Im IT Security and Risk Analyst

7 days ago


Halifax, Canada Nova Scotia Health Authority Full time

**Req ID**:139025**
**Company: Nova Scotia Health**
**Location**:Central** Zone, **Bethune Building - QEII**
**Department**:IMIT SECURITY RISK MGMT-CNS**
**Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)**
**Status: MGMT/NON-Union** **Management/Non Union** Position**
**Posting Closing Date**:22-Aug-22**

Nova Scotia Health is the largest provider of health services in Nova Scotia, with some specialized services also offered to clients throughout Atlantic Canada. We’re on a mission to achieve excellence in health, healing and learning through working together, which is reflected in the hospitals, health centres and community-based programs we operate across the province. Our passionate team of professionals provides a variety of high-quality inpatient and outpatient services including academic, tertiary, and quaternary care, as well as continuing care, primary health care, public health, and mental health and addictions. Join a diverse team of innovators, collaborators and creative thinkers today.

**Responsibilities**:
The IM/IT Security & Risk Analyst (SRA) supports the analysis, classification, and response to cybersecurity risks within an organization. The SRA addresses cybersecurity risk and analyses the potential business and customer risk, aligning processes and controls to the relevant frameworks and internal systems.
- Information Security & Risk Management:
- Ensure security controls are adequate to protect sensitive information systems as defined by the Canadian Centre for Cyber Security Cryptographic Algorithms for UNCLASSIFIED, PROTECTED A, and PROTECTED B Information (ITSP.40.111)
- Align security control recommendations
- Conduct cost benefit analysis on (preventative, detective and responsive) security controls to maximize control coverage and Return on Investment (ROI)
- Ensure technology risks, as well as opportunities gained, are identified and communicated to management and various stakeholders
- Work with various stakeholder to investigate information technology risk with the various stakeholders, providing recommendations and security controls to manage technology risk
- Conduct annual risk assessments
- Identify and consolidate contractual and legal requirements
- Develop information security policies, procedures and standards specific to Nova Scotia Health
- Track the inventory of systems and devices to ensure the vulnerability management function is aligned with asset criticality and data sensitivity
- Notify operational teams on vulnerability status, following up on remediation activities and the target remediation deadlines
- Stay conversant on current advances in all areas of information technology affecting the Healthcare systems (people, processes and technology) concerning vulnerabilities, security breaches or attacks from both insider (malicious or unintentional) and external malicious attacks
- Ongoing evaluation of IM/IT systems ensuring security controls are performing as designed
- Working with IM/IT ensuring compliance with security controls and deficiencies
- Identify defensive steps including network security, firewalls/firewall rules, security software, encryption, identity management, configuration management and logging
- Communicate recommended disaster recovery and business continuity preparations and testing processes
- Support and deliver the Cyber Security Awareness program across IM/IT and other stakeholders utilizing systems and data

**Qualifications**:

- B.Sc. in Computer Science/Information Security/B. Business with Major in Information Technology or 4+ years equivalent experience in an Information Technology and Information Risk Management
- 1-2 years' experience as a Security Analyst or Information Risk Analyst
- The following certifications considered an asset - CISSP, CRISC, CISA, CISM, ISO 31000, HCISPP, ISSMP, GIAC (GSLC), GIAC (GSTRT)
- Strong applied knowledge of:

- Security & Privacy Incident Response & Event Management Processes
- Canadian Privacy Requirements
- Current Security Technologies and Tools
- Cloud Services and Amazon AWS security practices
- Vulnerability Management processes, technologies and practices and information Security Testing & Assessments
- Supply Chain Risk Management
- Risk Assessment methodologies and practices
- Project Management Methodologies (Waterfall and Agile)
- Frameworks: NIST800-53, NIST CSF, ITIL, ISO 27001/02, MITRE ATT&CK(R) COBIT2019, FEDRAMP, CSA CAIQ
- Internal/External Audit Processes

**Hours of Work**:

- Permanent full time position; 70 hours bi-weekly

**Salary Information**:
$31.08 - $38.85 hourly

**Once You've Applied**

Thank you for your interest in this position. Only those applicants selected for an interview will be contacted.

This is a Management/Non Union bargaining unit position. Preference is given to bargaining unit employees for unionized positions. Employees are encouraged to view their seniority hours and dates in their SuccessFactors online prof



  • Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:131508** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **3** position(s)** **Status**:Management/Non Union** P**osition** **Posting Closing Date**:Open Until Filled** Nova Scotia Health is...


  • Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:144663** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Inpatient Core** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)** **Status: MGMT/NON-Union** **Management/Non Union** Position** **Posting Closing...


  • Halifax, Canada NTT Data Services Full time

    **Req ID**: 231836 We are currently seeking a **Information Security Risk Assessment Analyst** to join our team in Halifax, Nova Scotia (CA-NS), Canada (CA). **Job Responsibilities Include**: - Conducting remote/in-person interviews with system owners to get all the required information for assessment and to identify any gaps. - Reviewing system-related...


  • Halifax, Canada NTT DATA Full time

    **Req ID**:231836 We are currently seeking a **Information Security Risk Assessment Analyst** to join our team in Halifax, Nova Scotia (CA-NS), Canada (CA). **Job Responsibilities Include**: - Conducting remote/in-person interviews with system owners to get all the required information for assessment and to identify any gaps. - Reviewing system-related...


  • Halifax, Canada NTT DATA Full time

    **Req ID**: 218011 We are currently seeking a **Junior Security Architecture Risk Assessment Analyst** to join our team in Halifax, Nova Scotia (CA-NS), Canada (CA). **Job Responsibilities Include: - Conducting remote/in-person interviews with system owners to get all the required information for assessment and to identify any gaps. - Reviewing...


  • Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:143277** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Project Services** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)** **Status: MGMT/NON-Union** **Management/Non Union** Position** **Posting Closing...

  • Systems Analyst

    6 days ago


    Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID: 144266** **Company: Nova Scotia Health** **Location: Central** **Zone, Victoria Building - QEII** **Department: IMIT Ambulatory** **Type of Employment**: Hourly FT long-assignment** (100%** FTE) x 2** **position(s)** **Status: MGMT/NON-Union** **Management/Non Union** Position** **Posting Closing Date: 13-Dec-22** Nova Scotia Health is the largest...


  • Halifax, Nova Scotia, Canada Halifax Regional Municipality Full time

    9005BR Enterprise Risk and Insurance Analyst Job Posting Halifax Regional Municipality (HRM) is inviting applications for the permanent position of Enterprise Risk and Insurance Analyst in Legal & Legislative Services. HRM is committed to reflecting the community it serves and recognizing Diversity & Inclusion as one of the Municipality's core...


  • Halifax, Nova Scotia, Canada Shannex Incorporated Full time

    Job Number: J- Job Title: Cyber Security Analyst Job Category: Information Technology Job Type: Permanent Full Time Date Posted: March 20, Closing Date: April 20, Number of Positions: 1 Job Description If you take pride in being compassionate, honest, professional and safe, consider an exciting and rewarding career at Shannex. Our communities offer...

  • Systems Analyst

    2 weeks ago


    Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:140364** **Company: Nova Scotia Health** **Location**:Provincial** **Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Process, Learning & Change Services** **Type of Employment**:Temporary** **Hourly FT long-assignment** **(**100%** **FTE) x **1** **position(s)** **Status: MGMT/NON-Union** **Management/Non Union**...

  • Security Site Manager

    3 weeks ago


    Halifax, Canada Industrial Security Full time

    Reporting to the Operations Manager of Industrial Security Limited (ISL), the Security Site Manager will lead and oversee 24/7 security operations at the Irving Shipyard Inc (ISI) in Halifax and Dartmouth, Nova Scotia. This critical role involves managing a dynamic team of Security Officers stationed in various locations in Halifax and Dartmouth, ensuring...

  • Imit Analyst

    7 days ago


    Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:156337** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Process, Learning & Change Services** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)** **Status: MGMT/NON-Union** **Management/Non Union** Position** **Posting Closing...

  • Systems Analyst

    4 days ago


    Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:180286** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Inpatient Core** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)** **Status**:Management/Non Union** P**osition** **Posting Closing Date**:31-May-24** Nova Scotia...


  • Halifax, Canada NTT DATA Full time

    **Job Description**: INDIST Req ID: 226024 We are currently seeking a Information Security Risk Assessment Integrator to join our team in Halifax, Nova Scotia (CA-NS), Canada (CA). **Job Responsibilities Include**: - Conducting remote/in-person interviews with system owners to get all the required information for assessment and to identify any gaps. -...

  • Security Officer

    3 weeks ago


    Halifax, Canada First Defence Security Full time

    **DO NOT CALL OUR OFFICE DIRECTLY AS WE DO NOT ACCEPT EMPLOYMENT CALLS** **Job Summary** **Responsibilities** - Monitor and patrol assigned areas to ensure safety and security. - Respond promptly to alarms, incidents, and emergencies, ensuring appropriate action is taken. - Conduct regular inspections of premises to identify security risks or breaches. -...


  • Halifax, Nova Scotia, Canada Nova Scotia Power Full time

    Job Title: Cyber Security Risk LeadCompany, Department: Nova Scotia Power, Corp. Sec. & Cyber Risk MgmtLocation: Halifax, NSType of Employment: Regular, Full timeClosing Date: January 6th, 2025We are seeking a highly experienced Cyber Security Risk Lead to join our Cyber Security Leadership team. Reporting to the Manager, Enterprise Cyber Risk, you will lead...


  • Halifax, Nova Scotia, Canada Nova Scotia Power Full time

    At Nova Scotia Power, we are seeking a Cyber Security Risk Lead to join our Cyber Security Leadership team. Reporting to the Manager, Enterprise Cyber Risk, you will lead a team in driving maximum value delivered by our cyber security risk services for all Emera Canadian companies.This role requires an experienced IT/OT team lead or risk professional with a...


  • Halifax, Nova Scotia, Canada Nova Scotia Health and IWK Health Full time

    Click here to apply as an internal applicant. Req ID: 199181Location: Central Zone, Abbie J. Lane Memorial Building - QEII  Department: IMIT Voice ServicesType of Employment: Temporary Hourly FT long-assignment (100%) x 1 Management/Non Union PositionPosting Closing Date: 1-Apr-25Nova Scotia Health is the largest provider of health services in Nova...


  • Halifax, Nova Scotia, Canada Nova Scotia Power Full time

    The OpportunityCompany, Department: Nova Scotia Power, Corp. Sec. & Cyber Risk MgmtLocation: Halifax, NSType of Employment: Regular, Full timeClosing Date: January 6th, 2025We are looking for a Cyber Security Risk Lead to join our Cyber Security Leadership team. Reporting to the Manager, Enterprise Cyber Risk, you will lead a team to drive maximum value...

  • Imit Analyst

    1 week ago


    Halifax, Canada Nova Scotia Health Authority Full time

    **Req ID**:160412** **Company: Nova Scotia Health** **Location**:Provincial** Zone, **Halifax Infirmary Robie Street Entrance - QEII** **Department**:IMIT Business Productivity Training** **Type of Employment**:Permanent** **Hourly FT** (**100%** FTE) x **1** position(s)** **Status: MGMT/NON-Union** **Management/Non Union** Position** **Posting Closing...