Information Security Analyst

Information Security Analyst

About Queen's University
Queen’s University is the Canadian research intensive university with a transformative student learning experience. Here the employment experience is as diverse as it is interesting. We have opportunities in multiple areas of globally recognized research, faculty administration, engineering & construction, athletics & recreation, power generation, corporate shared services, and many more.

Come work with us

Job Summary
**A Brief Overview**
Are you passionate about cybersecurity and eager to make a meaningful impact in the Canadian higher education sector? As an Information Security Analyst, you'll play a vital role in protecting the digital environment of a vibrant academic and research community. Reporting directly to the Information Security Officer, you'll help foster a culture of security awareness by delivering engaging training and educational experiences tailored to students, faculty, and staff.

In this dynamic role, you'll contribute to the development and refinement of institutional security policies, standards, procedures, and the overall Cybersecurity Program. You'll also take ownership of enhancing and evolving our Cybersecurity Incident Response Plan, and other related response plans — ensuring our institution is prepared, resilient, and future-ready.

If you're looking for a role where your work supports education, innovation, and research—and where every day brings new challenges and opportunities to grow—this is your chance to be part of something bigger.

This position analyzes security incidents to determine the root cause, identifies actions to threats and breaches, and recommends appropriate tools and countermeasures. This position identifies, collects and analyzes data, and recommends changes for improvement in performance of the information security management program. This position also designs, develops, maintains, and administers security awareness and education materials and associated tools, and develops and maintains reference documents to help others to address questions on commonly-known cybersecurity conditions.

**Job Description**:
**What you will do**:

- Analyzes security incidents to determine the root cause, identify actions to threats and breaches, and recommend appropriate tools and countermeasures.
- Conducts research on threats and emerging security technologies and recommends changes to practices and services.
- Identifies, collects and analyzes data, and recommends changes for improvement in performance of the information security management program.
- Designs, develops and maintains cybersecurity education and awareness programs, educational materials, and associated tools.
- Develops and maintains reference documents on commonly-known cybersecurity conditions.
- Maintains the document repository and associated workflows for security programs, services, and activities.
- Liaises on security matters with other institutions, vendors, and external partners on behalf of the University.
- Prepares, conducts, and participates in business continuity exercises.
- Maintains the cybersecurity incident management and response plan.
- Maintains the data classification standard and associated tools.
- Updates the department website ensuring to reflect current security information and services.
- Other duties as required in support of the department and/or unit.

**Required Education**:

- Four-Year Bachelor Degree or equivalent in Information Technology preferred. In addition, requires trade certification, qualification, or on-going learning to remain ahead of changes in technology or emerging fields

**Required Experience**:

- More than 3 years and up to and including 5 years of experience.
- Experience in information systems security and management tools considered an asset (e.g., Endpoint Protection Management Tools, etc.).
- Experience in data, trend analysis and reporting considered an asset.
- Experience in risk management practices considered an asset (e.g., conducting risk assessments, Financial Risk, Insurance Risk, Credit Risk, Operational Risk, Project Risk, Market Risk, Technology Risk including information Security and/or Cybersecurity, etc.).
- Experience with Microsoft security and compliance tools (e.g. Microsoft 365 Defender, Purview) considered an asset.
- Knowledge of eLearning standards and best practices as well as emerging learning technologies is considered an asset.

**Required Licenses and Certifications**:

- Infosec security certification considered an asset.
- Consideration may be given to an equivalent combination of education and experience.

**Job Knowledge and Requirements**:

- Knowledge of concepts and principles in a specialist field that is typically acquired through a combination of advanced professional or academic qualifications and/or substantial work experience.
- Provide effective consultation and advice on non-straightforward and/or complex issues.
- Interaction with others re