Senior Analyst, Cybersecurity Operations

Description Reporting to the Director, Cyber Security, the Senior Analyst, Cybersecurity Operations will be responsible for supporting Mercer's company-wide cyber security program, operations and projects with a focus on Canada and the US. They will lead cyber incident response and investigations and act as a security champion for IT and other teams. The Senior Analyst, Cybersecurity Operations will utilise hands‑on technical and cyber skills with communication and coordination skills to protect Mercer from cyber threats while meeting the business needs of the company. Responsibilities Supports the cyber security program, operates security tools, and creates, executes and manages security processes. Monitors information security related events, detects and responds to alerts and incidents. Analyses security‑related logs to identify threats, anomalies and incidents. Assesses cyber security exposures of Mercer's information technology systems. Conducts cyber investigations and prepares detailed reports. Leads cyber incident response, works with external IR partners. Conducts cyber investigations, performs and coordinates mitigation activities, performs high‑level forensic analysis, and engages with external cyber security vendors for detailed forensic review checks. Coordinates cyber‑related activities across North American operations, serves as the cyber security expert for the region. Ensures the security of Mercer's data and systems on‑premises and in the cloud. Implements and supports a cloud‑aware security architecture and implements appropriate security tools. Leads the vulnerability management process; remains current with new cyber vulnerabilities, performs vulnerability assessments, analyzes findings, provides detailed reporting, establishes priorities, and implements and coordinates remediation activities. Assists in the development of cyber‑related reports and KPIs. Collects and analyzes data generated by systems and produces required reports and KPIs for designated audiences. Supports the delivery of security awareness programs: develops training and exercises. Builds, plans and runs awareness campaigns, reports on results, and provides recommendations. Supports the development, documentation, testing, implementation, and enforcement of cybersecurity policies, standards, processes, methodologies, and controls. Remains current with cyber security and threat landscape, analyzes industry trends, and identifies potential impact to Mercer's technology systems and operations. Other duties as assigned. Qualifications and Experience Minimum of 3 years of cyber security experience. Bachelor’s degree in Computer Science or other equivalent Information Technology and Cyber Security related studies. An equivalent combination of training and/or experience may be considered. Proven experience in security operations. Security Operations Centre (SOC) experience is an asset. Information security certifications are preferred (CISSP, CISA, GIAC). Experience with delivering end‑user’s security awareness training and tests. Strong knowledge of modern cloud‑based collaboration and productivity tools. Knowledge of Google Workspace is an asset. Demonstrated knowledge of Cyber Security and IT technologies, such as anti‑malware and endpoint protection, firewall, email security, IPS, SEIM, AD, Windows security, network security, disaster recovery, incident response. Knowledge of cyber security industry standards, such as NIST, ISO, CIS, etc. Knowledge of public cloud platforms, relevant security tools and cloud security architecture. Demonstrated ability to influence outcome without direct authority. Ability to explain cyber security risks and concepts to technical and non‑technical audiences. Strong verbal and written communication skills. Excellent interpersonal skills and the ability to work independently and as part of a team. Strong organisational and time management skills with the ability to prioritise and manage several time‑sensitive issues at a time. Ability to apply project management methodology and deliver assigned tasks within scope and schedule. #J-18808-Ljbffr