject to both individual and company performance.

Please note that this posting is intended to fill an existing vacancy; however, there may be instances where more than one vacancy is available for the same role.

📌 Information Security Analyst (Toronto)
🏢 Foresters Financial
📍 Toronto