Information Security Analyst

2 months ago


Toronto Ontario, Ontario, Canada Hana Bank Canada Full time

Hana Bank Canada is a subsidiary of Hana Financial Group, the largest global financial group in South Korea which operates a domestic and overseas network of over 750 branches in 25 countries. As a leading provider of financial solutions for the Korean community in Canada, our mission of "Growing Together, Sharing Happiness" keeps us focused and grounded as we strive to fulfill our role as a "Solution Provider" for our growing customer base in a rapidly changing financial environment. We aspire to grow with our customers, employees, shareholders and society. We are committed to advancing sustainable growth and fulfilling our social responsibilities.


We are currently searching for the Information Security Analyst to join our Head Office.


The Information Security Analyst will assist the Information Security Officer (ISO) in achieving the overall success of the Information Security and Cyber Risk Management initiatives at the Bank. This role ensures that security-related activities are executed in alignment with the Bank's business strategies and objectives, while adhering to governing regulations, internal policies, and procedures.


Key Responsibilities:

  • Support the Information Security Officer (ISO) in maintaining the Bank’s Security Policy and Procedures in accordance with OSFI regulations and global standards.
  • Assist the ISO in managing periodic penetration tests and vulnerability assessments, and track the status of remediation efforts.
  • Enhance the bank's security posture by regularly reviewing practices and aligning them with the bank’s policies and OSFI regulations under the ISO’s guidance.
  • Establish appropriate security controls for the bank and ensure that all risk assessments are well documented, tracked, and managed under the ISO’s oversight.
  • Implement an endpoint security solution and monitor for suspicious activity.
  • Review and monitor daily security logs, monthly reports, and employee behavior related to data transfer and leakage.
  • Demonstrate expertise in security controls such as network security, logical access management, and data protection, and provide valuable feedback to the first, second, and third lines of business.
  • Identify gaps in the risk assessment process and collaborate with stakeholders to align it with bank standards.
  • Provide security awareness training and share industry best practices with bank employees.
  • Monitor third-party vendors for security risk management and assess their compliance.
  • Perform backup tasks and ad-hoc duties as assigned.


Skills/Competencies:

  • Bachelor’s degree in Computer Science or a related field is required.
  • Either CISA, CISSP, CISM, or equivalent certification.
  • Minimum of 5 years’ experience in Information/Cyber Security, IT Risk Management, IT Operations, or Technology, with at least 3 years focused on Information Security Management within the Financial industry.
  • Knowledge of Cyber Security, Information Security, Compliance and privacy laws in Canadian Financial industry is critical.
  • Experiences relating to IT and Security Governance documents, policies and procedures are required.
  • A strong understanding of Technology and Cyber Risk Management.
  • Experience in End Point Security solution and its implementation.
  • Excellent written and verbal communication skills including the ability to explain technology solutions in business terms.
  • Experiences in Compliance and Industry framework such as ISO 27001, NIST, COBIT, PCI-DSS, SOC , OSFI, FINTRAC, and/or PIPEDA regulations.
  • Excellent communication skills in English; Korean is an asset.


At Hana Bank Canada you’ll join a close-knit and diverse group of professionals and work in a collaborative, supportive environment. You will have the unique opportunity to gain exposure to a global market, make a real impact and grow your career. With a focus on growth, happiness, and customer satisfaction, Hana Bank Canada is a company that truly values its employees.


Hana Bank Canada is an equal opportunity employer.

We value diversity and inclusion in our workplace and are committed to providing fair and unbiased treatment to all employees and applicants. At Hana Bank Canada, we strive to create an environment where everyone feels respected, valued, and supported. We provide reasonable accommodations to individuals with disabilities and ensure that our hiring and employment practices are inclusive and accessible. We encourage individuals from all backgrounds to apply and join our team. Together, we can build a stronger and more inclusive workplace.



  • Toronto, Ontario, Ontario, Canada Infotek Consulting Services Inc. Full time

    Infotek Consulting is searching for several Information Security Analysts to work on a hybrid contract opportunity in Toronto:MUST HAVE: Issue management experience. Project management experience Strong Technical skills Team Lead experience Risk management exp Cyber security exp Governance exp Info sec experience Coupa 3rd party risk experience 3rd party...


  • Toronto, Ontario, Ontario, Canada Astek Full time

    The Astek GroupFounded in France in 1988, Astek is a global player in engineering and technology consulting. With its expertise in various industrial and tertiary sectors, Astek supports its international clients in the intelligent deployment of their products and services, as well as in the implementation of their digital transformation.Since its inception,...


  • Toronto, Ontario, Ontario, Canada Insight Global Full time

    We are seeking a skilled Information Security Business Consultant to join a major bank in Toronto. The ideal candidate will possess strong communication and presentation skills, have experience in documentation of business requirements, investigation, and develop business strategy and be able to oversee the complete project lifecycle. This role also requires...


  • Toronto, Ontario, Ontario, Canada Insight Global Full time

    JOB DESCRIPTIONWe are seeking a skilled Information Security Business Consultant to join a major bank in Toronto. The ideal candidate will possess strong communication and presentation skills, have experience in documentation of business requirements, investigation, and develop business strategy and be able to oversee the complete project lifecycle. This...


  • Toronto, Ontario, Canada The Toronto-Dominion Bank (Canada) Full time

    Job Summary:The Cybercrime Customer Protection Analyst will play a pivotal role on the Cybercrime Customer Protection team to protect TD customers from digital threats. The analyst will provide research, evaluation, assessment, operational, reporting, and/or analytical support on Technology Controls/Information Security related programs and initiatives.Key...


