Enterprise Security Analyst

**Requisition ID**: 154863

Tangerine is Canada’s leading direct bank. We offer flexible and accessible banking options, innovative products, and award-winning Client service. The reason why Tangerine employees come to work each day is to help Canadians live better lives. We focus on making a difference in our communities, and that includes our own internal community. It’s important to us that our employees feel empowered and enthusiastic about belonging to our Orange culture.

The Cyber Security team is responsible for developing, implementing and sustaining Tangerine’s Cyber Security Programs and ensuring Tangerine remains compliant with regulatory expectations and Scotiabank’s policies and standards.
The Enterprise Security Analyst is responsible for many aspects of Tangerine’s Cyber Security programs. The incumbent will be responsible for leading programs such as vulnerability/patch management, security scanning, data loss prevention, and security reporting programs. The Analyst will utilize a risk-based approach in order to produce substantiated, relevant data to be utilized within a regularly produced security dashboard.

**Is this role right for you? In this role, you will**:

- Coordinate security scans on the Bank’s servers and endpoints
- Manage, track and report on identified vulnerabilities and collaborate with stakeholders to remediate and resolve vulnerabilities in a timely manner
- Monitor and respond to data loss alerts
- Review and analyze data loss alerts for effectiveness (rule logic tuning)
- Prepare monthly and quarterly statistical reports summarizing security activities, and tasks performed.
- Administrate and maintain security technology tools and platforms

**Do you have the skills that will enable you to succeed in this role? - We'd love to work with you if you have**:

- Knowledge and experience in monitoring and tracking cyber threats and vulnerabilities
- Knowledge and skill in performing cyber threat and vulnerability impact/risk assessments
- Ability to identify systemic security issues based on analysis of vulnerability and configuration data.
- Knowledge and experience in identifying data loss risk vectors and deploying detection and prevention counter measures.
- Knowledge of computer networking concepts, network protocols and network security methodologies.
- Knowledge of system administration, network and operating system hardening techniques
- Knowledge and experience in security scanning technologies and methodologies (vulnerability scanners, SAST, DAST, SCA, etc.)

**What's in it for you?**
- We have an inclusive and collaborative working environment that encourages creativity, curiosity, and celebrates success
- We provide you with the tools and technology needed to create beautiful customer experiences
- You'll get to work with and learn from diverse industry leaders, who have hailed from top technology companies around the world
- Access to thousands of online and in-person courses so you can brush up on skills or learn new ones
- Career progression opportunities. We hire you for your talent and not just for the job. We want to see you succeed not just in your role but in your career as a whole
- We offer a competitive total rewards package that includes a base salary, a performance bonus, company matching programs (on pension & profit sharing), vacation, personal & sick days, paternity/maternity leave, medical, vision and dental benefits and much more

LI-Hybrid

Location(s): Canada : Ontario : North York

At Tangerine we value the unique skills and experiences each individual brings to the team, and are committed to creating and maintaining an inclusive and accessible environment. If you require accommodation during the recruitment and selection process, please let our Recruitment team know.