Senior Analyst - IT Security

EECOL Electric

Calgary, CAN

Full Time

Senior

5 days ago

ISO 27001Governance, Risk, and Compliance (GRC)Risk AssessmentSecurity Frameworks (NIST, CIS)AuditSecurity Awareness

Free

Job Fit Check

Base Career helps you apply smarter for this job.

Ready to Scan

Key skills for this role

ISO 27001Governance, Risk, and Compliance (GRC)Risk Assessment

We are looking for a Senior Analyst – IT Security with a strong focus on Governance, Risk, and Compliance (GRC) to support ISO 27001 certification and other compliance related activities.
Reporting to the Cybersecurity Manager, the ideal candidate will have a solid understanding of GRC principles, experience in compliance activities, and a proactive approach to assessing and managing information security risks.

Permanent, full time positions, Monday through Friday.
Regular salary reviews and incentive opportunities.
Benefits package including paid time off, comprehensive insurance, health & dental, life insurance, vision care, education assistance, retirement savings plan (Pension, RRSP, TFSA).
Perks including discounts on travel, vehicles, entertainment, shopping.

Support the development, implementation, and maintenance of EECOL’s ISMS in alignment with ISO 27001 standards.
Assist in the preparation and coordination of internal and external audits related to ISO 27001 compliance.
Assist with gap assessment, compliance mapping, and strategic planning for the Canadian Program for Cybersecurity Certification (CPCSC).
Operational support for risk register and risk management activities.
Conduct third party risk assessments and report on findings.
Conduct solution risk assessments, identifying and evaluating information security risks, and recommending mitigation strategies.
Act as a Subject Matter Expert for EECOL’s Cybersecurity Policies and Standards.
Collaborate with cross functional teams to promote a culture of security awareness and ensure compliance with security policies.
Assist with the collection and reporting of metrics in support of the cybersecurity program.
Monitor and ensure compliance with regulatory requirements and industry standards.
Assist the Cybersecurity Manager with security projects and initiatives as needed.
Provide support for Security Awareness activities, including company wide communications, presentations, and phishing campaigns.

Excellent verbal and written communication skills with the ability to convey complex technical concepts to non technical stakeholders.
Post secondary degree (preferred), diploma or certificate with a focus in Computer Science, Engineering, or other Computer Technology disciplines.
Industry recognized cyber security certifications such as CISSP, CISM, CISA or similar is desired.
Minimum of 7+ years of experience in cybersecurity with a focus on governance, risk, and compliance activities.
Strong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS).
Technical expertise in providing guidance on security control implementation.
Experience in developing and implementing security policies and procedures.
Experience with audit and compliance activities.
Knowledge of international legislation related to Cybersecurity responsibilities.
Ability to work well under pressure and manage workload in a fast paced, agile environment.
Ability to collaborate effectively with various stakeholders and departments to achieve outcomes.
Ability to manage own time, priorities and work independently or within a team environment.

EECOL Electric has provided material and technical support for construction, industrial, and residential markets from over 60 locations in Canada since 1919.
Company culture is built on respect, integrity, honesty, and a shared passion for delivering a positive, memorable experience.