Information Security Analyst

Job Description

Current work authorization for Canada is required for all openings.

You will be working on a Hybrid office schedule as part of Fidelity’s dynamic working arrangement.

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

Business Overview:
The Information Security Analyst supports the risk mitigation efforts of the Information Security group primarily through the technical support of the procedures and policies established to safeguard information assets.

What You Will Do:

- Ensure the development life cycle complies with the information security policy requirements on secure coding and secure access controls.
- Tests for compliance with security policies and procedures. May assist in the creation, implementation, and/or management of security solutions.
- Ensure the information security policy requirements are communicated and taken into account by internal Infrastructure & development teams as well as third party vendors.
- Assist with assessment and integration of cloud vendors and SaaS from an Information Security requirements perspective.
- Conduct External Security Reviews on Fidelity vendors who have access to confidential information or perform critical functions.
- Assist in monitoring Fidelity’s Data Loss Prevention (DLP) tool and conduct investigations.
- Assist in conducting Security Training & Awareness.
- Provide assistance for Disaster Recovery (DR) team including support of DR tests.

The Expertise You Bring:

- 2-3 years of relevant experience in financial services industry
- Bachelors in Information Technology, Computer Science or a related discipline or equivalent working experience
- Knowledge of SDLC methodologies and tools. Development background is highly desirable
- Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture
- Understanding of Cloud Security and capabilities of Amazon, Microsoft Azure etc.
- Understanding of industry audit standards, i.e. SSAE-16, FFIEC, and PCI-DSS
- Strong interpersonal skills like being a team player and effective collaborator with many different types of audiences
- Ability to multitask and handle multiple projects
- Strong presentation and written skills

Nice to have:

- Knowledge of Fortify, Veracode, Checkmarks, Appscan, ServiceNow
- CISSP and Cloud Security certification

Some of the ways we’ll help you feel valued and supported as part of our team:

- Flexible working arrangements - 100% remote, hybrid, and in office options
- Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you
- Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy
- Parental leave top-up to 100% of your salary for a period of 25 weeks
- Up to $650 for home office equipment
- Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
- Diversity and inclusion programs, including an active network of Employee Resource Groups
- Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation
- We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.

Fidelity Canada is an equal opportunity employer

Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.


No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.

Why Work at Fidelity?

We are proud to be recipients of the following:
Awards
- Canada's Top 100 Employers
- Greater Toronto's Top Employers
- Canada's Top Family-Friendly Employers
- Canada's Top Employers for You