Cyber Security and Risk Analyst

Halifax Harbour Bridges (HHB) maintains and operates the Angus L. Macdonald and A. Murray MacKay Bridges that span Halifax harbour. With an annual traffic volume of over 34 million crossings, HHB's mission is to provide safe, efficient, and reliable cross-harbour transportation infrastructure cost-effectively. HHB employees take pride in the bridges, and are motivated, results-driven individuals who enjoy challenges and are committed to continuous learning.

The Cyber Security and Risk Analyst reports directly to the IT Supervisor. The Cyber Security and Risk Analyst is responsible for the effective operation of security initiatives and maintain compliance with cybersecurity framework at Halifax Harbour Bridges. These responsibilities include daily cyber security operations support, threat-hunting, incident response and endpoint vulnerability management. The role also entails conducting cyber security risk assessments and taking measures to ensure the effectiveness of cyber security programs. The role supports all HHB departments and colleagues.

**Essential Duties and Responsibilities**
- Assesses security risk, and potential impact on the business, and develops mitigation strategies during transition, testing and implementation.
- Participates in security program assessments and plays a key role in developing annual cybersecurity plans.
- Prioritizes requests, organizes, schedules, and coordinates a variety of activities.
- Contributes to continuous process and workflow development for cyber security initiatives.
- Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement.
- Learns emerging security solutions, and standards adapting to changes in technology.
- Attends courses, conferences, and seminars, webinars and undertakes activities to update and improve operational and technical knowledge and experience.
- Report on KPIs in relation to compliance and effectiveness of the information security controls and ensure the reporting to key stakeholders.
- Update the information risk register with appropriate remediation.
- Assist in the design, development, and implementation of cyber security programs.
- Participate in risk assessments and assist with risk reporting and compliance assessments.
- Participate in the development and implementation of Cyber Security procedures to support established policies. Collaborate with other departments to ensure Cyber Security policies and procedures are followed.
- Proactively identify opportunities for improvement, and make changes as needed to enhance the security posture of the organization.
- Audit and complete information security compliance programs including but not limited to PCI-DSS, ensuring IT activities, processes, and procedures meet defined requirements, policies, and regulations.
- Assist in projects to identify applicable functional and non-functional security requirements, based on the business risk assessment.
- Lead the internal information security awareness program and ensure all staff achieve accreditation.
- Assist in maintaining and administering cybersecurity technologies such as vulnerability assessment, Endpoint Detection/Response (EDR), Network Detection/Respond (NDR), and privilege access management solutions.
- Continuous improvement of security control configurations to enhance threat detection capabilities.
- Monitor and respond to security anomalies detected. Liaise with stakeholders during the in-depth investigation process to determine whether security incidents occurred, identifying the root cause and providing appropriate remediation.
- Assisting with Risk & Compliance efforts by surfacing evidence from cybersecurity tools to satisfy audit queries.
- Assist in conducting security assessment and ethical hacking for simulating security breaches and executes vulnerability testing on-demand basis.
- Assist with the creation, maintenance, and delivery of cyber security awareness training and phishing campaigns to train users.
- Maintain cyber security programs compliance with PCI and other security standards.
- Participate as a member of the Service-Desk support team resolving client-side issues as and when needed.
- Liaising & maintain appropriate relationships with third party vendors.
- Works independently and as a team member.
- Establishes and maintains cooperative working relationships with all those contacted during the course of work.
- Develop a good relationship and trust with users by exhibiting a professional attitude and a welcoming approach to understanding stakeholders’ problems.
- Work with team and various stakeholders to raise awareness of security challenges and make sure risks are mitigated with the expected outcome.
- Nurtures, promotes, and champions HHB’s world-class safety program.
- Establishes and maintains a safety culture throughout the organization.

**Qualifications**
- 1-3+ years of work experience in Information security in an enter