Security Analyst

1 month ago


Toronto, Canada Toronto Parking Authority Full time
POSITION SUMMARY

The Security Information Analyst will assist the Toronto Parking Authority with the design, development and implementation of its security awareness plan and security initiatives to help ensure that the best possible measures are in place to maintain secure operations. The role will be focused on executing threat risk and vulnerability analysis (TRVA). In addition, this role will oversee risk remediation activities, in order to enable both operational and project teams to safely and securely manage their departments. This role will also be responsible to help monitor, evaluate and maintain systems and procedures to safeguard TPA information and systems while developing and implementing strategies, policies and procedures for the continued security of the organization.

RESPONSIBILITIES
Threat Monitoring: Continuously monitor network traffic, security alerts, and system logs to identify potential security incidents and vulnerabilities, with a focus on cardholder data protection.
PCI-DSS Compliance: Ensure adherence to PCI-DSS requirements, including maintaining compliance with all relevant standards and controls for handling and protecting cardholder data.
Incident Response: Respond promptly to security breaches or attacks, including investigating and analyzing incidents involving cardholder data, and implementing corrective measures to address any PCI-DSS violations.
Risk Assessment: Conduct regular risk assessments and security audits with a focus on PCI-DSS compliance to identify potential threats and vulnerabilities and recommend mitigation strategies.
Security Measures: Develop, implement, and enforce security policies, procedures, and best practices to enhance overall security and ensure PCI-DSS compliance.
Vulnerability Management: Perform regular vulnerability scans and assessments, addressing identified weaknesses in systems and applications, and ensuring compliance with PCI-DSS requirements.
Compliance Monitoring: Monitor compliance with PCI-DSS controls and procedures, including data encryption, access control, and network security measures.
Documentation: Maintain detailed records of PCI-DSS compliance activities, security incidents, investigations, and responses, and prepare reports for management and regulatory bodies.
Security Awareness: Educate and train staff on PCI-DSS requirements, security best practices, and organizational policies to promote a culture of security awareness and compliance.
Collaboration: Work closely with IT, development, and management teams to integrate PCI-DSS requirements into system designs and operational procedures.
Tool Management: Utilize and manage security tools and technologies, including firewalls, intrusion detection systems, and encryption software, to safeguard the organization’s digital assets in compliance with PCI-DSS.
Engage with QSA: Collaborate with Qualified Security Assessors (QSAs) to ensure compliance with PCI-DSS standards, prepare for formal assessments, and address any identified gaps or recommendations.

QUALIFICATIONS:
Bachelor's degree in computer science, Information Security, or a related field.
Relevant certification (e.g., CISSP, CEH, CompTIA Security+, PCI Professional) are considered an asset.
Minimum 5 years of experience in an Information Security role.
Minimum 5 years of experience with administration of various security products such as Palo Alto, CrowdStrike, Cisco ASA and Checkpoint, Microsoft Defender, Microsoft Purview and Symantec endpoint protection, Qualys and Tenable network and web application scanner, CIS benchmarks.
Demonstrated knowledge of and/or familiarity with standards and frameworks such as PCI-DDS, ITIL, COBIT, ISO/IEC 31000 series, ISO/IEC 27000 series, SOC 2.
Demonstrated experience in undertaking security threat and risk assessment using an industry recognized framework equivalent to the Harmonized Threat and Risk Assessment methodology.
Proven experience with LogRhythm or Splunk solutions.
Previous experience conducting IT audits considered an asset.
Threat Risk Vulnerability Assessment (TRVA) training.
Knowledge of current network, operating systems, hardware, protocols, and standards.
Excellent analytical skills
Demonstrated ability in solving I.T. issues, problems and possessing a sense of urgency.
Demonstrated integrity in dealing with information and issues of a highly confidential and sensitive nature.
Diligent, detail-oriented, and possess a success-driven work ethic. Demonstrates Commitment to Environment, Health & Safety: Manages risks to protect the health and safety of employees and the public.
Able to perform forensic collections of data and to conduct detailed forensic analysis task including data recovery, production of forensic images and compilation of forensic examination reports.
Ability to collect and manage of evidence to ensure that the chain of custody is fully documented in accordance with local statutes and policies.
Experience In use of forensic and data mining tools to collect, search, recover, sort and organize large amounts of information in all phases of an investigation.
A proven team player & ability to interact and work with people with a variety of backgrounds and at different levels within the organization.
Internal candidates: No new or reclassified employee with less than one (1) year’s continuous on the job service may apply.
KrTBYuGkLF

