Information Security Analyst

**Buckland**
**Job Posting**
**Information Security Analyst**

*
Organization Overview*
For over 70 years Buckland has been working to help companies across the world experience global trade in a better way. Buckland employs a unique approach to global trade that focuses on combining trusted technologies and talented people that know how to use them. As a customer-focused company, Buckland provides customers with a single source of unmatched Customs Brokerage (Canadian, US, Mexican), Trade Managed Solutions, Freight Forwarding, Trade Technologies and Warehousing/Distribution Services. Buckland strives to provide customized services in a memorable way.

*
Position Summary*
Reporting to the Manager, IT Infrastructure, this position is responsible for the following core functions for the enterprise:
Primary tasks:

- Daily operation and administration of established security systems
- Investigation and remediation of the security incidents and issues
- Design, implementation and maintenance of policies, standards, baselines, guidelines, and procedures as related to information security

Secondary tasks:

- Conducting external and internal information security audits
- Producing and presenting information security reports to non-technical audiences
- Conducting scheduled vulnerability assessments
- Produce and maintain documentation as directly related to information security

*
*
**What we can offer you**
- Competitive salary, benefits package, and matching retirement plan
- A friendly, collaborative work environment
- Opportunities for professional development & ongoing learning
- A chance to be part of a growing organization

*
Key Responsibilities:*
- Participate in the planning and design of enterprise security architecture
- Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures)
- Participate in the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan
- Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
- Recommend additional security solutions or enhancements to existing security
- Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions
- Maintain up-to-date baselines for the secure configuration and operations of all devices under direct or indirect control
- Maintain operational configurations of all in-place security solutions as per the
- Review logs and reports as related to the security posture of all appropriate devices and resources
- Lead and/or participate in investigations into problematic or suspicious activity
- Participate in the design and execution of vulnerability assessments, penetration tests and security audits
- Provide on-call support for all existing security solutions

*
- Essential Skills:

- Proven analytical and problem-solving abilities
- Ability to effectively prioritize and execute tasks in a high-pressure environment
- Ability to conduct research into IT security issues and products as required
- Ability to present ideas in business-friendly and user-friendly language
- Creation of clear and concise documentation
- College diploma or university degree in the field of computer science and/or two years equivalent work experience
- Design/Implement/Manage:

- Zero Trust security architecture
- Least Privilege Access Control
- Security policies within a Windows Server/Active Directory network environment
- Experience:

- Server and network device hardening principles
- Familiarity with ISO27001:2013 ISMS standards
- Managing endpoint security solutions
- Public Cloud Security (Azure)
- Working Technical Knowledge:
*
TCP/IP
- SSH
- SSL/TLS
- RADIUS
- 802.1x
- IPSEC
- Wireless Networks

*
Strong Understanding:

- Windows Server
- Windows Powershell
- Familiarity with vulnerability scanners and SIEM (Rapid7, Carbon Black, Arctic Wolf, etc.)