Security Analyst

**Security Analyst**

The Security Analyst works in collaboration with all security resources and management to ensure proper coordination and mitigation of identified incidents. Vulnerability first response, threat hunting and automated workflows are also part of the mandate. Moreover, the Security Analyst will take complete ownership of incident response operations, delegate responsibilities and coordinate all actions with stakeholders, including management.

You will be involved in our ongoing transformation from a traditional brick & mortar retailer, to an omni-channel leader and tech-first fashion disruptor.

**Responsibilities**
- Work with the security director or CSO to execute the cyber security roadmap and participate in day to day monitoring of security incidents and escalations;
- Participate in incident response, forensics and investigation activities as needed or requested over security incidents and/or security breaches;
- Coordinate with operational groups and business units to set up identity and access management measures to prevent or detect security incidents or breaches;
- Monitor compliance with information security policies and procedures;
- Provide support in the definition, selection and implementation of IT Security and Business Continuity related controls to the IT Department;
- Communicate organizational objectives; inspire, motivate and train team members to follow and achieve organizational security standards;
- Conduct tests on a current system to determine vulnerable areas;
- Generate security reports to evaluate the efficacy of security systems and policies;
- Work closely with relevant stakeholders to collect and use information for improved business and operational performance;
- Communicate analysis results and make recommendations to relevant stakeholders;
- Document or update policies, and functional or technical requirements;
- Document process workflows when necessary.

**Qualifications**
- Bachelors degree in Computer Science or in a related field;
- Must have a minimum of 5 years of IT security or cyber security operations experience in a medium scale company (1000-5000 employees);
- Certification in Information Security (CISSP, ISC, or CISM) is a great asset;
- Preferably must be in Eastern Time Zone.

**Competencies**
- Experience with specific security domains, including Cloud Security, Incident Reponse, Vulnerability Management, Identity Management, EDR;
- Experience with security related technical tools (Qradar SIEM, Elastic SIEM, Sailpoint IIQ, CyberArk, Okta, MCAS, Carbon Black, etc);
- Good communication skills and ability to work with a technical team;
- Self-motivated and independent worker;
- Results oriented with proactive and methodical approach to problem solving;
- Able to multi-task and work under pressure against tight deadlines and changing priorities.Able to work and report to a project manager or IT manager;
- Must be a team player with ability to work closely with diverse groups and working styles;
- Ability to establish and maintain effective business relationships;
- Flexibility and willingness to work extended hours, when required.

Over and above a competitive salary and bonus plan, registered retirement savings, and flexible group insurance with personalized coverage that meets your needs, you will be at the forefront of a growing organization that understands the importance of investing in people.

You and your family can enjoy our employee discount at Garage and Dynamite, private sample sales throughout the year and many other exciting perks, including a very flexible vacation program.

**Our promise**

No day will be like the last - we aim to be better today than we were yesterday. We are committed to employment equity.