Senior Information Security Analyst

The role requires an in-depth understanding of Information Security practices as well as a good understanding of Microsoft products (such as Windows, Outlook/Exchange/O365), vulnerability management, anti-virus, identity & access management, network operations (proxy servers, DNS, firewalls, WAN/LAN switches), databases and exposure to DLP systems (such as Proofpoint and Palo Alto).

Involvement in the implementation of new security solutions, including participation in the creation and maintenance of policies, standards, baselines, guidelines, and procedures

Conduct vulnerability audits and assessments and participate in investigations, design, and execution of vulnerability assessments

Monitor computer networks and systems for security issues, penetration tests, and security audits; document any security issues or breaches in line with Lifemark’s information security policies, procedures, and guidelines

Respond to security alerts and work with the appropriate teams to investigate, triage, and resolve issues

Maintain documentation of support processes and infrastructure

Support incident and problem management, escalation, and resolution activities

Implement and test changes in accordance with Change Management procedures

Maintain a commitment to keeping current on the latest technologies, threats, and best practices through training courses and industry events

Manage Helpdesk Tier II/III requests pertaining to information security

Maintain relevant baselines and operational configurations, and review logs for the secure configuration and operation of server, compute, and network devices

Participate in the planning and design of enterprise security architecture, Business Continuity Plan (BCP), and Disaster Recovery (DR) plan

Provide input toward RFPs and security due diligence documents

Participate in client security audits, evidence collection, and tracking of remediation items

Own and track cybersecurity remediation activities aligned with the NIST Cybersecurity Framework, including control-gap validation, evidence collection, action owners, target dates, risk acceptance, and reporting of overdue items

Conduct periodic access and configuration reviews covering privileged accounts, non-human identities, break-glass accounts, firewall rules, cloud service access, and other high-risk controls; document evidence and follow remediation to closure

Perform security reviews of new technologies, vendors, and material changes; document risks, minimum control requirements, and recommendations before implementation or renewal

Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and emerging attacks and threat vectors

Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security

Participate in the deployment, integration, and configuration of new security solutions and enhancements to existing security solutions in accordance with standard operating procedures and enterprise security documentation

Provide after-hours and on-call support when needed

Minimum five years of progressive, hands-on information security experience, including at least two years independently leading security investigations, remediation initiatives, or security control operations in a complex enterprise environment.

Experience with network applications, firewall security, virtual private networking, and SIEM

Experience with cloud hosting platforms (Microsoft Azure preferred)

Knowledge of network and host IDS/IPS

Strong familiarity with data classification concepts and processes

Solid understanding of data loss and data protection processes

Experience with a wide variety of technical solutions focused on data protection and cybersecurity

Experience with Microsoft server and cloud infrastructure, such as Windows Server and Active Directory

Experience with Microsoft 365 security and collaboration tools, including Exchange Online, Teams, SharePoint, OneDrive, Defender, Entra ID, and Purview

Demonstrated experience applying the NIST Cybersecurity Framework and translating framework gaps into prioritized, measurable remediation plans; experience supporting SOC 2 - comparable assurance activities is an asset

Experience assessing third-party, SaaS, and application security risks, including identity and access, data protection, logging, vulnerability management, resilience, and contractual security requirements

Experience in healthcare, another regulated environment, or a large distributed organization is strongly preferred; working knowledge of PHIPA, PIPEDA, and protection of personal health information is an asset

Excellent time management skills

Strong written and verbal communication

Work with different divisions understanding their IT Security needs

Set clear expectations and define key performance indicators for self

Work within a team environment providing insight when appropriate

Superior organizational skills, attention to detail, and ability to prioritize and manage multiple tasks

Ability to successfully interact with non-technical business contacts

Ability to analyze and understand technical information

Ability to effectively prioritize and execute tasks in a high-pressure environment

Ability to conduct research into IT security issues and products as required

Accommodations are available on request for all candidates taking part in any aspect of the recruitment and selection process. Email us at talent at lifemark.ca