IT Security Analyst

WCLC is currently looking for a result-driven IT Security Analyst to join our IT Security department in our Winnipeg Office. Reporting to the Team Lead of IT Security, the IT Security Analyst is responsible for ensuring the protection of information assets, including compliance activities, operational responsibilities, and second-level support.

This is a hybrid role, which will work both in our Winnipeg office and remotely from home.

**Key Accountabilities and Responsibilities**:

- Monitor computer networks for security issues and investigate security breaches and other cybersecurity incidents.
- Implement security measures and operate software to protect systems and information infrastructure, including firewalls, privileged access solutions, etc.
- Monitor and analyze logs and events from critical systems and services for suspicious or abnormal events, document security breaches, and assess levels of damage.
- Research security enhancements and make improvement recommendations to upper management.
- Perform periodic threat/risk assessments.
- Participate in the planning and design of enterprise security architecture as well as enterprise security documents (policies, standards, and procedures).
- Maintain detailed knowledge of the cybersecurity industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
- Maintain baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
- In collaboration with IT Departments, evaluate, implement and maintain security features/functions and controls on IT systems.
- Perform periodic vulnerability assessments on new and existing IT systems to identify, document, and mitigate risks on WCLC systems.
- Troubleshoot system, resource, network, and user access as required.
- Liaise with other departments and users regarding information technology security issues/troubles.

**Qualifications**:

- A degree or equivalent education in a related discipline such as Computer Science and/or Technology, Engineering, Network Security, etc.
- Minimum of 5 years experience in a progressive Information Technology environment, preferably in Cybersecurity.
- Experience with Firewalls, Networking Technologies, PAM technology
- Experience with Windows/Linux Operating Systems
- Experience using vulnerability assessment tools
- Experience with SIEM solutions is preferred i.e. LogRhythm
- Working knowledge of risk assessment methodologies and IT Control Frameworks such as NIST, ISO, PCI, CIS, and COBIT.
- Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
- Strong organizational, analytical, and communication skills.
- Ability to effectively prioritize and execute tasks in a high pressure environment
- Security certifications such as CISSP or equivalent
- Certifications in Microsoft, Cisco, Checkpoint, Linux, etc., an asset.
- Team-oriented and skilled in working within a collaborative environment

We offer a challenging, team-oriented work environment, competitive income and benefits, and a good work-life balance.

Western Canada Lottery Corporation (WCLC) is a non-profit organization authorized to manage, conduct and operate lottery and gaming-related activities for its Members, including the governments of Alberta, Saskatchewan, and Manitoba. The Yukon Territory, Northwest Territories, and Nunavut participate as associate members. WCLC's affairs are governed by a Board of Directors consisting of two representatives appointed by each of the Member provincial governments.