  • Toronto, Ontario, Canada Mjolnir Security Full time

    About Mjolnir SecurityMjolnir Security is a leading provider of security services, seeking highly motivated and detail-oriented individuals to join our team as Cyber Security Analysts.Job OverviewWe are currently hiring two full-time Cyber Security Analysts to work in our Security Operations Center. As a Cyber Security Analyst, you will be responsible for...

  • Security Analyst

    6 months ago


    Toronto, Canada CB Canada Full time

    Security Analyst On behalf of our client in the Banking Sector, PROCOM is looking for a Security Analyst. Security Analyst – Job Description User access provisioning, granting access to banking applications and systems to employees and customers Provisioning access to Employees and Contractors using various applications and platforms ID and Mailbox...


  • Toronto, Ontario, Canada Business Analyst Computer Systems Full time

    At Business Analyst Computer Systems, we are seeking a skilled Business Solutions Specialist to join our team. A key responsibility of this role is to design, develop, and implement business solutions that identify and mitigate security risks, while developing and maintaining company policies. This includes consulting with clients to provide ongoing support...


  • Toronto, Canada CB Canada Full time

    Information Security Analyst On behalf of our client in the Banking Sector, PROCOM is looking for an Information Security Analyst. Information Security Analyst – Job Description Manage assigned security platforms, following clients' procedures if required, which includes: Device health and availability monitoring Device health incident resolution and...

  • Security Analyst

    6 months ago


    Toronto, Canada HTS Engineering - Heat Transfer Solutions Full time

    HTS Engineering Ltd. is the largest independent commercial HVAC manufacturers’ rep in North America, with 20 locations in the US and Canada. HTS has a vibrant look and brand promise -- one that reflects our company-wide commitment to ensure the individual success of all those involved in a project’s HVAC system selection, design, purchase, installation...

  • Security Analyst

    6 months ago


    Toronto, Canada HTS Engineering - Heat Transfer Solutions Full time

    Founded in 2015 in Toronto, Canada, KORE Solutions is a subsidiary company of HTS and an innovative technology solutions and services provider with a strong focus on the HVAC manufacturer’s representative industry. With a variety of offerings including business intelligence software, help service support, and more, KORE delivers end-to-end solutions that...

  • Security Analyst

    4 weeks ago


    Toronto, Ontario, Canada Nasdaq Full time

    Job DescriptionVerafin is a leading provider of cloud-based anti-money laundering solutions to the financial industry.Job Summary: We are seeking a highly skilled Security Analyst to join our team. As a Security Analyst, you will be responsible for analyzing security vulnerabilities and working collaboratively with our cloud operations and infrastructure...


  • Toronto, Canada Mjolnir Security Full time

    We are hiring two full time team members to work rotating shifts including 2nd and 3rd shift and weekends. The position start date is Jan/Feb 2025. **Responsibilities** - SIEM and IPS/IDS monitoring - Documenting security incidents according to defined policies - Research, document, and respond to security incidents in accordance with response time service...

  • Security Analyst

    5 days ago


    Toronto, Canada HITACHI RAIL STS CANADA, INC. Full time

    **About Us** A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get...

  • Security Analyst

    2 weeks ago


    Toronto, Canada Tarion Full time

    **Security Analyst, SA112924** **Department**:Underwriting **Type of Position**: Full Time, Permanent **Location**: 7th Floor, 5160 Yonge Street, Toronto, ON **Reporting to**: Director, Analytics & Security **Work Model**:Hybrid - flexible work schedule _(All remote work must be completed _from your home office within the province of Ontario.)_ **About...