  • Toronto, Ontario, Ontario, Canada Infotek Consulting Services Inc. Full time

    Responsibilities: Provide leadership for the provision of technical expertise in development and support of activities, processes, procedures, and tools for protecting information security with a focus on application securityResearch, design and implement application security solutions and practicesDirect testing of security plansLead the evaluation of new...


  • Toronto, Ontario, Ontario, Canada Infotek Consulting Services Inc. Full time

    Infotek Consulting is searching for an Intermediate Cyber Security Analyst - this is a hybrid contract assignment based in Toronto:Global Technology Control Testing The US cybersecurity and IT risk team oversees and advises on cybersecurity and IT risk matter in the US. The team primary focuses is to ensure the bank's security controls are in line with...


  • Toronto, Ontario, C6A, Ontario, Canada Apex Systems Full time

    Sr Info Security AnalystClient: Big 5 BankLocation: Downtown Toronto. 2 days in officeDuration of Contract/Perm: 6-month rolling contract, up to 2 yearsHours/week: 37.5 hours/weekStart date: JanuaryJob DescriptionKey Responsibilities:Consulting:Review and interpret requirements documentation, architecture diagrams, and solution designs to help determine the...


  • Toronto, Ontario, Ontario, Canada Tundra Technical Solutions Full time

    Job Title: SOC MDR L2 AnalystLocation: Downtown Toronto (onsite 3 days per week)Term: 10-month (extendable) DescriptionOur client is an industry leading firm that serves clients on a variety of specialized projects that help them to work smarter, grow faster and compete better. Why join their contract workforce?- Interesting work: Deliver work that matters...


  • Toronto, Ontario, C6A, Ontario, Canada S.i. Systems Full time

    Int. Information Security Analyst to create a best-practices guidebook on configuring and securing AWS services for our Higher Education client. Duration: 2 months (chance of extension)Location: Downtown Toronto - 50% Hybrid (2 days onsite -week one, 3 days offsite / 3 days onsite - week two, 2 days offsite) Job Responsibilities:This two-month engagement...


  • Toronto, Ontario, Canada Mjolnir Security Full time

    About Mjolnir SecurityMjolnir Security is a dynamic organization dedicated to the field of cyber security. We seek professionals who are passionate about their work and committed to excellence in our Security Operations Center as Cyber Security Analysts.


  • Toronto, Ontario, Canada Mjolnir Security Full time

    About Mjolnir SecurityMjolnir Security is a leading provider of security services, seeking highly motivated and detail-oriented individuals to join our team as Cyber Security Analysts.Job OverviewWe are currently hiring two full-time Cyber Security Analysts to work in our Security Operations Center. As a Cyber Security Analyst, you will be responsible for...


  • Toronto, Ontario, Canada Business Analyst Computer Systems Full time

    At Business Analyst Computer Systems, we are seeking a skilled Business Solutions Specialist to join our team. A key responsibility of this role is to design, develop, and implement business solutions that identify and mitigate security risks, while developing and maintaining company policies. This includes consulting with clients to provide ongoing support...


  • Toronto, Ontario, Canada Royal Bank of Canada> Full time

    Job SummaryRoyal Bank of Canada is seeking an experienced Information Security Analyst to join our team in Toronto, Canada. As a key member of our IT infrastructure support team, you will play a critical role in ensuring the security and integrity of our systems and data.This is a full-time salaried position with a competitive salary range of...


  • Toronto, Ontario, Ontario, Canada Insight Global Full time

    Location: Toronto, 1x/week onsiteLength: 6 months + extensions Required Skills & Experience - 4-8 years of experience as a security risk consultant - Experience working a major category 1 bank within North America - Strong experience assessing security risks, specifically for web applications - Experience with full cycle risk assessments - assessing risks,...


  • Toronto, Ontario, Ontario, Canada Iris Software Inc. Full time

    Iris's direct client, Canada’s Top 5 Bank, is looking to hire a Sr BSA (Capital Markets /Securities Lending) for a long term opportunity at Toronto, ON (Hybrid Position). Please respond back with your most recent resume if you would be interested..!Position: Sr BSA (Capital Markets /Securities Lending)Location: Downtown Toronto, ON (Hybrid...

  • KYC Analyst

    3 weeks ago


    Toronto, Ontario, Ontario, Canada DueDiligence Valens Full time

    Company DescriptionDueDiligence Valens is a leading provider of compliance solutions, recruitment services, and merchant monitoring, dedicated to enabling businesses to navigate regulatory landscapes with integrity and security. Based in Toronto, ON, our mission is to empower clients with the tools and expertise needed for comprehensive due diligence.Role...

  • Business Analyst

    3 weeks ago


    Toronto, Ontario, Ontario, Canada BeachHead Full time

    Working with one of the top financial clients, this role calls for a Business Analyst - Asset Back Securities who will lead and collaborate and build and maintain strong relationships with key partners from across the client (Sales & Trading, Accounting, Technology, and other key groups). This candidate will perform regular/routine processing functions such...


  • Toronto, Ontario, C6A, Ontario, Canada S.i. Systems Full time

    Our client is looking for a Senior Cloud Security Analyst to design, implement and optimize Network security, cloud security controls and features for a PCI compliance program Must Haves:7+ years' experience as a Cloud Security Analyst with a background in DevOpsPractical experience with PCI constraints and compliance for CloudExperience with Network...


  • Toronto, Ontario, Canada GlassHouse Systems Full time

    About the RoleWe are seeking a highly skilled Security Operations Analyst to join our team at Glass House Systems. This role is perfect for someone who is passionate about IT security and wants to make a real impact.