IT Security Analyst

G.W. Seier founded Vita Health Products in Winnipeg, Manitoba in 1936. Since then, the company has grown from a small mail-order operation selling herbs and patented medicines into one of Canada’s foremost suppliers of over the counter (OTC) pharmaceutical products and natural health products.

Based in Winnipeg - the geographic centre of Canada - and located in the St. Boniface industrial park, IVC Vita Health Products is a vertically integrated manufacturer, marketer, and distributor of a broad line of high-quality, nutritional supplements, and over the counter medications throughout Canada, with over 260,000 square feet of manufacturing, packaging, and distribution facilities.

IVC Vita Health has a long and proven track record of success and continues to demonstrate strong results with consistent growth. IVC Vita Health is part of the IVC Nutrition Corporation of Companies.

At IVC Vita Health understand the importance of a comprehensive benefits package to attract and retain top talent. Our offerings include:

- Competitive salary and performance-based bonuses.
- Company paid health, dental, and vision insurance.
- Retirement savings plan with employer matching.
- 7 Paid Personal Leave Days per year.
- Professional development opportunities and tuition reimbursement.
- Employee assistance programs for mental health and well-being.
- Company-sponsored social events and team-building activities.

Join us at IVC Vita Health and be part of a team that values your contributions and invests in your success. We are committed to creating a workplace where diversity is celebrated, and every team member can thrive both personally and professionally.

**Our Vision: The Canadian partner driving self-care innovation to enrich health.**

Under the direction of the IT Infrastructure Supervisor, the IT Security Analyst is responsible for protecting IVC Vita Health’s computer systems and networks from cyber threats by monitoring the network for security breaches, investigating potential security incidents, and implementing protective measures. This role involves working closely with end-users, technical teams, and external vendors to maintain high-quality IT services and support for business operations.

**Key Responsibilities will include**:

- Work on incidents and troubleshooting to find workarounds to get business back up and running quickly while ensuring the safeguarding of organizational assets.
- Participate in the on-call rotation to ensure IT operational and security support for critical incidents after business hours.
- Assist in the day-to-day operations of the IT department focusing on security technologies, processes, and procedures based on the ITIL framework and best practices.
- Identify vulnerabilities and mitigate these with the tools and reports provided by the company.
- Follow change management processes and procedures to increase quality and efficiency.
- Follow and provide recommendations to improve patch management procedures.
- Maintain Security Technology's business continuity plans and work with the team to ensure continuous DR readiness for all identified Security Technology services.
- Improve operations by identifying gaps, suggesting improvements, and promoting automation opportunities within Security Technologies.
- Coordinate with IT Supervisor and the managed services provider to ensure adequate monitoring and alerting are in place for all security technology services.
- Support fiscal planning for Security Technology by providing the necessary research, information, and recommendations.
- Monitor events generated by various systems, such as antimalware, firewalls, network systems, and equipment.
- Record and follow defined procedures for suspicious events and incidents.
- Perform daily, weekly, and monthly security audits of various systems, including antimalware, firewall and anti-spam policies.
- Document and report deviations from established baselines to the IT Team.
- Educate cybersecurity awareness and best practices within the organization.
- Retain timely awareness of current cybersecurity news, trends, and best practices.
- Research security enhancements and make recommendations to the Information Security Team.

**Qualifications & Experience Required**:

- Experience with IDS/IPS.
- Knowledge and understanding of ITIL framework certification is an asset.
- Knowledge of Security Information and Event Management (SIEM) products or services is an asset.
- Experience with the following:

- Managed enterprise-grade endpoint protection products or services.
- Enterprise-grade vulnerability scanning product or service.
- Enterprise-grade spam filter product or service.
- Active Directory fundamentals (OU structure, objects, etc.).
- Computer networking fundamentals (TCP/IP, DNS, DHCP, routing and switching, etc.).
- Group policy functionality within an organizational domain.
- Excellent problem-solving, communication, presentation, and coaching skills.
- Proficient in using Mi