  • Security Analyst

    6 months ago


    Toronto, Canada Tarion Full time

    **Security Analyst, SA012924** **Department**:Underwriting **Type of Position**: Full Time, Permanent **Location**: 7th Floor, 5160 Yonge Street, Toronto, ON **Reporting to**: Director, Analytics & Security **Work Model**: Hybrid - flexible work schedule **About Tarion** Since 1976, Tarion has provided new home warranty protection to more than 2...

  • Junior SOC Analyst

    3 months ago


    Toronto, Canada Mjolnir Security Full time

    Mjolnir provides clients with a suite of highly advanced and AI/ML driven tools and services - Security Ops Center as a Service, Threat Detection and Dark web Threat Intelligence, Digital Forensics, Threat Analysis and Incident Response services, as well as Cyber Security training. Mjolnir supports both corporate and public agencies - and specializes in...

  • Security Analyst

    6 months ago


    Toronto, Canada Aviso Wealth Full time

    **Aviso Wealth**: **The Opportunity**: We’re looking for a Security Analyst to join or Information Security team. This role can be mostly remote, however we will on occasion require you to come onsite to our office at 151 Yonge St, Toronto, ON. Reporting to the Senior Manager of Information Security, the Security Analyst is responsible for ensuring the...


  • Toronto, Canada Mjolnir Security Full time

    **Job Overview**: This role requires the ability to travel across Canada, support clients on-site, and occasionally lift up to 30 lbs during hardware deployments or security equipment setups. **Key Responsibilities**: - Assist in the detection, analysis, and response to security incidents using various security tools and techniques. - Conduct threat...

  • Cyber Security Analyst

    5 months ago


    Toronto, Canada Compest Solutions Inc Full time

    **Cyber Security analyst (Cloud, Security, infrastructure, Finance, Bank)** **Job Description for** **(security tech writers/ security analyst (info security specialist) - 2 Hires -** **(CICS Infrastructure Project)** **Max Rate: $50/hr On Inc** **Location: GTA** **Work Type: Hybrid (3 days in office)** Job description bullets for the security tech...

  • Cyber Security Analyst

    6 months ago


    Toronto, Canada Compest Solutions Inc Full time

    **Cyber Security analyst (Cloud, Security, infrastructure, Finance, Bank)** **Job Description for** **(security tech writers/ security analyst (info security specialist) - 2 Hires -** **(CICS Infrastructure Project)** **Max Rate: $50/hr On Inc** **Location: GTA** **Work Type: Hybrid (3 days in office)** Job description bullets for the security tech...


  • Toronto, Canada Allied Universal Full time

    Physical Security Analyst **Overview**: We are North America's leading security and facility services provider with approximately 300,000 service personnel. At Allied Universal(R), we pride ourselves on fostering a promote from within culture. There are countless examples of individuals who began their career as Security Professionals and today hold...


  • Toronto, Canada Allied Universal® Full time

    Physical Security Analyst **Overview**: We are North America's leading security and facility services provider with approximately 300,000 service personnel. At Allied Universal(R), we pride ourselves on fostering a promote from within culture. There are countless examples of individuals who began their career as Security Professionals and today hold...

  • Security Analyst

    6 months ago


    Toronto, Canada Prenuvo Full time

    **About Us** At Prenuvo, we are on a mission to flip the paradigm from reactive "sick-care" to proactive health care. Our award-winning whole body scan is fast (under 1 hour), safe (MRI has no ionizing radiation), and non-invasive (no contrast). Our unique integrated stack of optimized hardware, software, and increasingly AI, coupled with the...


  • Toronto, Canada CB Canada Full time

    Junior IT Security Analyst - Networks On behalf of our client in the Banking Sector, PROCOM is looking for a Junior IT Security Analyst - Networks. Junior IT Security Analyst - Networks – Job Description Identify security issues and risks, and provide recommendation of mitigation plans Govern the deployment of data security controls that mitigate and...